Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TP2cL-xbnq2QsvipiYm32_p1ikM.roa
File:                     TP2cL-xbnq2QsvipiYm32_p1ikM.roa (raw, json)
Hash identifier:          QIdgK+PMScSBbsoZ/vhni4oi54Uyu7QEv29oCUUFPag=
Subject key identifier:   4C:FD:9C:2F:EC:5B:9E:AD:90:B2:F8:A9:89:89:B7:DB:FA:75:8A:43
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TP2cL-xbnq2QsvipiYm32_p1ikM.roa
Signing time:             Thu 15 Sep 2022 02:43:08 +0000
ROA not before:           Thu 15 Sep 2022 02:43:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        113.196.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4CFD9C2FEC5B9EAD90B2F8A98989B7DBFA758A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:17:01:da:f1:eb:8d:df:67:86:31:12:a8:
                    ff:8f:21:81:81:d0:cb:57:05:f7:a4:e1:7d:86:3f:
                    10:74:56:72:10:0f:ea:f6:4a:7c:0a:ff:cb:d4:0b:
                    df:bc:f5:f4:9d:3b:a1:20:77:ce:cb:e0:d6:04:f9:
                    b6:9f:ea:a1:c4:71:b7:b7:77:01:cc:cc:8a:c2:17:
                    fe:86:18:54:71:22:8f:e3:63:bb:49:cb:71:67:19:
                    86:93:e8:3d:04:6b:df:20:9d:02:a5:97:92:7f:f2:
                    3e:5f:2b:6c:ac:35:8f:f6:38:7a:d7:c7:c3:d6:ae:
                    eb:1e:2b:03:ab:fd:7d:81:05:6d:cc:da:48:73:60:
                    e6:3d:da:89:57:5d:b8:90:be:fe:60:15:d2:f2:f6:
                    88:89:e8:32:54:e9:03:9a:77:3a:89:b4:6d:a7:03:
                    5e:41:88:35:29:27:9b:2b:76:24:36:27:fb:03:d4:
                    cc:75:bb:e8:ff:3b:e8:f2:0e:0b:31:60:8f:80:66:
                    ac:0d:79:14:bc:a3:78:0b:6d:55:b9:a8:9a:94:27:
                    46:e6:07:d1:8c:b2:cf:4b:01:a1:18:ed:6e:f7:ab:
                    9c:c9:06:88:7d:06:cf:ea:cd:22:6f:28:b2:6a:be:
                    ea:21:95:63:00:f0:79:c7:c2:b9:05:43:60:0a:f6:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FD:9C:2F:EC:5B:9E:AD:90:B2:F8:A9:89:89:B7:DB:FA:75:8A:43
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TP2cL-xbnq2QsvipiYm32_p1ikM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:84:42:6a:4b:1b:28:c2:e1:7c:f5:c5:1c:2f:8b:8d:43:56:
         31:d9:72:09:6d:14:41:39:a4:49:e3:f8:86:c3:33:98:2b:bc:
         68:17:9e:07:c6:bf:cc:8d:cd:01:db:b2:75:aa:e4:31:29:69:
         fa:8f:7d:b0:93:08:d4:43:a5:bb:8e:25:96:83:e2:af:80:77:
         c1:1c:6f:a4:08:06:fc:19:6f:7d:76:3b:74:b5:14:45:59:75:
         3c:60:b4:26:45:ab:c1:fe:47:09:b8:0b:00:10:c4:23:67:22:
         70:8d:db:dd:11:45:a3:1f:26:57:20:fa:be:c6:d8:a0:1c:5f:
         0c:23:87:f7:54:45:92:1e:54:24:dc:04:71:29:f3:3c:32:57:
         07:f9:54:b8:51:7c:58:be:85:b4:bc:67:c4:7d:81:63:d2:15:
         8b:68:18:74:1c:dd:01:7a:13:23:63:c3:de:c3:a9:39:b8:75:
         28:c9:eb:64:2e:f5:5a:50:8a:66:10:ac:67:60:19:bb:a2:78:
         8b:b7:1b:4b:ec:dd:a1:0a:d2:7a:30:ee:d3:4a:7a:a5:eb:cd:
         18:c6:ec:8f:a9:1f:5f:1f:2d:c4:ee:f5:f0:6e:90:df:ab:78:
         6c:f3:13:e8:28:d4:69:9a:c2:51:89:00:3c:dd:72:e6:3b:73:
         1d:b4:39:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:00 2025 by rpki-client