Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANIN/0/3130332e3133302e3132342e302f32342d3234203d3e20313331363336.roa
File:                     3130332e3133302e3132342e302f32342d3234203d3e20313331363336.roa (raw, json)
Hash identifier:          VXtVToak1u7PW+U+n97OPXO4Dchb6DLpI7qRdjvNc0Q=
Subject key identifier:   CC:92:BF:F4:FC:83:2B:C2:B0:8F:06:F3:62:95:F6:41:44:2D:CD:06
Certificate issuer:       /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Certificate serial:       70E9FC26CBBAFDB51713AF576ABB1A62714BB048
Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANIN/0/3130332e3133302e3132342e302f32342d3234203d3e20313331363336.roa
Signing time:             Mon 11 May 2026 17:15:44 +0000
ROA not before:           Mon 11 May 2026 17:10:44 +0000
ROA not after:            Mon 10 May 2027 17:15:44 +0000
asID:                     131636
IP address blocks:        103.130.124.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:fc:26:cb:ba:fd:b5:17:13:af:57:6a:bb:1a:62:71:4b:b0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
        Validity
            Not Before: May 11 17:10:44 2026 GMT
            Not After : May 10 17:15:44 2027 GMT
        Subject: CN=CC92BFF4FC832BC2B08F06F36295F641442DCD06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:07:64:e2:1a:33:1a:c0:ae:5a:02:28:b3:
                    cd:25:e5:b3:74:a1:2b:1b:64:93:36:5a:a4:fe:ef:
                    53:65:b7:c9:60:fb:a4:d6:08:6e:7d:fc:a7:9e:15:
                    07:c7:68:b1:39:b4:8b:d5:20:52:2d:c0:ad:39:8b:
                    86:17:0f:10:93:05:cb:df:e0:05:25:af:58:2c:28:
                    6c:21:e6:4f:97:5a:1e:66:06:2f:98:cf:50:4a:4e:
                    9f:d9:74:58:38:d5:8a:5e:ba:99:b4:25:4f:fc:ec:
                    4a:a1:6b:8d:da:07:11:c1:ef:41:cb:ca:f0:70:83:
                    04:69:7b:9c:d7:36:96:31:0e:31:48:1e:29:5d:45:
                    07:4b:93:96:5d:94:af:ef:3a:21:63:0a:95:a4:93:
                    0d:be:09:47:ca:f6:17:20:3b:f0:cc:74:b1:d9:a9:
                    e4:16:76:23:d4:63:f5:d3:b2:da:55:63:27:f1:67:
                    74:b5:ba:30:69:41:3a:e0:b1:f9:0c:13:86:60:fb:
                    dd:03:2b:89:97:67:32:81:ed:1b:9a:ce:22:00:13:
                    90:d3:e3:bc:47:c1:84:26:9f:fa:2b:1f:83:25:04:
                    1f:5a:6a:1c:d6:a1:79:c3:e1:1b:40:54:33:fe:a4:
                    ee:c1:fa:a9:75:81:2a:01:09:3a:5d:7e:cd:bc:91:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:92:BF:F4:FC:83:2B:C2:B0:8F:06:F3:62:95:F6:41:44:2D:CD:06
            X509v3 Authority Key Identifier:
                keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/3130332e3133302e3132342e302f32342d3234203d3e20313331363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:69:42:f1:4f:35:6d:02:80:af:84:9c:82:ed:81:80:67:fa:
         bb:47:4a:8b:3d:4f:3a:18:ba:dd:4d:9b:c8:ea:11:76:a3:15:
         4f:fa:29:30:ef:18:c5:72:d6:33:da:24:f6:b2:26:13:86:e2:
         dd:2e:97:9e:b6:82:1e:8f:7f:87:fd:d6:64:f3:bd:3d:a3:74:
         1f:59:27:b1:41:e5:2f:1b:fb:a9:45:e6:18:ff:1f:54:f0:67:
         26:25:45:2d:ae:93:18:85:a3:fe:d3:bb:85:0a:42:60:a1:cb:
         e5:d9:ff:63:d5:f1:7b:31:97:d0:c6:f5:d4:2d:6f:cc:0c:04:
         63:dd:05:f0:fc:d4:df:7c:d4:b6:f1:66:5b:15:7d:c1:64:44:
         fb:4b:1f:e2:aa:b4:72:2f:b4:10:0d:fd:98:8d:67:15:09:02:
         a3:00:57:34:d7:39:04:4c:5c:34:5d:b6:35:db:b2:ef:f2:7c:
         7e:62:40:e7:78:46:8b:9e:06:a5:0e:5a:ec:4e:94:a6:a4:86:
         b2:a0:05:8b:d9:60:57:19:26:88:e8:ce:ab:bb:1e:63:6a:30:
         fd:0d:5c:c5:c9:83:f0:0d:73:f3:65:36:1c:e6:45:4c:71:0e:
         ff:9f:e5:6c:7f:f7:ac:65:bb:b4:8b:5b:fd:16:41:10:98:c2:
         5c:11:b0:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:15:25 2026 by rpki-client