Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LEARNING36/0/3130332e36342e32322e302f32332d3234203d3e203234313632.roa
File:                     3130332e36342e32322e302f32332d3234203d3e203234313632.roa (raw, json)
Hash identifier:          vp18jHFsymMwntPhKjDMhUA6YgN91sjf9Qxya1SYqUU=
Subject key identifier:   64:03:66:97:00:92:E5:32:25:50:42:DA:41:B7:8B:DE:1C:96:D0:E2
Certificate issuer:       /CN=793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1
Certificate serial:       4AB369DC83D214FBDF5673EADB8E4A51589D86FC
Authority key identifier: 79:3B:FA:77:CA:1E:60:6E:DD:43:BA:4D:F2:C8:EA:B6:F3:8E:62:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEARNING36/0/3130332e36342e32322e302f32332d3234203d3e203234313632.roa
Signing time:             Mon 11 May 2026 17:57:17 +0000
ROA not before:           Mon 11 May 2026 17:52:17 +0000
ROA not after:            Mon 10 May 2027 17:57:17 +0000
asID:                     24162
IP address blocks:        103.64.22.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b3:69:dc:83:d2:14:fb:df:56:73:ea:db:8e:4a:51:58:9d:86:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1
        Validity
            Not Before: May 11 17:52:17 2026 GMT
            Not After : May 10 17:57:17 2027 GMT
        Subject: CN=640366970092E532255042DA41B78BDE1C96D0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:5d:e9:3a:2f:ee:0e:0b:92:54:be:2e:ec:
                    90:6f:8c:04:10:38:63:fa:28:f2:d7:17:f0:d7:0c:
                    e3:8e:f7:9f:6e:9a:96:01:34:ee:4e:54:b2:8f:6f:
                    4c:49:ab:ce:54:1c:6c:64:9d:99:c0:34:d8:3c:43:
                    af:1d:d5:73:ed:b2:f2:94:19:d0:6a:bb:35:22:43:
                    52:e9:34:42:90:6c:89:91:5a:0d:dc:38:96:43:28:
                    4d:8c:5c:63:48:d3:2f:52:31:e0:d4:d3:79:e4:03:
                    28:69:7c:c6:63:8f:64:13:e1:bb:71:3c:43:22:0d:
                    c8:0f:28:72:e0:b5:18:c0:5b:aa:02:58:8e:04:ca:
                    19:d1:1e:1a:3f:4c:2a:47:28:0c:74:cd:a3:45:26:
                    a6:35:3f:ff:6c:f2:85:8e:6c:48:34:5a:15:7b:b6:
                    42:15:88:a2:09:aa:fc:ed:d0:b9:58:bf:09:32:71:
                    ae:1b:59:3d:bd:b8:16:2b:d7:33:df:17:fe:64:6c:
                    68:5d:bf:97:a2:d3:29:81:a8:b8:0b:2f:ef:61:82:
                    c8:e4:33:d7:db:29:a0:90:1b:bb:04:d6:e4:a9:55:
                    37:b9:a4:f6:a1:ab:b5:37:92:1a:ef:9a:3b:f5:2c:
                    5d:34:be:ab:fb:45:8e:09:85:80:7b:73:56:39:69:
                    51:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:03:66:97:00:92:E5:32:25:50:42:DA:41:B7:8B:DE:1C:96:D0:E2
            X509v3 Authority Key Identifier:
                keyid:79:3B:FA:77:CA:1E:60:6E:DD:43:BA:4D:F2:C8:EA:B6:F3:8E:62:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEARNING36/0/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/793BFA77CA1E606EDD43BA4DF2C8EAB6F38E62A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEARNING36/0/3130332e36342e32322e302f32332d3234203d3e203234313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:e4:c7:f9:d0:cc:bc:b4:8b:de:97:26:af:c1:a3:fd:87:d6:
