Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5GxcCXmPc3lr2Ubma6xBO6gcxUE.roa
File:                     5GxcCXmPc3lr2Ubma6xBO6gcxUE.roa (raw, json)
Hash identifier:          Z4ASLhlZ62ocbUVDsylKpFY/xR1AP6xx4hDZXp3Ed5o=
Subject key identifier:   E4:6C:5C:09:79:8F:73:79:6B:D9:46:E6:6B:AC:41:3B:A8:1C:C5:41
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       13A7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5GxcCXmPc3lr2Ubma6xBO6gcxUE.roa
Signing time:             Fri 01 Sep 2023 09:25:15 +0000
ROA not before:           Fri 01 Sep 2023 09:25:15 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     4780
IP address blocks:        112.105.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5031 (0x13a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep  1 09:25:15 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E46C5C09798F73796BD946E66BAC413BA81CC541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:2d:c4:ac:ba:79:1a:04:a7:51:3c:8f:5e:
                    67:60:cc:d2:3e:10:39:03:12:6b:03:d2:0e:70:7a:
                    84:77:39:98:fe:79:9f:86:27:dc:6b:f3:2a:5b:cf:
                    16:cd:c0:51:97:dd:73:49:ee:2e:e2:2b:6a:87:a4:
                    38:87:2c:3c:d2:ec:ae:23:ab:12:c1:8e:83:5f:08:
                    43:8c:0c:75:98:80:50:99:0b:77:1c:49:01:2a:31:
                    a8:2c:c7:00:97:21:74:57:33:04:64:5d:2b:ba:1b:
                    07:1b:bf:c5:83:36:4e:dd:49:16:8f:ba:ff:29:b5:
                    23:81:b7:4b:45:25:fc:e9:e9:1b:55:e9:b0:49:2a:
                    64:18:21:2e:d4:bc:9b:d5:6b:14:d1:8a:10:b5:fc:
                    e9:8d:9a:90:29:68:f7:5c:19:37:90:6f:11:e0:0a:
                    96:72:17:dc:62:ee:6e:18:2a:ce:df:f4:ce:73:3c:
                    8a:65:ae:f1:d6:13:77:8f:77:33:d6:22:da:14:8e:
                    75:e2:9b:fb:89:72:b7:11:18:c0:f8:43:69:7a:c5:
                    76:48:48:b6:db:8b:b1:a6:06:1a:06:bf:79:7e:72:
                    b2:0a:dc:a5:db:c0:48:e6:cb:6f:16:4e:d7:c9:d3:
                    92:a1:00:66:32:db:75:10:ab:31:d4:a6:76:f0:13:
                    c3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6C:5C:09:79:8F:73:79:6B:D9:46:E6:6B:AC:41:3B:A8:1C:C5:41
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5GxcCXmPc3lr2Ubma6xBO6gcxUE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:7c:e7:92:16:21:97:05:31:68:f7:a7:0e:b1:ae:62:f3:8f:
         da:ba:da:5d:65:f6:19:13:8a:c0:3b:24:17:9a:ed:f5:42:2c:
         92:57:99:dc:3b:72:9c:a2:70:ca:9f:cf:ea:1d:e5:8d:c7:b9:
         8e:f8:78:48:58:50:40:79:30:6f:8e:c9:7f:88:29:5c:c1:44:
         f4:75:6e:26:dc:5b:29:66:bc:cf:e2:75:ac:f2:8c:6b:77:08:
         ce:6d:b5:21:6e:d5:c1:94:19:c4:5e:72:05:3d:c3:51:fb:55:
         58:db:bb:fb:ca:91:7e:b4:b6:53:08:f2:61:0f:a9:cb:d3:fc:
         74:fc:89:60:9f:b5:1e:7d:9a:9b:64:ce:36:a1:5c:c5:04:6f:
         3b:19:1a:90:c6:71:df:fa:b2:b1:4d:5a:95:02:de:5f:b5:5a:
         3c:d4:99:ac:85:9c:7c:01:ed:55:ff:bc:f6:6b:67:04:c3:66:
         73:6e:10:aa:77:9a:c3:65:77:18:1f:f7:96:38:fa:13:11:51:
         98:5e:07:72:ae:c9:ee:20:86:eb:b3:e7:05:74:52:57:13:52:
         ff:69:f0:fa:c1:f5:28:60:bd:cc:47:d6:ee:95:5e:27:65:b9:
         ff:1f:6b:dc:1c:90:29:0b:e3:12:5a:75:6b:f5:64:fb:82:6c:
         6c:cd:ab:06
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICE6cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI1MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEU0NkM1QzA5Nzk4Rjcz
Nzk2QkQ5NDZFNjZCQUM0MTNCQTgxQ0M1NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1Ii3ErLp5GgSnUTyPXmdgzNI+EDkDEmsD0g5weoR3OZj+eZ+G
J9xr8ypbzxbNwFGX3XNJ7i7iK2qHpDiHLDzS7K4jqxLBjoNfCEOMDHWYgFCZC3cc
SQEqMagsxwCXIXRXMwRkXSu6Gwcbv8WDNk7dSRaPuv8ptSOBt0tFJfzp6RtV6bBJ
KmQYIS7UvJvVaxTRihC1/OmNmpApaPdcGTeQbxHgCpZyF9xi7m4YKs7f9M5zPIpl
rvHWE3ePdzPWItoUjnXim/uJcrcRGMD4Q2l6xXZISLbbi7GmBhoGv3l+crIK3KXb
wEjmy28WTtfJ05KhAGYy23UQqzHUpnbwE8OBAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQU5GxcCXmPc3lr2Ubma6xBO6gcxUEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNUd4Y0NYbVBjM2xyMlVibWE2eEJP
NmdjeFVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHBpMA0G
CSqGSIb3DQEBCwUAA4IBAQBUfOeSFiGXBTFo96cOsa5i84/autpdZfYZE4rAOyQX
mu31QiySV5ncO3KconDKn8/qHeWNx7mO+HhIWFBAeTBvjsl/iClcwUT0dW4m3Fsp
ZrzP4nWs8oxrdwjObbUhbtXBlBnEXnIFPcNR+1VY27v7ypF+tLZTCPJhD6nL0/x0
/Ilgn7UefZqbZM42oVzFBG87GRqQxnHf+rKxTVqVAt5ftVo81JmshZx8Ae1V/7z2
a2cEw2ZzbhCqd5rDZXcYH/eWOPoTEVGYXgdyrsnuIIbrs+cFdFJXE1L/afD6wfUo
YL3MR9bulV4nZbn/H2vcHJApC+MSWnVr9WT7gmxszasG
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:59 2025 by rpki-client