Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e3132382e302f31392d3139203d3e2034373832.roa
File:                     3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (raw, json)
Hash identifier:          mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A=
Subject key identifier:   7A:7B:73:0B:B1:0B:51:2F:FA:82:62:68:4F:1C:F4:CC:96:F5:11:E3
Certificate issuer:       /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Certificate serial:       58B340154AAFC340B13F3E617E2D0F63B134DC8F
Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e3132382e302f31392d3139203d3e2034373832.roa
Signing time:             Mon 11 May 2026 16:50:19 +0000
ROA not before:           Mon 11 May 2026 16:45:19 +0000
ROA not after:            Mon 10 May 2027 16:50:19 +0000
asID:                     4782
IP address blocks:        203.65.128.0/19 maxlen: 19
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b3:40:15:4a:af:c3:40:b1:3f:3e:61:7e:2d:0f:63:b1:34:dc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
        Validity
            Not Before: May 11 16:45:19 2026 GMT
            Not After : May 10 16:50:19 2027 GMT
        Subject: CN=7A7B730BB10B512FFA8262684F1CF4CC96F511E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:6a:16:e0:31:bf:71:34:42:10:da:dc:e2:
                    4b:4a:49:99:9d:ad:7d:ab:57:a8:3e:67:bf:61:7e:
                    b5:27:76:99:5e:e5:71:10:9a:1d:c1:18:6d:8a:7f:
                    06:ce:ab:3d:2b:6e:0f:3a:54:d5:f5:20:7a:df:d3:
                    f3:cd:bb:41:7d:b9:39:2d:ed:b2:46:c4:cf:d0:62:
                    3e:3f:60:00:27:36:1b:89:da:9c:6a:94:70:10:75:
                    0a:cc:04:48:60:ab:7e:23:87:f8:d6:b3:8c:73:a0:
                    df:8c:0f:52:d4:d9:39:c4:12:cf:d8:8a:39:7e:fe:
                    d8:c2:5b:b8:2e:65:31:8c:8d:4d:5f:82:1c:94:28:
                    0c:bd:b0:4b:88:20:aa:26:c1:66:26:26:b2:e0:c7:
                    26:7c:d6:e4:d3:b3:c9:e9:e7:fb:45:a9:4d:4a:02:
                    31:63:44:ef:cf:fc:49:2c:1b:48:a1:65:8a:2e:92:
                    51:cc:ea:91:43:f0:b3:ee:3a:ad:3d:cf:6f:3b:66:
                    5a:ce:0e:18:18:12:38:70:19:43:b4:42:b7:fa:f3:
                    32:6a:75:39:6d:e7:f2:1f:40:5c:47:e3:c0:f5:a3:
                    e1:9b:22:ae:d7:3d:c3:75:1b:fa:bd:ab:cc:0a:be:
                    d7:90:8d:06:34:2c:da:3f:93:16:be:33:7c:2c:50:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7B:73:0B:B1:0B:51:2F:FA:82:62:68:4F:1C:F4:CC:96:F5:11:E3
            X509v3 Authority Key Identifier:
                keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e3132382e302f31392d3139203d3e2034373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.65.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:f5:7a:2e:93:06:b4:c3:18:a4:d3:5c:65:cd:f1:73:31:a5:
         63:51:f4:ea:f4:28:de:06:e9:d1:1f:e9:55:8a:38:be:bc:75:
         8e:17:31:48:28:80:3c:c7:d6:cd:4f:cb:99:aa:8b:e5:96:09:
         0a:5a:06:ae:7a:1e:3f:01:26:a7:ce:02:eb:e0:62:95:6c:91:
         74:58:e1:1b:11:7c:95:0c:35:69:1e:23:91:e5:8c:15:df:2c:
         27:5f:5c:c8:9d:e4:a1:3e:18:56:4a:a0:85:6e:24:f5:29:af:
         50:e2:5f:8b:e3:7b:53:e3:19:3c:99:71:30:66:8a:5d:08:4e:
         66:22:21:e7:29:07:c7:b9:b2:49:5c:35:2f:12:7f:c6:10:a0:
         10:8f:0e:fe:62:91:7f:cf:92:be:88:f9:13:2c:ca:f9:d8:19:
         69:32:06:64:c7:25:13:b0:01:4a:89:29:c8:f9:1c:b8:2b:9e:
         bd:eb:59:d2:70:a2:75:7c:8c:07:2d:13:81:cd:78:5c:81:dd:
         b1:84:b6:df:20:d0:12:94:aa:5e:1c:85:9c:b6:83:28:b4:93:
         af:fd:b7:2f:15:8d:9f:81:50:df:74:06:3a:d5:eb:6a:a3:32:
         74:de:c7:2d:90:f9:bb:38:32:af:39:ba:96:5c:35:86:96:0e:
         55:31:93:b3
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUWLNAFUqvw0CxPz5hfi0PY7E03I8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMz
OUI4MTQ1RjAeFw0yNjA1MTExNjQ1MTlaFw0yNzA1MTAxNjUwMTlaMDMxMTAvBgNV
BAMTKDdBN0I3MzBCQjEwQjUxMkZGQTgyNjI2ODRGMUNGNENDOTZGNTExRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDWoW4DG/cTRCENrc4ktKSZmd
rX2rV6g+Z79hfrUndple5XEQmh3BGG2KfwbOqz0rbg86VNX1IHrf0/PNu0F9uTkt
7bJGxM/QYj4/YAAnNhuJ2pxqlHAQdQrMBEhgq34jh/jWs4xzoN+MD1LU2TnEEs/Y
ijl+/tjCW7guZTGMjU1fghyUKAy9sEuIIKomwWYmJrLgxyZ81uTTs8np5/tFqU1K
AjFjRO/P/EksG0ihZYouklHM6pFD8LPuOq09z287ZlrODhgYEjhwGUO0Qrf68zJq
dTlt5/IfQFxH48D1o+GbIq7XPcN1G/q9q8wKvteQjQY0LNo/kxa+M3wsUKSNAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUentzC7ELUS/6gmJoTxz0zJb1EeMwHwYDVR0j
BBgwFoAUTX+s9eSGHa9FXzG8rrt2Ezm4FF8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRI
TkVULzAvNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RDdGQUNGNUU0ODYxREFGNDU1RjMxQkNB
RUJCNzYxMzM5QjgxNDVGLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG
YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRITkVULzAvMzIzMDMz
MmUzNjM1MmUzMTMyMzgyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDM3MzgzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBctBgDANBgkqhkiG9w0BAQsFAAOCAQEAKfV6LpMGtMMYpNNcZc3x
czGlY1H06vQo3gbp0R/pVYo4vrx1jhcxSCiAPMfWzU/LmaqL5ZYJCloGrnoePwEm
p84C6+BilWyRdFjhGxF8lQw1aR4jkeWMFd8sJ19cyJ3koT4YVkqghW4k9SmvUOJf
i+N7U+MZPJlxMGaKXQhOZiIh5ykHx7mySVw1LxJ/xhCgEI8O/mKRf8+Svoj5EyzK
+dgZaTIGZMclE7ABSokpyPkcuCuevetZ0nCidXyMBy0Tgc14XIHdsYS23yDQEpSq
XhyFnLaDKLSTr/23LxWNn4FQ33QGOtXraqMydN7HLZD5uzgyrzm6llw1hpYOVTGT
sw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:51:17 2026 by rpki-client