Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MITACMDC/0/3130332e31362e3234342e302f32322d3232203d3e203138313739.roa
File:                     3130332e31362e3234342e302f32322d3232203d3e203138313739.roa (raw, json)
Hash identifier:          7gfsjGvmdQGtAgO0An6FiUxxSYVdxi5kO9sx5OvgxYQ=
Subject key identifier:   FF:CF:FF:1E:8C:54:3D:44:A4:53:2D:E1:9E:B4:F2:44:E6:C9:3E:F8
Certificate issuer:       /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial:       632ADF674922EC9719ACB059D11C9674AAF41472
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MITACMDC/0/3130332e31362e3234342e302f32322d3232203d3e203138313739.roa
Signing time:             Mon 11 May 2026 17:03:55 +0000
ROA not before:           Mon 11 May 2026 16:58:55 +0000
ROA not after:            Mon 10 May 2027 17:03:55 +0000
asID:                     18179
IP address blocks:        103.16.244.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2a:df:67:49:22:ec:97:19:ac:b0:59:d1:1c:96:74:aa:f4:14:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
        Validity
            Not Before: May 11 16:58:55 2026 GMT
            Not After : May 10 17:03:55 2027 GMT
        Subject: CN=FFCFFF1E8C543D44A4532DE19EB4F244E6C93EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:ff:db:32:ef:a2:7a:6e:9f:2f:ec:1c:b9:
                    a9:a2:52:48:e8:9a:13:bc:7a:be:d8:b7:3a:90:f4:
                    65:88:e9:3f:3c:20:0c:75:9b:ba:5c:ff:53:65:8f:
                    82:32:10:70:68:03:77:32:18:5b:ec:cb:56:50:57:
                    17:29:ac:37:7a:b0:73:67:36:21:40:47:59:c1:7e:
                    ed:6d:cf:a1:ab:cd:1a:f1:f7:69:de:d4:cd:84:3b:
                    5f:39:fb:5e:4a:40:aa:f5:a6:93:4b:95:1b:ef:06:
                    79:84:e4:67:7c:f6:02:09:b1:33:63:2b:d9:1c:4b:
                    a6:ea:20:07:46:97:97:25:92:5c:44:43:3a:15:98:
                    d0:93:01:e7:a2:8f:74:93:9a:1a:a7:ac:58:8a:f1:
                    82:5e:10:c7:19:bb:26:12:fd:9f:9f:55:74:4b:a0:
                    ad:1a:5c:94:b6:39:63:0a:49:80:cb:72:78:e7:55:
                    29:7a:2c:6c:0c:0e:46:9c:af:24:c1:77:03:a3:4d:
                    5b:a2:a9:45:3d:eb:8c:49:88:e2:13:69:7a:7a:41:
                    3d:a0:4f:4a:ee:85:6f:7d:a3:e6:17:8c:d9:3e:55:
                    00:db:43:bf:51:24:fe:13:78:40:7c:4f:b9:db:45:
                    2b:0e:d5:03:30:a8:17:2c:65:e6:06:12:c9:cd:59:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:FF:1E:8C:54:3D:44:A4:53:2D:E1:9E:B4:F2:44:E6:C9:3E:F8
            X509v3 Authority Key Identifier:
                keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/3130332e31362e3234342e302f32322d3232203d3e203138313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:85:c3:d3:76:35:5c:22:7e:38:d4:77:08:0e:53:7e:3d:e3:
         95:f8:63:13:6c:56:bb:7d:12:e5:08:f2:d0:96:8b:57:5d:ae:
         77:aa:0f:52:95:87:15:57:f9:9f:52:1f:f3:05:d8:26:c3:64:
         bf:7b:d7:88:5f:27:ea:9b:13:19:f8:0c:91:a2:92:83:c5:3e:
         bb:36:53:3a:28:df:23:71:11:32:4a:d9:65:76:2b:18:82:5a:
         73:d1:85:f5:ed:55:c1:a8:d0:29:3f:b0:ee:a4:8d:b7:fc:48:
         1b:27:7f:c4:e8:80:a6:a5:0b:78:bf:d5:00:1b:90:77:81:ec:
         c2:0a:82:d9:57:f2:f2:40:dd:4c:47:99:b0:15:ef:c1:e5:1c:
         fe:69:95:ce:c3:57:4b:6d:73:e7:58:57:71:3b:4e:68:8c:e7:
         95:68:31:24:a5:e7:b2:f5:2a:22:7b:ec:46:45:e5:d0:78:23:
         d9:fb:75:e9:11:54:fb:63:bf:1c:8e:6f:f9:5a:4e:f2:63:d5:
         be:61:a9:ac:fd:19:18:6f:a0:34:65:a1:7d:b2:ab:d3:51:3d:
         15:88:c1:dc:5f:a1:15:dd:ea:4e:aa:00:ed:6e:d7:19:d3:18:
         ff:4d:23:be:31:0a:4b:a7:b3:a5:11:ad:ce:2c:0d:3a:01:e0:
         fd:c9:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:54 2026 by rpki-client