Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e302e302f31372d3137203d3e2034373832.roa
File:                     3230332e36352e302e302f31372d3137203d3e2034373832.roa (raw, json)
Hash identifier:          aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8=
Subject key identifier:   0C:EB:DC:F4:58:46:08:B1:32:3D:9F:33:09:E7:C3:41:09:69:D6:51
Certificate issuer:       /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Certificate serial:       4476A9D7715EDC74F89DD7D0BE4DE0D5EAEF30A5
Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e302e302f31372d3137203d3e2034373832.roa
Signing time:             Mon 11 May 2026 16:50:18 +0000
ROA not before:           Mon 11 May 2026 16:45:18 +0000
ROA not after:            Mon 10 May 2027 16:50:18 +0000
asID:                     4782
IP address blocks:        203.65.0.0/17 maxlen: 17
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:76:a9:d7:71:5e:dc:74:f8:9d:d7:d0:be:4d:e0:d5:ea:ef:30:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
        Validity
            Not Before: May 11 16:45:18 2026 GMT
            Not After : May 10 16:50:18 2027 GMT
        Subject: CN=0CEBDCF4584608B1323D9F3309E7C3410969D651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:a5:d0:12:ba:61:fb:7b:20:7d:3a:55:29:
                    09:32:bb:76:d4:44:69:a8:05:c1:b3:b7:7a:db:32:
                    e0:aa:12:a4:2d:64:e3:39:0a:b7:4f:19:29:53:bc:
                    d4:a9:34:49:e0:2a:a7:05:59:60:0b:f7:1e:23:fd:
                    6d:a5:7f:ea:ce:1b:a6:9f:a0:a4:e0:9f:a8:99:b9:
                    5b:eb:ed:1b:de:e2:23:15:88:ee:6a:ae:aa:62:40:
                    54:a1:17:db:5f:6d:0f:24:64:a7:68:7f:f1:8a:f3:
                    43:39:19:5f:80:be:44:16:5b:ed:51:8e:51:dd:a4:
                    87:d9:c4:f1:a6:99:e6:e1:6d:28:e6:22:fe:fa:f4:
                    1b:3c:86:11:24:84:9a:7a:fd:fe:52:a7:0b:ed:7b:
                    75:b2:6b:3c:2b:58:0d:ed:ab:63:2b:fb:f2:10:f7:
                    4d:a9:10:e1:fe:9d:59:8f:fd:12:44:ad:ed:73:70:
                    79:36:d0:cc:d6:e6:e9:57:25:2d:b9:6f:6e:f8:0b:
                    90:6c:d3:1d:4f:0d:e5:35:d6:8a:5b:29:68:90:19:
                    19:2f:73:2c:61:f2:d8:1b:e8:cd:36:d8:96:2d:4c:
                    41:0a:da:89:9a:1f:f7:a2:53:97:82:3e:1d:25:fe:
                    dd:61:2d:25:24:a4:76:90:03:a2:49:b3:74:3b:2a:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EB:DC:F4:58:46:08:B1:32:3D:9F:33:09:E7:C3:41:09:69:D6:51
            X509v3 Authority Key Identifier:
                keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e302e302f31372d3137203d3e2034373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.65.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4f:27:fc:86:23:88:e8:10:ea:2b:da:3f:24:5a:74:8c:64:86:
         71:18:9a:14:9b:b8:5f:3b:43:cd:4f:1f:c9:a5:19:84:c7:07:
         16:58:49:1b:c2:6b:d7:60:fd:54:cd:a2:88:9a:f0:25:52:ec:
         17:4f:ad:00:4d:75:37:a3:36:8d:30:0e:82:27:33:c6:ee:61:
         ca:98:34:6c:1c:f1:22:da:c3:a5:e6:5a:76:e8:46:b9:ac:19:
         63:7e:c0:ba:4e:a5:42:b7:3b:e5:92:55:4a:41:55:04:8d:0f:
         45:d9:13:63:ff:bb:c6:e4:a9:51:84:9c:cb:8a:a5:7e:1c:a6:
         b4:c3:bf:33:5a:41:24:03:10:ce:34:01:01:d1:e9:6b:58:19:
         60:fc:cf:6e:e2:e7:ab:a0:4b:d3:87:4b:c5:7c:41:25:ca:bf:
         78:d3:7a:fc:87:83:f7:c2:ca:ff:2a:fe:57:8c:ea:a9:95:ba:
         da:dc:d3:89:1c:bf:b4:ae:4c:74:ae:e7:de:6d:f7:4e:ee:d0:
         d9:f7:0c:19:b7:8a:d4:94:2f:3b:99:b9:49:7e:93:89:d8:19:
         89:a7:1c:ee:1e:63:5b:d6:75:81:3a:fd:17:ec:70:85:f2:20:
         27:9e:da:e3:f5:5c:e9:8d:56:2e:59:3e:67:a3:d8:3a:dd:c2:
         84:54:65:f0
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIURHap13Fe3HT4ndfQvk3g1ervMKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMz
OUI4MTQ1RjAeFw0yNjA1MTExNjQ1MThaFw0yNzA1MTAxNjUwMThaMDMxMTAvBgNV
BAMTKDBDRUJEQ0Y0NTg0NjA4QjEzMjNEOUYzMzA5RTdDMzQxMDk2OUQ2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjKXQErph+3sgfTpVKQkyu3bU
RGmoBcGzt3rbMuCqEqQtZOM5CrdPGSlTvNSpNEngKqcFWWAL9x4j/W2lf+rOG6af
oKTgn6iZuVvr7Rve4iMViO5qrqpiQFShF9tfbQ8kZKdof/GK80M5GV+AvkQWW+1R
jlHdpIfZxPGmmebhbSjmIv769Bs8hhEkhJp6/f5Spwvte3WyazwrWA3tq2Mr+/IQ
902pEOH+nVmP/RJEre1zcHk20MzW5ulXJS25b274C5Bs0x1PDeU11opbKWiQGRkv
cyxh8tgb6M022JYtTEEK2omaH/eiU5eCPh0l/t1hLSUkpHaQA6JJs3Q7Ki77AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUDOvc9FhGCLEyPZ8zCefDQQlp1lEwHwYDVR0j
BBgwFoAUTX+s9eSGHa9FXzG8rrt2Ezm4FF8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRI
TkVULzAvNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RDdGQUNGNUU0ODYxREFGNDU1RjMxQkNB
RUJCNzYxMzM5QjgxNDVGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG
XXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRITkVULzAvMzIzMDMz
MmUzNjM1MmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDM0MzczODMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQHy0EAMA0GCSqGSIb3DQEBCwUAA4IBAQBPJ/yGI4joEOor2j8kWnSMZIZx
GJoUm7hfO0PNTx/JpRmExwcWWEkbwmvXYP1UzaKImvAlUuwXT60ATXU3ozaNMA6C
JzPG7mHKmDRsHPEi2sOl5lp26Ea5rBljfsC6TqVCtzvlklVKQVUEjQ9F2RNj/7vG
5KlRhJzLiqV+HKa0w78zWkEkAxDONAEB0elrWBlg/M9u4ueroEvTh0vFfEElyr94
03r8h4P3wsr/Kv5XjOqplbra3NOJHL+0rkx0rufebfdO7tDZ9wwZt4rUlC87mblJ
fpOJ2BmJpxzuHmNb1nWBOv0X7HCF8iAnntrj9VzpjVYuWT5no9g63cKEVGXw
-----END CERTIFICATE-----