Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYCLOUD/0/3232332e32362e382e302f32332d3234203d3e2037343833.roa
File:                     3232332e32362e382e302f32332d3234203d3e2037343833.roa (raw, json)
Hash identifier:          upn/3IoJv46k36baoJysnWI4rmnK/KPKEeob8KQ1RHg=
Subject key identifier:   C0:C6:E6:76:A9:15:A8:39:A3:5F:A4:37:27:CB:BD:CF:CF:B5:20:AA
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       72D07BA88A400C864FD10EE63E3D88351B2D94A9
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3232332e32362e382e302f32332d3234203d3e2037343833.roa
Signing time:             Mon 11 May 2026 17:56:10 +0000
ROA not before:           Mon 11 May 2026 17:51:10 +0000
ROA not after:            Mon 10 May 2027 17:56:10 +0000
asID:                     7483
IP address blocks:        223.26.8.0/23 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d0:7b:a8:8a:40:0c:86:4f:d1:0e:e6:3e:3d:88:35:1b:2d:94:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: May 11 17:51:10 2026 GMT
            Not After : May 10 17:56:10 2027 GMT
        Subject: CN=C0C6E676A915A839A35FA43727CBBDCFCFB520AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:63:10:0e:81:7c:c4:a7:40:2f:6d:12:16:
                    20:92:42:67:21:ed:3d:00:dd:23:28:43:f6:26:fc:
                    47:a5:99:8f:a1:a5:62:c9:2c:42:0f:0d:1d:e5:5a:
                    e3:43:37:1e:a5:0a:fc:c0:35:4b:e5:60:9c:89:6c:
                    d7:96:2a:8b:59:b8:01:d1:a7:b1:aa:0b:ff:99:79:
                    a9:6b:30:92:4d:84:8b:76:86:17:f7:13:11:45:a7:
                    b0:eb:08:4d:19:76:e9:a0:5e:e5:9e:3b:41:11:23:
                    4c:8a:8d:90:4b:28:62:5c:3c:76:de:a7:d3:03:46:
                    56:af:14:59:67:b1:48:a9:15:b6:f7:44:51:2a:1b:
                    8d:77:f4:da:b9:c0:a1:8f:c6:ef:62:6e:03:d2:8e:
                    fb:f6:9d:c8:c1:f2:0d:30:b8:dc:34:87:01:62:c2:
                    13:57:2d:a4:47:16:f0:75:d7:01:e4:99:dd:5a:d3:
                    53:c8:59:12:38:df:29:fd:40:d4:e9:8a:ad:3c:11:
                    bf:5b:c6:f8:03:8c:15:be:ac:65:4e:99:08:75:ee:
                    c9:2e:11:4c:42:99:19:08:16:62:fd:6b:d4:72:af:
                    38:c1:69:46:98:d4:f7:5b:fd:c3:d7:84:fb:11:26:
                    d3:06:1f:31:c5:13:62:69:bf:f4:1e:50:8b:32:94:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C6:E6:76:A9:15:A8:39:A3:5F:A4:37:27:CB:BD:CF:CF:B5:20:AA
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3232332e32362e382e302f32332d3234203d3e2037343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:97:0d:55:74:0b:ff:3b:d5:71:e8:dd:f4:77:f9:cf:ea:
         93:22:5c:dc:c0:26:09:bb:95:45:1c:89:ac:e3:17:f9:f5:bf:
         c6:cb:8e:04:19:bf:f3:d4:08:0d:54:6d:bd:6c:42:58:55:8b:
         f6:8e:41:3e:6e:4b:93:cf:79:40:f3:d4:c2:40:3e:5b:d5:34:
         95:49:c3:c0:ea:9b:8c:73:b3:69:f9:4c:9f:ed:ec:98:f3:ef:
         8a:6b:69:ad:6c:f3:fd:da:36:be:29:af:c2:d1:bc:de:87:d1:
         24:db:b2:0a:45:f5:a9:33:e9:9b:ce:b7:ed:70:4d:99:12:9b:
         ef:f0:e0:5b:50:4f:97:5a:2c:ae:5a:19:46:59:56:fa:40:6a:
         5e:88:97:d2:45:33:b4:67:01:e6:b6:f5:6c:3b:b3:ab:f6:e2:
         f2:74:16:f8:29:97:84:a1:f1:78:eb:6b:11:6d:2f:86:68:d3:
         7e:2e:89:c5:1b:eb:3f:59:cd:ce:f8:8c:bb:ae:0c:5d:48:1c:
         c9:bc:25:8e:08:ed:14:f8:eb:a5:0e:ce:16:d7:ec:d4:98:a1:
         b2:5e:0e:df:f5:93:7c:1f:9f:bc:e8:fb:41:e1:dc:9f:f9:72:
         53:3f:43:46:54:8a:34:36:39:71:c8:e4:e9:5f:72:5e:62:72:
         71:57:53:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:13 2026 by rpki-client