Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/312e3230302e302e302f31362d3234203d3e203234313537.roa
File:                     312e3230302e302e302f31362d3234203d3e203234313537.roa (raw, json)
Hash identifier:          tI46r+4SC64QhbkzY2aUlfgM9p6mnCnBZ5sdV2anZNs=
Subject key identifier:   B9:24:EC:0A:73:DE:45:B8:4E:59:E1:C6:E0:F6:BC:FA:2C:E0:5B:0B
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       39786C4036DF29F1C8B0F4E7A26E426FB1E5D6CE
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/312e3230302e302e302f31362d3234203d3e203234313537.roa
Signing time:             Mon 11 May 2026 17:32:53 +0000
ROA not before:           Mon 11 May 2026 17:27:53 +0000
ROA not after:            Mon 10 May 2027 17:32:53 +0000
asID:                     24157
IP address blocks:        1.200.0.0/16 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:78:6c:40:36:df:29:f1:c8:b0:f4:e7:a2:6e:42:6f:b1:e5:d6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 17:27:53 2026 GMT
            Not After : May 10 17:32:53 2027 GMT
        Subject: CN=B924EC0A73DE45B84E59E1C6E0F6BCFA2CE05B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:aa:7c:dd:7b:b6:67:89:2a:b9:c5:ab:03:
                    97:a3:fd:18:cf:55:33:49:5f:e2:62:95:c0:8c:2e:
                    4b:19:49:85:83:b0:df:74:5c:aa:23:b9:f0:f8:0c:
                    da:0f:03:fb:29:2d:3d:e1:95:a8:27:a3:57:f7:ac:
                    62:90:e9:54:76:e3:b2:8d:88:46:b1:c0:0c:15:56:
                    79:eb:b2:a6:af:96:f3:08:9d:c2:47:a1:d1:98:a3:
                    ce:46:0e:37:43:74:c4:e6:de:a5:e7:15:58:3b:14:
                    f3:68:c8:b6:53:dc:c4:41:0c:42:9a:69:73:00:a9:
                    cf:e2:c4:4d:fb:a3:da:8b:fe:78:6d:7f:76:67:43:
                    d8:f2:67:94:91:ec:8b:6c:56:75:76:1c:f1:3c:43:
                    f2:a6:22:1c:f1:3a:27:0a:78:e6:78:a5:4d:09:88:
                    ba:d0:9b:fe:18:04:e1:1d:e0:aa:0e:0a:e3:8e:3b:
                    19:cf:b0:11:aa:3b:c2:bd:80:c9:87:9c:14:35:47:
                    26:30:1a:60:32:40:a0:92:8c:63:74:ba:a7:bd:13:
                    f0:5a:aa:58:b5:31:5e:a3:a5:e8:bd:ba:a2:63:13:
                    df:0f:df:19:06:dc:85:1d:49:1a:0d:27:1b:93:17:
                    10:a5:1b:7d:ee:b3:18:ef:12:24:7a:a0:5a:7c:e2:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:24:EC:0A:73:DE:45:B8:4E:59:E1:C6:E0:F6:BC:FA:2C:E0:5B:0B
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/312e3230302e302e302f31362d3234203d3e203234313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.200.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:a0:7d:9b:90:51:c2:ad:a7:f4:75:d7:8a:f3:f0:5e:85:
