Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/JGZ/0/3138302e39342e33302e302f32332d3234203d3e20313530373630.roa
File:                     3138302e39342e33302e302f32332d3234203d3e20313530373630.roa (raw, json)
Hash identifier:          NR6Il7L9iFcamA2lktoW745VgVcaMO4WXmBiIrFz33E=
Subject key identifier:   85:A5:DE:7E:EF:15:C0:BA:F1:52:28:6F:8B:B5:91:C5:FE:1E:B4:96
Certificate issuer:       /CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Certificate serial:       313E74CB1B085FF735FBD5BFA74E2F3201818886
Authority key identifier: 71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JGZ/0/3138302e39342e33302e302f32332d3234203d3e20313530373630.roa
Signing time:             Mon 11 May 2026 17:39:33 +0000
ROA not before:           Mon 11 May 2026 17:34:33 +0000
ROA not after:            Mon 10 May 2027 17:39:33 +0000
asID:                     150760
IP address blocks:        180.94.30.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3e:74:cb:1b:08:5f:f7:35:fb:d5:bf:a7:4e:2f:32:01:81:88:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
        Validity
            Not Before: May 11 17:34:33 2026 GMT
            Not After : May 10 17:39:33 2027 GMT
        Subject: CN=85A5DE7EEF15C0BAF152286F8BB591C5FE1EB496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:30:26:16:d5:5c:78:ed:01:41:cc:b6:8d:
                    71:64:f8:8e:d4:a3:3d:53:88:cf:bd:30:f6:0c:4d:
                    8c:04:6f:31:68:36:b8:a9:2c:ec:a7:be:4a:ed:5e:
                    ae:7f:d9:6f:6f:2c:01:8e:36:72:88:36:48:07:42:
                    ae:1f:ef:b8:35:6f:b5:08:bd:92:cd:4b:85:f5:6e:
                    3b:37:2a:d8:a0:fb:39:59:d2:db:45:ac:8d:df:f8:
                    30:c0:d8:5b:09:8e:fb:eb:25:92:c8:65:a8:05:07:
                    09:0b:da:7a:e7:8a:99:62:05:07:f2:25:84:84:bd:
                    43:d1:77:1e:24:46:61:23:e7:17:83:57:90:b9:0e:
                    b0:b4:41:0d:f3:0b:77:44:da:1d:ea:7a:48:ea:42:
                    21:c4:cf:4b:4a:9c:ed:37:91:2f:da:86:f1:51:0c:
                    33:b9:0a:f2:c7:22:55:dd:f6:f3:1c:09:b7:94:97:
                    62:29:02:ce:15:cd:d3:f6:0a:67:a5:3f:56:54:8d:
                    5c:45:12:6b:c2:89:fa:d9:cb:b5:5a:b0:75:8f:01:
                    f8:ba:e7:7b:24:2d:17:c3:70:1a:87:00:82:3c:3b:
                    74:47:07:af:d5:f6:28:1e:21:07:d6:1e:22:b9:07:
                    65:3d:f0:d5:6f:95:56:b9:cc:02:5e:0a:33:2d:62:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A5:DE:7E:EF:15:C0:BA:F1:52:28:6F:8B:B5:91:C5:FE:1E:B4:96
            X509v3 Authority Key Identifier:
                keyid:71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/3138302e39342e33302e302f32332d3234203d3e20313530373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:e9:71:c3:fc:e0:41:ca:67:25:68:96:ef:fb:53:a4:4f:da:
         25:4a:af:ad:61:b6:57:96:19:41:53:ac:7d:86:eb:8b:93:87:
         fa:7f:aa:64:55:5f:e1:f0:f0:b0:f1:12:e3:2b:9f:21:33:88:
         3d:59:09:3f:d1:63:a4:2a:f0:9f:6d:5b:e4:17:04:78:73:35:
         2a:54:55:d5:08:3b:cc:a0:b1:85:fd:6a:1e:25:81:8d:56:a1:
         cd:5e:2c:69:2e:35:84:b6:09:6e:30:ed:24:19:1d:07:2c:96:
         d6:23:15:95:e0:95:31:b7:c9:a4:7b:6b:c8:07:e6:36:2f:8a:
         31:e3:d6:3e:67:36:72:37:d7:28:f6:e5:f3:ab:92:8d:e1:7e:
         1a:2a:b4:9f:03:c0:0f:17:29:b3:82:09:21:d5:2a:56:f2:3d:
         2e:42:f9:75:e7:79:47:18:ae:4d:e8:13:96:0a:0d:70:61:a8:
         d8:ff:e0:82:ce:44:03:93:f9:bf:f8:ee:6a:e4:4b:0f:9d:59:
         5c:6d:93:63:1a:6e:46:5b:8b:3d:5f:5f:11:ed:a3:7e:cc:97:
         fb:9f:b8:bb:c8:d2:d9:d8:f9:8d:22:01:7d:25:9b:ea:71:79:
         ca:7f:bd:b0:67:47:86:e5:51:bc:9b:ee:0e:dc:08:e9:f9:1b:
         19:7a:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----