Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIONISME/0/34352e3131332e3135362e302f32322d3234203d3e20313331363733.roa
File:                     34352e3131332e3135362e302f32322d3234203d3e20313331363733.roa (raw, json)
Hash identifier:          ycz7kvMyQPtm2jOjyvhgNkKeTDXs7w0xpNO1K4Z0/eU=
Subject key identifier:   03:35:01:2C:8F:4D:25:90:60:E6:56:DE:2A:06:F1:FB:2A:63:7F:4F
Certificate issuer:       /CN=49351FABA26185254DDA416A1D5581DD443EDC41
Certificate serial:       4FC4C69B600D99B9C3A93A7CBD7545FA69B48FBE
Authority key identifier: 49:35:1F:AB:A2:61:85:25:4D:DA:41:6A:1D:55:81:DD:44:3E:DC:41
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/49351FABA26185254DDA416A1D5581DD443EDC41.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNIONISME/0/34352e3131332e3135362e302f32322d3234203d3e20313331363733.roa
Signing time:             Mon 11 May 2026 17:57:23 +0000
ROA not before:           Mon 11 May 2026 17:52:23 +0000
ROA not after:            Mon 10 May 2027 17:57:23 +0000
asID:                     131673
IP address blocks:        45.113.156.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c4:c6:9b:60:0d:99:b9:c3:a9:3a:7c:bd:75:45:fa:69:b4:8f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49351FABA26185254DDA416A1D5581DD443EDC41
        Validity
            Not Before: May 11 17:52:23 2026 GMT
            Not After : May 10 17:57:23 2027 GMT
        Subject: CN=0335012C8F4D259060E656DE2A06F1FB2A637F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:be:18:98:ac:ec:8c:14:cc:d6:2b:ba:1e:9e:
                    f0:52:02:ed:a8:4c:42:89:67:fb:29:d3:82:92:35:
                    f0:64:89:5d:51:a4:3d:8c:85:3f:b1:02:23:51:0a:
                    0e:61:9b:49:d8:6a:fa:54:74:93:26:ab:ad:5a:45:
                    7c:58:85:7e:80:e2:b7:ff:59:3d:ba:9c:2e:c4:b0:
                    b4:ca:0c:06:35:a7:41:be:8a:2b:dd:c6:68:35:76:
                    a6:1d:99:a4:f4:12:6b:84:70:9e:e0:e5:b9:6d:1a:
                    95:d1:ba:8d:91:c1:dd:28:ae:35:4f:9d:c7:ed:b7:
                    16:f5:f9:33:d7:ea:be:ac:82:28:a5:fd:ae:b2:2c:
                    ab:45:67:11:56:37:f8:01:ca:33:9f:1e:93:5c:2f:
                    82:07:3d:a2:a8:e5:d4:f2:fe:44:b1:ce:87:d1:81:
                    2d:0d:9a:62:a8:90:51:77:7c:80:25:86:2f:37:f4:
                    ba:ff:d9:a0:7d:70:67:54:05:0e:fb:84:cc:aa:bf:
                    53:95:1d:ba:ba:14:ba:8d:90:4b:5f:7e:88:a6:c5:
                    2a:f3:a1:c9:6f:a1:0f:15:21:b2:ef:f9:64:b4:8a:
                    bf:dd:1b:79:e1:0f:86:84:22:33:7e:0a:d6:11:ea:
                    8b:df:a5:0f:7c:60:fd:b8:b4:c6:a8:63:a5:cf:25:
                    af:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:35:01:2C:8F:4D:25:90:60:E6:56:DE:2A:06:F1:FB:2A:63:7F:4F
            X509v3 Authority Key Identifier:
                keyid:49:35:1F:AB:A2:61:85:25:4D:DA:41:6A:1D:55:81:DD:44:3E:DC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNIONISME/0/49351FABA26185254DDA416A1D5581DD443EDC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/49351FABA26185254DDA416A1D5581DD443EDC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIONISME/0/34352e3131332e3135362e302f32322d3234203d3e20313331363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:b8:0e:b4:77:9b:d8:41:40:23:90:95:a0:46:35:aa:fd:
         7f:dc:a1:68:9c:0a:11:cc:58:03:6e:43:dc:06:a4:ca:a5:c1:
         ee:37:90:da:0d:ca:36:46:61:20:97:a7:fa:4f:b4:6e:6b:b4:
         b4:2b:23:d5:9b:ef:58:29:a3:91:b2:da:b9:19:d0:b6:cf:0c:
         72:7b:26:10:df:a8:78:c5:fd:39:d0:cc:20:5a:46:21:9b:14:
         eb:95:e1:ed:21:21:30:06:47:1e:e2:15:a8:e8:6a:06:bb:23:
         c8:55:8e:72:8b:e1:b1:00:e8:27:69:f6:57:57:03:d3:68:d7:
         e4:5e:a0:25:2e:da:77:73:68:ee:cc:f8:6e:ac:78:ca:fa:da:
         59:3e:ff:c5:23:18:b5:7b:62:15:49:ef:87:46:cf:5b:71:ae:
         e4:e4:cf:d1:0f:b4:ce:7f:bb:f5:b9:b8:b4:a6:a3:d0:77:b5:
         a9:f9:7f:9c:fb:61:91:d6:9d:df:0f:07:b3:e8:69:a3:c6:dc:
         dc:32:28:86:88:dc:91:63:0a:da:d8:b5:24:0e:8d:7a:da:db:
         d2:d9:18:3b:79:fc:83:8a:e1:ab:f8:ad:90:cb:17:bc:f9:24:
         64:1a:12:1e:41:12:a9:96:ad:29:80:50:0d:a8:57:ec:fa:98:
         35:26:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:03 2026 by rpki-client