Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PEGATRON/0/34332e3235312e36302e302f32322d3232203d3e20313331353933.roa
File:                     34332e3235312e36302e302f32322d3232203d3e20313331353933.roa (raw, json)
Hash identifier:          Fbx0OqEIv5m6ZBog8PwdefbQ22WtMBUrm98GLgkCqSE=
Subject key identifier:   1A:55:8F:FF:19:A1:49:E2:47:4E:AE:6A:8E:38:6B:64:1E:23:CC:D2
Certificate issuer:       /CN=E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050
Certificate serial:       0E2A96FE92DFB8D61AED188AE006CF65B73C475B
Authority key identifier: E0:7C:D9:30:6D:C7:52:AC:CC:75:31:CF:5F:B2:DF:A9:B2:8D:60:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PEGATRON/0/34332e3235312e36302e302f32322d3232203d3e20313331353933.roa
Signing time:             Mon 11 May 2026 17:04:59 +0000
ROA not before:           Mon 11 May 2026 16:59:59 +0000
ROA not after:            Mon 10 May 2027 17:04:59 +0000
asID:                     131593
IP address blocks:        43.251.60.0/22 maxlen: 22
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2a:96:fe:92:df:b8:d6:1a:ed:18:8a:e0:06:cf:65:b7:3c:47:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050
        Validity
            Not Before: May 11 16:59:59 2026 GMT
            Not After : May 10 17:04:59 2027 GMT
        Subject: CN=1A558FFF19A149E2474EAE6A8E386B641E23CCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:f3:f0:f4:1f:b0:8b:20:0e:7c:b0:01:7a:
                    56:23:58:5a:f7:ff:01:ad:59:be:04:56:60:c5:64:
                    04:a3:18:7f:a3:3d:d0:9e:ef:0b:ca:4b:e4:81:2e:
                    eb:a9:79:fe:1f:64:6d:18:79:71:ff:6e:99:23:6c:
                    ec:eb:9d:7d:94:7b:03:d7:95:3a:63:df:d7:d3:46:
                    bd:56:18:4a:3e:0a:be:82:52:c2:20:e8:dc:c2:cd:
                    b4:5e:d8:77:eb:82:ac:67:07:9e:19:d5:bf:91:d4:
                    4a:80:9d:7f:eb:ab:b1:b1:95:de:0e:c6:9e:4f:05:
                    0f:b8:73:a0:c2:85:f4:b6:1d:e5:d3:4e:42:1a:3f:
                    a7:93:4a:12:63:c4:95:b8:bd:ed:e5:3b:fd:b4:82:
                    8b:bb:38:f0:6c:70:9c:45:b5:c5:14:77:2e:7c:56:
                    e6:1e:84:dd:25:d8:20:8e:04:97:59:49:47:f9:d9:
                    03:59:9a:95:0f:ea:a0:ca:20:98:48:58:e1:01:46:
                    95:26:31:5e:75:6a:af:64:d9:19:b8:74:9f:8b:a9:
                    8a:bf:1e:02:9b:38:79:a5:13:8d:7d:ff:84:b1:1b:
                    7e:6b:0a:94:d2:02:0f:62:b6:96:fc:f0:7a:05:ed:
                    4b:71:1e:69:6f:f3:d2:ab:46:27:94:6a:7c:b4:7e:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:55:8F:FF:19:A1:49:E2:47:4E:AE:6A:8E:38:6B:64:1E:23:CC:D2
            X509v3 Authority Key Identifier:
                keyid:E0:7C:D9:30:6D:C7:52:AC:CC:75:31:CF:5F:B2:DF:A9:B2:8D:60:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PEGATRON/0/34332e3235312e36302e302f32322d3232203d3e20313331353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:18:87:21:ed:ff:b6:1f:7f:b5:28:7a:c2:1b:bf:45:e0:86:
         d5:60:19:52:05:b0:46:a1:cf:58:67:0f:14:67:e7:15:63:a6:
         29:77:32:92:f6:86:5d:8c:00:79:e4:98:cd:3d:87:1d:e3:40:
         c8:28:9a:7c:0b:e8:43:1b:64:2b:d9:3b:5d:59:29:0c:47:a2:
         4e:57:d7:34:f2:4e:01:bd:72:7d:d1:2d:04:48:55:78:c0:f6:
         cc:0e:2c:e4:8d:49:5c:03:02:96:c4:e4:de:6f:2e:17:f9:d4:
         17:f1:bf:46:0e:70:8c:51:ca:78:8e:47:c9:f3:b3:dc:94:8a:
         c0:f7:95:69:63:3d:23:a8:dc:7a:29:7b:f2:40:6d:79:73:b2:
         f7:d7:4f:9b:fd:3e:f7:74:4a:61:4a:bb:d3:9d:41:b0:d0:a2:
         fc:25:ee:90:46:ae:78:32:47:9d:8f:23:a1:2a:ba:c8:82:2d:
         6b:41:99:c5:9d:6a:9f:41:9e:c5:f1:22:54:33:fb:cb:b0:aa:
         15:d3:4f:14:38:3b:17:49:91:27:c8:3f:25:2f:e7:70:d9:b5:
         83:7c:a4:34:99:ac:8d:15:a8:33:4c:05:f1:f8:33:0d:b0:3e:
         f2:cc:9c:31:fb:7b:91:6b:e2:47:91:11:a8:07:95:a3:9f:9c:
         4e:e2:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:48 2026 by rpki-client