Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa
File:                     3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa (raw, json)
Hash identifier:          HXS3g6IHy5fvIPx/Cj+Gv9JuCHOIZLjL4G976fgKtE0=
Subject key identifier:   E8:AE:96:3C:7F:99:63:A5:12:BF:3C:32:57:E2:8A:70:F3:96:6D:90
Certificate issuer:       /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial:       2B13CD29DF67D0A54FA9BE707D6D627391E62490
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa
Signing time:             Mon 11 May 2026 16:41:49 +0000
ROA not before:           Mon 11 May 2026 16:36:49 +0000
ROA not after:            Mon 10 May 2027 16:41:49 +0000
asID:                     18419
IP address blocks:        203.121.224.0/20 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:13:cd:29:df:67:d0:a5:4f:a9:be:70:7d:6d:62:73:91:e6:24:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
        Validity
            Not Before: May 11 16:36:49 2026 GMT
            Not After : May 10 16:41:49 2027 GMT
        Subject: CN=E8AE963C7F9963A512BF3C3257E28A70F3966D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:b1:59:88:f5:55:84:bf:0c:8c:db:7b:ba:
                    1f:4a:53:83:05:f9:e6:eb:03:ac:41:e8:52:27:32:
                    60:32:8a:1e:54:91:36:62:84:15:ac:a1:c7:07:ed:
                    47:6e:5b:75:e4:89:26:3e:ac:6d:17:24:b1:37:64:
                    c2:81:dc:ff:e4:c6:42:62:44:63:2d:3f:46:71:39:
                    d0:23:c7:a4:e1:79:dd:2d:50:d7:8f:e6:b8:ed:4a:
                    a7:c6:94:50:7f:4e:eb:d0:13:26:eb:c0:28:e7:c3:
                    07:d4:7d:17:2a:14:63:e2:7e:c4:db:e7:b0:b1:a6:
                    bd:a8:3b:7b:5d:01:b1:58:57:e3:f0:71:48:29:55:
                    3d:96:66:49:06:e6:5f:be:e3:f6:85:8d:c3:ee:f0:
                    e8:20:e9:1f:8c:e1:4a:53:4f:68:8d:03:c6:fc:27:
                    bc:02:e5:3b:97:3b:b3:b7:47:09:07:a2:d1:06:e1:
                    65:39:ee:5f:f4:bd:10:e4:d2:38:7c:e8:23:76:7f:
                    c3:43:37:3e:f5:43:a9:18:d9:a9:e3:69:6d:29:a7:
                    17:30:13:0d:13:e3:c1:49:dc:72:ea:53:4f:10:4b:
                    85:7d:5d:66:ba:ae:1c:40:95:09:7f:8b:06:d4:21:
                    a4:3b:c0:36:da:62:41:e5:ac:f6:15:2d:27:6a:db:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:96:3C:7F:99:63:A5:12:BF:3C:32:57:E2:8A:70:F3:96:6D:90
            X509v3 Authority Key Identifier:
                keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.121.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:8d:be:67:ef:3b:78:c4:4f:f8:77:81:d6:dc:74:82:02:a9:
         e0:f0:0c:ff:05:c3:6b:8b:71:8b:73:a6:5e:d6:ab:7d:15:d0:
         a9:f1:d0:32:a8:93:76:5b:a1:9e:30:fd:b3:c1:91:27:d1:8c:
         23:9b:ea:76:18:8f:7d:67:7f:ce:5f:2f:3f:6a:a7:c2:e9:9f:
         6b:c1:44:8b:9c:cc:89:03:18:ad:79:aa:fc:cf:0f:92:b7:51:
         0b:7b:bf:6f:39:1d:57:5b:37:cd:e2:39:1a:d8:b0:3b:ad:f0:
         1d:dc:bf:28:9b:da:30:8e:c5:ef:2a:a6:1b:13:0f:c9:d4:87:
         04:55:fc:38:6e:5c:6e:00:10:d4:4b:a7:4b:4a:64:46:d2:27:
         42:11:e7:b1:30:b0:0e:a0:fb:1c:8a:cb:ef:85:88:22:52:41:
         26:78:ac:06:27:59:29:3d:65:4a:02:1a:6f:9a:ab:4e:a7:bf:
         8c:81:ce:5b:f1:ca:34:7d:05:e8:e6:ef:30:b8:53:eb:09:2f:
         7a:57:56:15:f2:41:08:cb:47:6e:23:fa:d8:f5:12:78:7d:39:
         e1:76:b6:a2:db:b9:a3:ac:77:77:b0:43:d3:fe:aa:a8:ac:a3:
         25:ce:af:fd:b6:d6:16:ce:e2:63:ef:4c:fd:07:49:a4:f0:fe:
         70:9e:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----