         76:bd:85:96:08:2b:e7:cd:4f:86:b5:30:6d:5c:26:01:8b:24:
         66:3e:65:9c:f4:16:f0:87:a5:8c:dc:29:24:f3:a4:17:3c:bf:
         92:ca:23:23:56:40:93:0f:73:58:72:98:9d:42:be:2e:75:c9:
         88:09:ba:48:e1:95:a3:f2:eb:58:44:98:e2:c7:08:b6:f6:43:
         f5:9e:9e:33:cd:0c:d8:ce:6a:60:c5:14:2f:37:ac:73:10:52:
         2d:96:00:a8:49:db:39:19:87:9f:24:d0:14:c8:a1:a5:9f:3a:
         d8:30:bb:b5:d4:ba:ca:f5:96:b1:08:db:70:33:55:f0:f5:6b:
         97:3c:7b:b5:01:f2:96:da:31:4a:5b:bc:84:7c:67:b2:3a:83:
         e5:c6:d6:c6:39:d2:4f:c2:c5:c2:cb:fa:81:63:59:f3:df:fe:
         29:f5:b7:cf:4c:cf:f7:49:3a:cc:f0:ca:07:c1:a8:3e:3a:f8:
         ea:af:dd:cd:e6:0f:0a:81:0a:05:67:15:54:0f:74:d9:ea:f8:
         37:08:44:b4:c0:fd:e8:a6:0d:a8:84:c7:63:f0:2d:cd:58:31:
         43:76:10:cc:c7:c2:5f:d8:e7:41:21:8c:3f:f1:c3:63:f8:15:
         cd:30:6a:73
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUOXhsQDbfKfHIsPTnom5Cb7Hl1s4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZGNEU2NEUyODU1QjJGRDAwRkVFNDkyRjZGQjgyRDdF
RDVDNDYxOTAeFw0yNjA1MTExNzI3NTNaFw0yNzA1MTAxNzMyNTNaMDMxMTAvBgNV
BAMTKEI5MjRFQzBBNzNERTQ1Qjg0RTU5RTFDNkUwRjZCQ0ZBMkNFMDVCMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPqp83Xu2Z4kqucWrA5ej/RjP
VTNJX+JilcCMLksZSYWDsN90XKojufD4DNoPA/spLT3hlagno1f3rGKQ6VR247KN
iEaxwAwVVnnrsqavlvMIncJHodGYo85GDjdDdMTm3qXnFVg7FPNoyLZT3MRBDEKa
aXMAqc/ixE37o9qL/nhtf3ZnQ9jyZ5SR7ItsVnV2HPE8Q/KmIhzxOicKeOZ4pU0J
iLrQm/4YBOEd4KoOCuOOOxnPsBGqO8K9gMmHnBQ1RyYwGmAyQKCSjGN0uqe9E/Ba
qli1MV6jpei9uqJjE98P3xkG3IUdSRoNJxuTFxClG33usxjvEiR6oFp84mMhAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUuSTsCnPeRbhOWeHG4Pa8+izgWwswHwYDVR0j
BBgwFoAUhvTmTihVsv0A/uSS9vuC1+1cRhkwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJV0FO
TU9CSUxFLzAvODZGNEU2NEUyODU1QjJGRDAwRkVFNDkyRjZGQjgyRDdFRDVDNDYx
OS5jcmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS84NkY0RTY0RTI4NTVCMkZEMDBGRUU0
OTJGNkZCODJEN0VENUM0NjE5LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUH
MAuGYHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJV0FOTU9CSUxFLzAv
MzEyZTMyMzAzMDJlMzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMjM0MzEzNTM3
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8w
DTALBAIAATAFAwMAAcgwDQYJKoZIhvcNAQELBQADggEBAATCoH2bkFHCraf0ddeK
8/BehXa9hZYIK+fNT4a1MG1cJgGLJGY+ZZz0FvCHpYzcKSTzpBc8v5LKIyNWQJMP
c1hymJ1Cvi51yYgJukjhlaPy61hEmOLHCLb2Q/WenjPNDNjOamDFFC83rHMQUi2W
AKhJ2zkZh58k0BTIoaWfOtgwu7XUusr1lrEI23AzVfD1a5c8e7UB8pbaMUpbvIR8
Z7I6g+XG1sY50k/CxcLL+oFjWfPf/in1t89Mz/dJOszwygfBqD46+Oqv3c3mDwqB
CgVnFVQPdNnq+DcIRLTA/eimDaiEx2PwLc1YMUN2EMzHwl/Y50EhjD/xw2P4Fc0w
anM=
-----END CERTIFICATE-----
Generated at Wed May 13 02:15:17 2026 by rpki-client