Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SIMPLE/1/3136302e33302e39382e302f32332d3332203d3e2039393233.roa
File:                     3136302e33302e39382e302f32332d3332203d3e2039393233.roa (raw, json)
Hash identifier:          6wVkWs3UMXulNaDAPYa/WT6uRUSwCi/nQxDrgmXkwdo=
Subject key identifier:   16:10:25:8D:1D:62:32:6F:EF:D3:7E:EA:C2:EC:C2:AA:2A:7E:D7:9D
Certificate issuer:       /CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
Certificate serial:       7EE5C539D6953B5F2DD77FC6081C2E4DA6B1E007
Authority key identifier: 27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIMPLE/1/3136302e33302e39382e302f32332d3332203d3e2039393233.roa
Signing time:             Mon 11 May 2026 17:39:35 +0000
ROA not before:           Mon 11 May 2026 17:34:35 +0000
ROA not after:            Mon 10 May 2027 17:39:35 +0000
asID:                     9923
IP address blocks:        160.30.98.0/23 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e5:c5:39:d6:95:3b:5f:2d:d7:7f:c6:08:1c:2e:4d:a6:b1:e0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273D80570A6F8C43816FAC4F615749C9D6D98E96
        Validity
            Not Before: May 11 17:34:35 2026 GMT
            Not After : May 10 17:39:35 2027 GMT
        Subject: CN=1610258D1D62326FEFD37EEAC2ECC2AA2A7ED79D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:b5:23:12:55:6a:6b:2a:df:4f:7e:27:14:
                    9e:0b:50:6a:e0:08:3f:90:06:32:4e:3d:44:24:a5:
                    a7:dc:ca:2b:be:45:16:e9:33:7b:6a:27:58:57:1a:
                    2c:90:81:83:e7:df:9c:aa:47:a6:23:b1:b0:15:4f:
                    a2:49:fc:9d:d6:ae:c2:9e:fd:b8:38:4a:3e:0f:2a:
                    90:cc:89:3e:5b:ee:f1:d1:08:a6:48:33:92:b4:8e:
                    f1:31:13:53:21:67:6b:af:1a:8e:ee:9a:81:15:f2:
                    ac:0c:f2:22:f7:49:e8:4a:92:e2:b4:c9:6a:17:5b:
                    20:5d:0e:42:45:5a:65:eb:99:79:e8:6c:fd:42:76:
                    0e:11:41:ed:b9:a1:62:d2:96:43:f5:d6:5d:45:38:
                    6a:21:f4:bb:c2:5c:24:f9:a8:54:e9:68:18:a8:57:
                    59:ea:9d:be:85:9c:6a:39:c2:a3:ca:1d:20:ff:50:
                    42:61:8c:80:47:96:16:2e:5a:3a:83:08:de:f0:aa:
                    63:ba:e4:91:72:5c:cf:91:0d:6f:de:90:a4:74:26:
                    be:c6:47:70:d4:cd:40:08:b0:05:05:4a:0e:71:61:
                    e8:a9:f6:25:ec:8d:d5:f3:df:93:8a:41:39:ea:9a:
                    99:a4:d7:93:5a:d5:e7:72:5a:9b:47:62:b0:65:95:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:10:25:8D:1D:62:32:6F:EF:D3:7E:EA:C2:EC:C2:AA:2A:7E:D7:9D
            X509v3 Authority Key Identifier:
                keyid:27:3D:80:57:0A:6F:8C:43:81:6F:AC:4F:61:57:49:C9:D6:D9:8E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/273D80570A6F8C43816FAC4F615749C9D6D98E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/273D80570A6F8C43816FAC4F615749C9D6D98E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIMPLE/1/3136302e33302e39382e302f32332d3332203d3e2039393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:c6:91:a2:74:fd:40:fc:4c:b0:41:51:69:29:a9:bf:09:20:
         aa:e3:12:ee:ec:a2:cf:2f:86:ef:4e:96:7f:8d:ad:93:91:76:
         91:57:1f:5d:2c:c8:ea:a2:3c:14:55:60:57:61:77:c0:6f:1a:
         a2:6d:c3:21:1a:16:fe:4f:41:49:10:19:f7:b4:1a:49:43:ec:
         65:78:3f:cd:a2:d1:7f:d2:d6:72:5a:f2:f6:28:54:78:c1:a4:
         82:1b:d5:a6:fa:83:60:4d:18:13:30:ef:13:82:5d:65:8c:e2:
         d3:4f:47:24:d1:7a:5b:21:41:fd:3a:1b:13:cd:e3:08:94:4a:
         49:7e:cb:c0:95:34:4b:6b:da:33:8c:77:24:b5:ca:6d:9e:84:
         1c:c5:4d:59:a8:e5:60:7d:bb:10:c8:af:d0:90:c0:38:c7:30:
         eb:6f:b9:92:17:87:41:b8:23:89:66:90:7a:94:54:75:50:33:
         f4:09:ac:90:5b:60:ce:2d:1c:f8:35:51:86:df:8f:9c:5b:6f:
         45:20:24:0f:41:19:fc:ab:e1:a2:f0:15:42:9f:55:1b:41:eb:
         91:f3:9b:dc:e4:39:bd:f8:d3:80:02:44:09:61:e5:d7:63:20:
         27:00:3c:1e:c4:60:b9:25:bd:0a:94:69:2a:19:3d:20:63:f9:
         de:36:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:20 2026 by rpki-client