Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHINETEL/0/3130332e3131362e31342e302f32332d3234203d3e203633393032.roa
File:                     3130332e3131362e31342e302f32332d3234203d3e203633393032.roa (raw, json)
Hash identifier:          ngTeNrAtpPC35YX71ipwovbw5e/8zCnuwIl4yirC2Qs=
Subject key identifier:   9E:B6:02:56:F3:BE:0A:73:60:BF:C3:2B:A9:1D:F1:42:7E:A3:AD:4D
Certificate issuer:       /CN=DF363D7461650156F76A26CBA12EB3420DB3D849
Certificate serial:       23101050D4D7FC67DF1E9229C876F721FB621FE3
Authority key identifier: DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHINETEL/0/3130332e3131362e31342e302f32332d3234203d3e203633393032.roa
Signing time:             Mon 11 May 2026 17:26:28 +0000
ROA not before:           Mon 11 May 2026 17:21:28 +0000
ROA not after:            Mon 10 May 2027 17:26:28 +0000
asID:                     63902
IP address blocks:        103.116.14.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:10:10:50:d4:d7:fc:67:df:1e:92:29:c8:76:f7:21:fb:62:1f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF363D7461650156F76A26CBA12EB3420DB3D849
        Validity
            Not Before: May 11 17:21:28 2026 GMT
            Not After : May 10 17:26:28 2027 GMT
        Subject: CN=9EB60256F3BE0A7360BFC32BA91DF1427EA3AD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:53:0b:46:f7:f2:ce:08:f7:e6:2d:e9:82:
                    72:45:90:f1:10:26:0b:8c:6f:77:93:72:01:7b:40:
                    bd:a6:fa:3a:c9:29:4f:44:fb:94:f7:b7:c3:cd:88:
                    86:30:11:7a:49:37:e0:e9:82:49:be:f1:fb:f2:23:
                    0e:4a:92:74:b3:1e:3b:b1:56:1b:73:37:57:47:ee:
                    dc:f4:1a:bd:da:ac:8f:bc:a3:93:cb:50:82:f3:47:
                    6e:9d:e4:11:81:d1:4c:82:7d:ae:91:a6:a1:0e:a3:
                    59:50:20:d9:5f:0a:73:43:6f:d5:9e:e8:15:a4:c3:
                    97:c5:83:31:6c:e3:1c:5f:14:a8:8a:f3:27:e8:ed:
                    5a:1a:91:de:c4:a5:c5:3d:33:cc:73:38:b9:66:16:
                    f5:16:eb:59:9e:46:71:e4:50:d4:8c:05:ef:5c:29:
                    8c:82:62:22:1f:40:44:05:fc:4f:9d:fb:33:f3:46:
                    0e:a5:c2:dd:99:94:f3:fc:b8:59:f4:52:3f:bf:46:
                    5b:b6:80:0e:38:f9:e8:52:1d:54:1c:f8:15:39:1b:
                    2f:2d:78:e4:b4:16:b1:c1:8f:f1:66:5f:6b:96:34:
                    d1:b8:a1:69:af:a1:bf:4b:38:18:8f:03:6b:0a:b2:
                    10:ef:a3:b5:9c:f4:c4:a6:79:1d:b5:a8:29:82:98:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B6:02:56:F3:BE:0A:73:60:BF:C3:2B:A9:1D:F1:42:7E:A3:AD:4D
            X509v3 Authority Key Identifier:
                keyid:DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/3130332e3131362e31342e302f32332d3234203d3e203633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:eb:25:33:5e:13:08:88:d1:a9:66:6d:51:05:c4:8d:6b:31:
         7c:45:7b:e0:fc:a5:a0:a8:89:24:d2:ae:a3:02:7e:32:71:a6:
         67:52:83:c5:26:3c:9f:33:d3:93:38:7b:41:5d:13:3b:d7:ec:
         c5:f7:5b:b9:23:d4:f1:e7:e2:e3:38:b7:bd:c4:c1:aa:d9:cf:
         ee:32:11:c1:81:25:90:56:3e:a1:27:37:0d:19:f1:91:86:11:
         0c:ca:1b:43:d6:de:6f:44:0c:9b:0e:7f:ea:bd:60:85:f1:7c:
         0d:d0:5b:8f:1b:25:2b:1e:ca:f6:ad:54:90:7a:32:58:34:ca:
         3a:70:97:9f:41:7a:e9:d4:0d:10:50:10:7e:27:53:bd:85:77:
         ac:74:11:2b:7e:cc:b0:33:1d:4e:61:d0:9d:65:f1:e9:76:be:
         a3:df:ca:68:31:2b:bb:70:68:a9:43:1f:ef:3c:4f:2b:f6:5c:
         33:9d:fb:d5:19:84:21:9d:8a:db:57:47:78:42:32:46:39:ab:
         56:a6:2c:fe:3b:fc:2e:a3:6e:b4:89:33:11:c5:e6:d0:ef:d2:
         b5:8a:9f:bf:de:28:20:4c:68:64:39:f2:04:ae:39:75:c7:9a:
         75:4b:f6:97:aa:be:0c:77:c0:c0:3c:31:76:46:2d:3d:f7:25:
         7f:3b:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:34 2026 by rpki-client