Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAYINFO/0/3130332e3136302e3138302e302f32332d3234203d3e20393833.roa
File:                     3130332e3136302e3138302e302f32332d3234203d3e20393833.roa (raw, json)
Hash identifier:          bSmO+jTWr7YOoJ4NGhuYgKT8sLNYWbbxkJfWN+8zotE=
Subject key identifier:   66:A7:FC:16:35:37:B4:38:13:8A:6B:12:5E:2B:7F:F7:5F:71:B0:B6
Certificate issuer:       /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Certificate serial:       3167535542F5CC53237C1E31198464A178CB2CF2
Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/3130332e3136302e3138302e302f32332d3234203d3e20393833.roa
Signing time:             Mon 11 May 2026 17:18:19 +0000
ROA not before:           Mon 11 May 2026 17:13:19 +0000
ROA not after:            Mon 10 May 2027 17:18:19 +0000
asID:                     983
IP address blocks:        103.160.180.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:67:53:55:42:f5:cc:53:23:7c:1e:31:19:84:64:a1:78:cb:2c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
        Validity
            Not Before: May 11 17:13:19 2026 GMT
            Not After : May 10 17:18:19 2027 GMT
        Subject: CN=66A7FC163537B438138A6B125E2B7FF75F71B0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:b7:d3:4c:d5:37:f5:db:96:48:2f:30:2f:
                    23:f7:6b:83:77:d8:f2:6b:52:83:7a:09:69:98:aa:
                    0a:ac:9a:fd:c9:88:f6:64:d6:7e:9c:61:26:87:fd:
                    02:cf:ad:a2:a2:54:f4:0a:09:eb:9b:99:da:c7:5a:
                    a3:26:64:78:52:67:c0:b9:57:c5:f0:e2:ca:0f:fb:
                    4d:80:b7:7d:5d:4f:6f:d7:bf:3b:55:0e:45:1f:7f:
                    b4:b5:72:f6:46:3d:9d:f8:78:0f:ee:ed:d4:16:13:
                    ff:2c:26:0e:81:6f:97:22:bc:e3:dc:06:84:e9:08:
                    3b:c7:20:b6:b7:23:e4:21:6b:9e:f1:c5:3b:df:60:
                    f4:31:77:99:7d:1c:5f:16:73:19:53:a6:c3:1c:ad:
                    31:52:c6:06:ed:58:96:ae:ab:69:0d:72:c4:c5:83:
                    fa:19:50:e4:1a:4e:64:f7:6a:c5:74:98:c1:66:03:
                    07:00:4e:ab:8a:79:8e:a7:1d:84:9a:58:39:32:08:
                    d6:3e:d8:43:78:5d:b8:26:01:10:2b:2b:31:88:62:
                    ae:80:ec:ff:0a:d1:15:66:e4:19:32:be:dd:d0:b5:
                    5f:8f:58:64:c1:ea:f7:b8:a0:cb:a4:d5:10:b7:7c:
                    8d:12:bc:94:5b:49:68:93:9d:56:af:28:f6:99:c4:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A7:FC:16:35:37:B4:38:13:8A:6B:12:5E:2B:7F:F7:5F:71:B0:B6
            X509v3 Authority Key Identifier:
                keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/3130332e3136302e3138302e302f32332d3234203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:6e:60:99:15:fb:bd:3a:ab:5d:85:67:c5:75:d1:e8:38:
         f7:95:69:db:c9:8c:aa:50:bc:7a:e3:d1:a3:3a:f2:c5:e8:f8:
         cc:ff:16:49:46:fd:4f:40:d5:75:48:4f:d6:cb:c1:4b:36:aa:
         75:82:90:14:34:2e:8b:cb:af:ad:7d:ba:9b:fa:41:d7:c4:3a:
         f2:32:21:f6:9d:b7:d6:95:bc:47:30:40:86:b7:88:22:c8:16:
         f8:95:6f:9d:6e:00:62:cf:a4:25:c1:50:45:10:8e:2c:19:d6:
         10:c2:10:21:10:97:98:eb:2b:81:1f:34:ee:9f:2e:dd:50:b5:
         3c:c4:d0:90:1c:25:78:e2:34:14:f1:48:e4:c1:de:cd:9b:c9:
         99:83:1f:1b:cf:95:25:51:3c:af:21:bc:cf:bf:af:e2:b2:fb:
         9f:e6:18:b1:9e:ce:fb:01:7d:b8:b2:9c:6b:e4:06:4f:44:22:
         5f:99:f0:80:17:e5:d9:0f:c5:df:4d:20:a8:01:ed:31:74:e6:
         67:98:3e:3e:0d:13:96:9f:a9:56:e6:0e:b8:4b:82:4c:f1:af:
         0e:4e:b7:37:ee:8f:4a:69:07:02:97:ef:4c:1b:62:66:69:39:
         c4:db:41:f9:04:7b:d6:04:a7:97:7c:f1:28:3e:0e:e9:10:83:
         e9:8d:c4:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:15:55 2026 by rpki-client