Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TUNGHO/0/AS18429.roa
File:                     AS18429.roa (raw, json)
Hash identifier:          10aEph6hwAmBvlaQZuwUN+fmyRec189ldPt52qQhj9A=
Subject key identifier:   35:7B:CD:43:ED:9E:B3:68:23:FC:1B:84:FA:AA:11:16:F6:C2:6B:99
Certificate issuer:       /CN=4E6E4905B4391CAA73778F5FBBAEAAB686551FA7
Certificate serial:       1199A82B6F19D5B6D16F10BCCC3DEE22B3F556EF
Authority key identifier: 4E:6E:49:05:B4:39:1C:AA:73:77:8F:5F:BB:AE:AA:B6:86:55:1F:A7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TUNGHO/0/AS18429.roa
Signing time:             Mon 11 May 2026 17:36:08 +0000
ROA not before:           Mon 11 May 2026 17:31:08 +0000
ROA not after:            Mon 10 May 2027 17:36:08 +0000
asID:                     18429
IP address blocks:        118.232.196.64/26 maxlen: 26
                          118.232.199.0/24 maxlen: 24
                          118.232.199.0/26 maxlen: 26
                          118.232.199.64/27 maxlen: 27
                          118.232.200.0/25 maxlen: 25
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:99:a8:2b:6f:19:d5:b6:d1:6f:10:bc:cc:3d:ee:22:b3:f5:56:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E6E4905B4391CAA73778F5FBBAEAAB686551FA7
        Validity
            Not Before: May 11 17:31:08 2026 GMT
            Not After : May 10 17:36:08 2027 GMT
        Subject: CN=357BCD43ED9EB36823FC1B84FAAA1116F6C26B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:f7:17:69:6c:9e:f7:9d:fd:14:a1:5c:25:
                    a9:7a:c1:c6:bf:43:14:7d:ec:66:e5:cb:22:b1:cd:
                    55:08:43:5f:fc:fd:bc:a1:69:fa:de:88:e1:5e:50:
                    45:84:c1:3b:96:a5:2a:19:88:fc:c2:ee:b2:49:36:
                    5e:ec:bc:fb:4a:da:3f:f3:65:66:68:37:69:aa:a7:
                    f3:f2:f6:0f:18:95:4c:bf:88:8e:6d:ee:d4:f5:f2:
                    9b:a1:1a:df:12:b2:e1:be:17:64:28:51:a6:e3:c7:
                    d1:dc:89:d3:66:49:c7:1c:91:28:0b:b3:d8:93:df:
                    ee:8c:91:e6:06:a7:5b:db:78:c1:cc:cc:e7:01:97:
                    01:39:03:74:c9:32:fb:eb:e7:9e:ea:bc:64:d9:50:
                    39:56:16:a2:f2:b0:e4:de:b2:d2:35:0d:32:df:ea:
                    7d:40:9e:c5:fa:91:3d:06:8d:18:c2:41:39:05:da:
                    bb:0a:5d:cb:ed:16:7a:97:21:b6:48:07:20:e4:22:
                    1a:7b:46:8e:95:3b:20:d5:a8:7f:d4:96:3f:7b:35:
                    80:24:8f:2c:bf:b3:96:79:d4:26:34:41:6d:11:60:
                    35:5c:24:c8:93:a5:cd:63:6c:2d:b8:90:28:48:d4:
                    df:2e:98:dd:fa:29:4a:41:d7:91:85:09:9c:47:3e:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7B:CD:43:ED:9E:B3:68:23:FC:1B:84:FA:AA:11:16:F6:C2:6B:99
            X509v3 Authority Key Identifier:
                keyid:4E:6E:49:05:B4:39:1C:AA:73:77:8F:5F:BB:AE:AA:B6:86:55:1F:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TUNGHO/0/AS18429.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.196.64/26
                  118.232.199.0-118.232.200.127

    Signature Algorithm: sha256WithRSAEncryption
         55:fc:63:ab:02:6c:0e:4e:06:e7:2b:2b:aa:db:b7:c6:a7:89:
         06:fe:0a:f9:1a:08:2b:35:98:36:16:7a:af:ed:4f:5f:f7:6d:
         46:62:4f:e3:b1:e7:5d:2d:06:9c:76:8a:84:4f:99:02:1a:5a:
         f4:98:df:c3:eb:ba:48:a1:b9:b4:1e:8e:b9:33:60:12:7b:51:
         a6:4f:34:28:26:9a:27:52:85:2c:98:fd:6f:ed:0b:2a:c5:e6:
         b6:a3:c2:0e:7c:ff:e0:51:f7:95:b5:4e:a4:47:3f:53:99:37:
         73:d8:19:13:56:6b:19:f2:fd:f9:47:d1:3d:27:31:8d:fe:a7:
         5f:11:33:bf:05:5c:d9:fa:50:56:e2:54:b1:eb:8b:f5:1e:20:
         26:ac:ed:95:cd:31:86:01:f3:e6:3d:b8:04:23:48:0b:67:be:
         58:3d:94:ee:03:f6:f3:a0:68:65:fa:1c:54:d1:02:db:0f:76:
         27:56:45:16:2f:b8:d4:3c:28:65:4d:36:b4:bd:0c:27:ab:b0:
         3a:a1:62:62:69:b0:06:70:d4:f7:b8:d2:5c:d0:62:3d:2f:7f:
         00:e2:07:da:2b:4e:80:63:45:32:76:13:68:fa:6f:76:bb:ba:
         78:6c:33:c0:c6:6c:99:a5:c7:e4:2d:54:c4:45:77:9a:58:fe:
         03:93:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:51:48 2026 by rpki-client