Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e3130302e302f32342d3234203d3e2034373831.roa
File:                     3231302e36332e3130302e302f32342d3234203d3e2034373831.roa (raw, json)
Hash identifier:          YllPOK/7S6GtVHlW+VD5R39QA4TYAM62jJfvSP4GAY4=
Subject key identifier:   24:3A:BC:BD:46:E1:1E:3B:2F:99:13:B8:01:83:01:5C:32:7C:6C:04
Certificate issuer:       /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial:       0F2073C6EC8FF999B011E9ED4170D19CC3CE9D78
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e3130302e302f32342d3234203d3e2034373831.roa
Signing time:             Mon 11 May 2026 17:06:37 +0000
ROA not before:           Mon 11 May 2026 17:01:37 +0000
ROA not after:            Mon 10 May 2027 17:06:37 +0000
asID:                     4781
IP address blocks:        210.63.100.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:20:73:c6:ec:8f:f9:99:b0:11:e9:ed:41:70:d1:9c:c3:ce:9d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Validity
            Not Before: May 11 17:01:37 2026 GMT
            Not After : May 10 17:06:37 2027 GMT
        Subject: CN=243ABCBD46E11E3B2F9913B80183015C327C6C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:d7:e9:2f:e3:9d:eb:70:b6:47:8b:20:62:
                    15:18:c5:90:36:11:1d:e1:ea:8b:36:2b:88:bb:db:
                    f7:31:c4:40:a5:6e:ee:40:a8:ff:17:21:aa:57:c6:
                    c3:9b:d1:c9:60:f9:3c:08:66:df:79:54:b1:96:90:
                    1a:9e:c5:26:3c:ab:df:6d:c0:20:3c:a0:f3:1a:6d:
                    cb:5c:93:e5:6d:71:36:54:54:aa:a9:9e:66:c3:c1:
                    12:9f:79:97:15:38:ad:12:1c:37:88:5d:5d:44:a4:
                    aa:f8:95:a2:9b:e4:7b:85:4a:f0:60:51:35:28:32:
                    b9:ce:04:96:7a:0e:97:73:93:7b:11:c0:14:55:93:
                    8b:1c:2e:51:a8:9b:f4:48:c5:df:33:40:02:e1:ea:
                    af:4f:47:da:1a:e2:b4:eb:e8:57:41:98:46:af:3f:
                    64:d9:ae:d6:04:3f:3a:e7:bd:39:05:e2:96:fd:2c:
                    15:84:7c:0b:c5:ec:cf:d4:f6:c7:d5:6e:4c:81:9f:
                    62:96:e3:dd:44:09:81:2f:a5:79:6e:c6:41:dd:fb:
                    a1:b7:6d:4b:3b:ba:86:ba:d6:c3:cf:e3:e4:82:55:
                    07:44:bb:90:f9:d3:c6:b3:94:9e:0a:39:a2:44:00:
                    7b:63:33:4f:4d:4d:6a:19:39:53:bd:1d:1a:ad:a5:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3A:BC:BD:46:E1:1E:3B:2F:99:13:B8:01:83:01:5C:32:7C:6C:04
            X509v3 Authority Key Identifier:
                keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e3130302e302f32342d3234203d3e2034373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:36:14:f7:7f:23:a1:0d:bf:66:39:2a:12:c4:91:ba:7b:
         7d:10:9d:ad:5f:a8:4f:f0:22:b2:87:b0:d5:94:18:8e:88:34:
         1d:a1:74:79:03:b5:b4:18:0b:18:c7:19:13:1d:82:67:95:e3:
         9e:74:77:c5:af:cf:e7:35:ac:f5:6d:99:cc:bf:39:3a:7a:db:
         ce:bf:ca:87:7a:d5:c8:83:c9:b1:35:01:e7:ea:62:9d:96:69:
         0b:a9:47:87:ce:7e:4b:de:63:0b:0d:84:3f:93:b0:66:68:e6:
         86:a3:f5:87:1e:eb:1f:89:76:8e:71:1c:26:e3:9e:57:04:37:
         ab:0d:68:6e:96:9a:aa:8e:e2:fb:af:14:2f:e1:87:d8:68:30:
         79:96:99:f0:c1:f5:39:4d:20:5b:e5:4b:93:63:50:66:74:89:
         ab:1d:95:62:df:b6:9e:60:de:26:dd:6a:99:68:16:78:19:59:
         1d:d1:d7:ec:a9:aa:c8:01:86:b7:06:d7:81:52:60:dd:aa:d9:
         2f:f1:e8:e7:38:79:4f:f3:ae:0c:9b:bf:4c:f7:51:49:f6:e0:
         24:86:4a:ac:9a:28:df:97:23:75:50:d3:f7:b3:3b:c9:c3:4e:
         fe:d5:11:01:0a:1d:9b:aa:99:ec:06:09:37:f2:39:fe:28:25:
         66:19:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:10 2026 by rpki-client