Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/IMYKL/0/3136302e3139312e342e302f32332d3234203d3e20313438393936.roa
File:                     3136302e3139312e342e302f32332d3234203d3e20313438393936.roa (raw, json)
Hash identifier:          WDQ6isA31vRFBEKAPNTN2h03bliS7XG3+ZDUsxu5ekM=
Subject key identifier:   A7:15:ED:D5:72:19:1E:70:F1:C4:37:05:12:BE:17:C5:A3:29:30:1C
Certificate issuer:       /CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7
Certificate serial:       0E8608B890B0FFADE260FC6499C759576E972910
Authority key identifier: EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IMYKL/0/3136302e3139312e342e302f32332d3234203d3e20313438393936.roa
Signing time:             Mon 11 May 2026 17:55:25 +0000
ROA not before:           Mon 11 May 2026 17:50:25 +0000
ROA not after:            Mon 10 May 2027 17:55:25 +0000
asID:                     148996
IP address blocks:        160.191.4.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:86:08:b8:90:b0:ff:ad:e2:60:fc:64:99:c7:59:57:6e:97:29:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7
        Validity
            Not Before: May 11 17:50:25 2026 GMT
            Not After : May 10 17:55:25 2027 GMT
        Subject: CN=A715EDD572191E70F1C4370512BE17C5A329301C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:cd:fd:8e:8b:42:c3:0d:1a:fe:8b:29:3e:
                    96:c7:de:b3:9b:57:6e:36:44:92:8d:b2:7b:f6:cc:
                    89:74:81:cc:cc:e7:0b:22:22:26:53:34:a9:8a:ec:
                    1e:3f:f2:0a:94:1b:83:20:15:3d:d7:a0:14:a5:1d:
                    cb:c5:a4:6a:d4:ac:a1:79:f0:ae:33:27:62:3d:3c:
                    00:e5:07:6a:24:46:89:04:50:0b:8b:cc:48:ca:86:
                    d2:13:e4:f9:2c:c6:f4:a6:17:81:b2:5c:42:a6:b4:
                    b8:42:82:64:cc:9d:b7:af:2b:5a:a1:f9:41:b5:74:
                    3c:29:e5:14:07:7a:d0:d4:6c:9d:a5:7c:d8:85:8e:
                    c8:d2:7e:7e:3f:0b:e3:e2:a2:5e:57:0f:a8:52:5d:
                    86:1c:ee:44:38:ad:ca:7b:57:59:a7:75:c5:86:e3:
                    f6:79:39:92:08:92:d9:2e:37:89:78:0d:c8:be:2b:
                    51:20:6e:04:ca:a3:43:b0:7d:5e:0f:a9:92:3d:a7:
                    88:c3:7f:f6:92:a0:40:09:da:7e:c6:fd:a8:89:e8:
                    c4:e7:5a:f3:32:bd:fd:27:0b:78:90:5c:d5:97:37:
                    b6:f1:4c:2e:f3:e2:f4:25:d0:c8:10:64:ab:fa:40:
                    db:ad:19:ca:e0:4e:74:1b:c0:5f:a3:32:11:f5:47:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:ED:D5:72:19:1E:70:F1:C4:37:05:12:BE:17:C5:A3:29:30:1C
            X509v3 Authority Key Identifier:
                keyid:EF:1D:10:48:4E:FA:79:AB:C0:18:FA:0E:FA:7F:3B:0C:16:EE:43:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/EF1D10484EFA79ABC018FA0EFA7F3B0C16EE43A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMYKL/0/3136302e3139312e342e302f32332d3234203d3e20313438393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:ef:0a:9e:e4:f3:4f:25:8a:9b:72:9c:a8:b8:5b:ae:33:c9:
         96:99:ee:68:f9:1f:9a:81:f5:61:b3:80:50:40:92:94:d1:4e:
         84:cd:1f:2a:9e:78:e7:02:06:db:e3:f1:2d:50:4a:a1:d1:46:
         ba:21:ba:30:fa:88:58:98:50:c3:ed:e4:60:2f:25:c7:63:ea:
         2e:61:d0:d3:04:ea:b9:e8:e3:7a:84:d9:8c:75:a2:a8:5f:ce:
         b7:4e:37:df:39:35:10:75:9c:f3:b2:89:b0:19:fc:9b:80:57:
         e2:0f:ed:af:c1:e6:b1:bc:7e:02:c1:01:f7:df:dd:a0:42:0f:
         c5:3c:9c:74:ab:0f:12:77:e3:f0:ec:0a:f8:ca:d9:84:23:55:
         8d:f6:9a:7e:be:08:39:af:c5:eb:b7:a6:7f:15:8c:15:63:5b:
         e6:bf:b0:6f:19:27:d3:dd:53:ab:64:f1:c5:18:55:ad:39:85:
         e1:a8:ef:33:17:ae:1b:ee:90:1a:ac:17:ad:f7:cc:78:26:22:
         ae:27:a2:46:80:6f:d0:f5:8b:39:78:24:71:b0:38:37:01:3d:
         2d:81:1e:3b:03:8c:33:63:f9:bf:5c:e0:ba:17:15:c5:a6:90:
         04:3c:07:39:23:60:c8:98:ae:91:1f:cc:b2:4c:60:0c:67:ef:
         a7:f9:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:20 2026 by rpki-client