Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e39372e302f32342d3234203d3e2034373831.roa
File:                     3231302e36332e39372e302f32342d3234203d3e2034373831.roa (raw, json)
Hash identifier:          pn2cv1epz4+YzcODeVJzoApSmnZhAv8mJu1ha3dn6eA=
Subject key identifier:   F3:0A:BD:57:AB:ED:87:35:6F:CC:DF:9B:4E:5B:98:37:2B:6C:92:15
Certificate issuer:       /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial:       5E75DD2351EE000316CCC47F8E7A81AFF076F173
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e39372e302f32342d3234203d3e2034373831.roa
Signing time:             Mon 11 May 2026 17:06:35 +0000
ROA not before:           Mon 11 May 2026 17:01:35 +0000
ROA not after:            Mon 10 May 2027 17:06:35 +0000
asID:                     4781
IP address blocks:        210.63.97.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:75:dd:23:51:ee:00:03:16:cc:c4:7f:8e:7a:81:af:f0:76:f1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Validity
            Not Before: May 11 17:01:35 2026 GMT
            Not After : May 10 17:06:35 2027 GMT
        Subject: CN=F30ABD57ABED87356FCCDF9B4E5B98372B6C9215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b5:a2:d0:bf:a6:f1:7c:2d:a2:38:1b:e3:2c:
                    3c:08:4d:71:6c:da:c7:4c:37:e7:d6:59:7c:17:75:
                    cc:8d:f5:8f:28:fc:0b:6d:62:fa:2b:5f:e3:c0:d2:
                    e6:6f:2c:10:20:af:17:74:7d:8f:7f:35:eb:55:13:
                    d3:88:69:8a:b7:b4:a6:ce:66:6f:61:a4:75:a6:25:
                    94:ce:7f:b4:ef:ff:4c:76:ef:af:e6:0d:08:b4:28:
                    ba:e4:b0:d2:96:d2:2b:5c:b5:9b:70:90:2c:1e:e8:
                    fe:8a:c4:c5:53:97:db:ad:3c:72:d9:a4:f0:d3:13:
                    26:8b:b8:02:7e:3a:02:c8:62:29:7a:de:a7:02:68:
                    21:07:54:05:d5:79:12:31:57:49:c5:34:94:b3:8d:
                    b5:0f:4e:bc:10:56:2e:06:94:ce:9c:3a:3d:85:89:
                    28:a4:a4:0e:60:18:53:e5:da:17:d7:6c:4b:58:10:
                    dc:26:1e:dd:09:41:68:24:4d:ab:75:ba:08:8f:58:
                    f2:8d:f3:fd:3d:da:cc:bc:d1:ba:ec:47:a0:ca:81:
                    99:08:25:56:12:83:dd:1e:7a:8f:74:32:b6:38:20:
                    fc:cc:6e:89:3f:d1:c6:4f:97:0d:6a:d9:b0:09:ea:
                    91:ce:19:30:01:3d:59:52:62:fd:03:d7:34:a0:ac:
                    36:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0A:BD:57:AB:ED:87:35:6F:CC:DF:9B:4E:5B:98:37:2B:6C:92:15
            X509v3 Authority Key Identifier:
                keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e39372e302f32342d3234203d3e2034373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:ee:3e:88:4f:15:09:8b:0a:cd:22:9c:4b:3d:a1:13:6d:
         52:e2:85:94:8b:ef:c2:1d:a3:54:12:b3:9e:ab:8a:08:0a:cd:
         d4:18:89:33:fd:17:82:50:f5:74:ad:45:0c:3d:42:a8:2a:de:
         40:9f:16:24:31:8f:e5:a0:e1:06:e6:b8:6f:ec:68:47:94:f3:
         e0:00:7e:18:c6:0e:87:83:4f:93:d8:46:44:f5:0a:22:90:8a:
         ef:c8:1a:07:b1:5c:cc:83:58:0b:09:6b:72:01:fc:ed:f9:e2:
         32:5f:6b:2f:e5:b6:34:8d:06:7c:c2:2f:2d:90:bb:14:b9:d3:
         a2:99:bf:26:56:37:ed:59:f5:d9:9c:9c:22:8d:a3:78:96:ca:
         dd:2f:96:e5:3d:9d:62:4b:41:39:8b:32:58:40:c2:32:ce:bb:
         45:ee:17:3f:95:2e:8e:fc:e2:02:dd:fe:55:ff:7c:d2:2a:9f:
         c4:31:87:41:3e:48:4b:79:69:3c:72:bd:be:18:02:73:10:cb:
         a5:08:87:21:c3:57:ab:c6:7c:1e:91:8c:1b:7c:5b:1f:61:5e:
         25:98:c4:90:f3:9c:c2:dc:e7:43:eb:31:1f:b5:eb:41:c1:7b:
         05:52:fe:6a:99:51:c9:b2:89:a8:75:97:81:5d:70:d5:d5:a8:
         fe:3a:13:6d
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUXnXdI1HuAAMWzMR/jnqBr/B28XMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwQUFGNDc1QkNDMDJDREJCREI0Qzk3NDRFQkUzMUNF
RUVFMzA2RDAeFw0yNjA1MTExNzAxMzVaFw0yNzA1MTAxNzA2MzVaMDMxMTAvBgNV
BAMTKEYzMEFCRDU3QUJFRDg3MzU2RkNDREY5QjRFNUI5ODM3MkI2QzkyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDutaLQv6bxfC2iOBvjLDwITXFs
2sdMN+fWWXwXdcyN9Y8o/AttYvorX+PA0uZvLBAgrxd0fY9/NetVE9OIaYq3tKbO
Zm9hpHWmJZTOf7Tv/0x276/mDQi0KLrksNKW0itctZtwkCwe6P6KxMVTl9utPHLZ
pPDTEyaLuAJ+OgLIYil63qcCaCEHVAXVeRIxV0nFNJSzjbUPTrwQVi4GlM6cOj2F
iSikpA5gGFPl2hfXbEtYENwmHt0JQWgkTat1ugiPWPKN8/092sy80brsR6DKgZkI
JVYSg90eeo90MrY4IPzMbok/0cZPlw1q2bAJ6pHOGTABPVlSYv0D1zSgrDYjAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQU8wq9V6vthzVvzN+bTluYNytskhUwHwYDVR0j
BBgwFoAUEwqvR1vMAs2720yXROvjHO7uMG0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUEFHSUMv
MC8xMzBBQUY0NzVCQ0MwMkNEQkJEQjRDOTc0NEVCRTMxQ0VFRUUzMDZELmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzEzMEFBRjQ3NUJDQzAyQ0RCQkRCNEM5NzQ0RUJF
MzFDRUVFRTMwNkQuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QQUdJQy8wLzMyMzEzMDJlMzYzMzJl
MzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
0j9hMA0GCSqGSIb3DQEBCwUAA4IBAQBbZe4+iE8VCYsKzSKcSz2hE21S4oWUi+/C
HaNUErOeq4oICs3UGIkz/ReCUPV0rUUMPUKoKt5AnxYkMY/loOEG5rhv7GhHlPPg
AH4Yxg6Hg0+T2EZE9QoikIrvyBoHsVzMg1gLCWtyAfzt+eIyX2sv5bY0jQZ8wi8t
kLsUudOimb8mVjftWfXZnJwijaN4lsrdL5blPZ1iS0E5izJYQMIyzrtF7hc/lS6O
/OIC3f5V/3zSKp/EMYdBPkhLeWk8cr2+GAJzEMulCIchw1erxnwekYwbfFsfYV4l
mMSQ85zC3OdD6zEftetBwXsFUv5qmVHJsomodZeBXXDV1aj+OhNt
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:16 2026 by rpki-client