Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWINS/0/3231312e37382e38302e302f32302d3234203d3e203137343136.roa
File:                     3231312e37382e38302e302f32302d3234203d3e203137343136.roa (raw, json)
Hash identifier:          e5vDwym6b4PG9xQ/2ko8EBKkmz8V822CH9wDw3sAHbo=
Subject key identifier:   70:10:11:3F:81:E5:63:C8:C3:B6:8C:02:B9:A8:9D:DE:9E:E4:63:9D
Certificate issuer:       /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial:       14BA439C58D2EDEEA71389166BE1523EE98D5924
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWINS/0/3231312e37382e38302e302f32302d3234203d3e203137343136.roa
Signing time:             Mon 11 May 2026 17:01:18 +0000
ROA not before:           Mon 11 May 2026 16:56:18 +0000
ROA not after:            Mon 10 May 2027 17:01:18 +0000
asID:                     17416
IP address blocks:        211.78.80.0/20 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ba:43:9c:58:d2:ed:ee:a7:13:89:16:6b:e1:52:3e:e9:8d:59:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
        Validity
            Not Before: May 11 16:56:18 2026 GMT
            Not After : May 10 17:01:18 2027 GMT
        Subject: CN=7010113F81E563C8C3B68C02B9A89DDE9EE4639D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d0:f2:69:68:da:06:da:26:37:4a:02:2e:91:
                    e6:b5:27:1f:2c:42:3e:a1:d0:8b:f3:e8:28:49:69:
                    fc:5e:8b:1b:13:6b:c4:4c:20:cf:4c:45:6b:5e:86:
                    54:d7:55:8f:d7:d6:0a:b5:6f:95:b4:7d:35:48:27:
                    54:aa:e7:5c:70:28:a2:02:c1:2c:dd:0c:c4:99:6e:
                    b1:2f:99:3e:a2:cd:71:b5:27:eb:5c:04:5d:6a:80:
                    74:ed:d2:f1:17:96:83:cd:12:40:7e:2f:87:ec:1c:
                    27:0f:c8:5b:eb:b8:92:12:3c:29:c3:66:d4:2f:cd:
                    cb:54:b2:25:29:50:7c:40:01:22:e4:21:17:47:db:
                    f1:c7:37:c1:71:95:8b:f9:ab:74:df:3c:a7:4c:41:
                    52:6d:fb:e4:a7:ca:7a:fc:19:23:bb:39:fc:6d:ed:
                    d4:dd:ec:f6:cc:dc:e3:36:e2:e8:71:13:40:23:3b:
                    8b:03:a2:9a:f9:e2:cd:79:83:59:19:a5:4e:2b:5a:
                    58:f0:8d:21:d3:1d:99:bc:c7:20:22:07:6b:b9:3a:
                    5a:d6:0a:15:90:35:75:e1:a9:8f:75:d5:a3:dc:99:
                    ce:00:fc:2f:3a:98:f2:29:6e:a8:81:44:5e:28:5b:
                    08:1e:01:dd:46:3d:b2:d6:1a:8e:35:e7:b8:46:95:
                    1d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:10:11:3F:81:E5:63:C8:C3:B6:8C:02:B9:A8:9D:DE:9E:E4:63:9D
            X509v3 Authority Key Identifier:
                keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/3231312e37382e38302e302f32302d3234203d3e203137343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.78.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:26:4d:f5:3a:e1:d6:3c:66:86:3c:c0:12:d9:2f:be:85:31:
         73:ca:fe:89:65:0f:42:21:1b:43:9b:7c:52:74:7d:47:62:36:
         77:1e:5c:10:d1:a5:56:e5:4f:10:f4:dd:a1:b1:aa:f2:16:ee:
         94:dd:61:70:48:a9:04:91:d6:15:62:32:8a:1a:77:4e:ec:c6:
         31:ce:cd:c0:8f:5e:5b:a3:17:4c:2e:17:f8:61:d4:57:c7:f7:
         65:c3:5a:24:1e:16:cd:62:74:a5:58:6e:eb:ff:eb:c6:c1:9e:
         d2:f2:d7:06:1a:d6:04:e9:5c:51:89:c1:9a:75:95:9e:ba:9a:
         c3:81:30:0a:24:3c:50:39:c0:ce:d4:90:ed:4c:6a:76:17:8c:
         05:25:d1:04:ae:e7:d3:83:92:d6:e1:cf:93:66:89:d0:50:ad:
         a5:39:cb:96:2d:8d:8b:aa:2f:40:46:7f:86:be:da:b9:79:6b:
         4d:f1:13:12:01:09:61:04:9e:4c:02:dc:02:bc:2a:c4:05:5c:
         b3:14:0f:a2:67:4b:f3:ca:aa:d7:93:4f:cd:f5:49:55:c3:41:
         0b:2a:df:cf:7f:d1:3a:bd:2c:a7:15:39:02:13:f1:60:81:3d:
         cb:41:01:db:de:d5:eb:13:97:5f:7d:04:4b:08:66:69:92:36:
         88:73:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----