         35:50:6d:78:6d:a8:06:8c:ea:28:67:01:c0:e8:19:1b:4c:b0:
         c6:f6:39:12:e5:b5:11:dd:39:7f:ce:28:b7:46:e0:e7:45:b1:
         61:37:83:7d:b5:e8:fb:22:9b:cd:66:fc:bd:04:e1:cd:94:2b:
         f4:00:a8:58:26:01:e7:9d:98:de:7b:21:a7:a0:95:fb:77:a8:
         57:d1:89:9b:cb:c8:bf:94:c4:8a:1d:94:d7:a6:b3:fd:67:39:
         34:27:ad:23:88:b6:d6:f8:cd:fa:6a:80:b5:1b:f8:0d:9b:b6:
         88:85:c8:84:9e:d0:31:3a:ea:fc:3f:df:00:e5:aa:8b:cc:22:
         ee:a5:5c:cf:e2:52:ed:af:b8:80:64:c0:c1:e4:d6:89:75:1b:
         92:58:cb:9e:62:b8:92:d0:5e:6d:cd:00:dd:43:dc:99:63:68:
         24:57:07:b8:aa:c6:0a:95:3e:e4:93:16:96:32:f2:ab:27:42:
         3e:b8:22:e1:8d:6f:3e:d1:22:54:d6:65:9f:4a:bb:45:b2:36:
         04:92:1d:c0:e8:63:d0:75:ec:a9:e9:68:b8:b8:5e:a6:b4:e3:
         0f:72:e1:5b:21:8b:29:50:88:c0:3c:ba:59:7b:79:07:40:2c:
         0e:e2:50:56
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUSrNp3IPSFPvfVnPq245KUVidhvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzQkZBNzdDQTFFNjA2RURENDNCQTRERjJDOEVBQjZG
MzhFNjJBMTAeFw0yNjA1MTExNzUyMTdaFw0yNzA1MTAxNzU3MTdaMDMxMTAvBgNV
BAMTKDY0MDM2Njk3MDA5MkU1MzIyNTUwNDJEQTQxQjc4QkRFMUM5NkQwRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8D13pOi/uDguSVL4u7JBvjAQQ
OGP6KPLXF/DXDOOO959umpYBNO5OVLKPb0xJq85UHGxknZnANNg8Q68d1XPtsvKU
GdBquzUiQ1LpNEKQbImRWg3cOJZDKE2MXGNI0y9SMeDU03nkAyhpfMZjj2QT4btx
PEMiDcgPKHLgtRjAW6oCWI4EyhnRHho/TCpHKAx0zaNFJqY1P/9s8oWObEg0WhV7
tkIViKIJqvzt0LlYvwkyca4bWT29uBYr1zPfF/5kbGhdv5ei0ymBqLgLL+9hgsjk
M9fbKaCQG7sE1uSpVTe5pPahq7U3khrvmjv1LF00vqv7RY4JhYB7c1Y5aVEZAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUZANmlwCS5TIlUELaQbeL3hyW0OIwHwYDVR0j
BBgwFoAUeTv6d8oeYG7dQ7pN8sjqtvOOYqEwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVBUk5J
TkczNi8wLzc5M0JGQTc3Q0ExRTYwNkVERDQzQkE0REYyQzhFQUI2RjM4RTYyQTEu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNzkzQkZBNzdDQTFFNjA2RURENDNCQTRE
RjJDOEVBQjZGMzhFNjJBMS5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzAL
hmJyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0xFQVJOSU5HMzYvMC8zMTMw
MzMyZTM2MzQyZTMyMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM0MzEzNjMy
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBZ0AWMA0GCSqGSIb3DQEBCwUAA4IBAQCA5Mf50My8tIvelyav
waP9h9Y1UG14bagGjOooZwHA6BkbTLDG9jkS5bUR3Tl/zii3RuDnRbFhN4N9tej7
IpvNZvy9BOHNlCv0AKhYJgHnnZjeeyGnoJX7d6hX0Ymby8i/lMSKHZTXprP9Zzk0
J60jiLbW+M36aoC1G/gNm7aIhciEntAxOur8P98A5aqLzCLupVzP4lLtr7iAZMDB
5NaJdRuSWMueYriS0F5tzQDdQ9yZY2gkVwe4qsYKlT7kkxaWMvKrJ0I+uCLhjW8+
0SJU1mWfSrtFsjYEkh3A6GPQdeyp6Wi4uF6mtOMPcuFbIYspUIjAPLpZe3kHQCwO
4lBW
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:07 2026 by rpki-client