Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_DEXmOwUJot48yIX8ZA0Zr6PXyM.roa
File:                     _DEXmOwUJot48yIX8ZA0Zr6PXyM.roa (raw, json)
Hash identifier:          UMfpA2jkNhD0Y8NSkJfAMoL0JbiyXgRBQs+z86jc3sc=
Subject key identifier:   FC:31:17:98:EC:14:26:8B:78:F3:22:17:F1:90:34:66:BE:8F:5F:23
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08A3
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_DEXmOwUJot48yIX8ZA0Zr6PXyM.roa
Signing time:             Tue 29 Sep 2020 09:52:15 +0000
ROA not before:           Tue 29 Sep 2020 09:52:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        106.105.48.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FC311798EC14268B78F32217F1903466BE8F5F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:74:e4:5f:b0:d7:c6:de:26:5a:10:49:45:
                    9b:d3:33:ac:17:69:d3:25:fb:da:5e:e8:88:66:67:
                    38:56:58:c6:8f:5c:d1:0c:c8:05:62:42:56:86:c2:
                    b2:5b:d6:4a:5f:2a:3e:35:fb:f1:8f:bd:73:fa:30:
                    d6:c8:58:1d:36:20:e5:2d:92:1b:cd:5f:43:2d:3a:
                    fb:ec:ee:d4:1e:38:cd:8a:a9:d4:87:0e:a3:42:4c:
                    9b:f4:00:99:04:63:99:61:16:fb:76:fc:a7:42:32:
                    3f:a1:bd:95:4d:60:8f:1b:63:a8:13:f8:6a:99:a4:
                    14:d1:50:f7:e0:79:55:58:46:44:6f:4c:48:85:ec:
                    c5:da:6d:7f:cc:f2:b9:b4:07:f8:ab:54:99:c5:02:
                    a1:ab:58:9b:e7:19:46:12:99:75:96:2a:fa:4e:91:
                    37:77:11:45:6d:19:ed:8b:6b:74:c0:4e:0f:23:7c:
                    43:98:39:e6:8e:a2:b0:e9:cc:67:b6:f1:32:b7:a0:
                    6b:a1:06:b2:9f:fd:58:95:d2:c1:2d:af:44:85:b2:
                    2a:97:6c:88:00:0e:ac:23:b5:61:ec:34:b4:78:5b:
                    d9:eb:02:6e:3f:fd:70:06:e7:ba:7e:67:6b:a9:3e:
                    cd:a5:1b:b7:56:94:c7:fa:a6:41:9e:4c:ec:dd:b0:
                    4e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:31:17:98:EC:14:26:8B:78:F3:22:17:F1:90:34:66:BE:8F:5F:23
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_DEXmOwUJot48yIX8ZA0Zr6PXyM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:8f:a2:a9:9e:d3:c6:2d:d1:30:2d:6a:12:24:a7:6b:94:f4:
         92:67:85:7c:32:b7:bf:87:1f:c2:ad:f9:ae:68:59:2e:98:9f:
         65:10:4a:35:b4:33:73:41:5b:cc:6a:66:8e:76:ad:dc:35:76:
         b1:1d:7c:6b:eb:2e:91:5f:91:3f:71:87:19:1b:23:ab:d2:7a:
         6b:dc:85:15:c9:49:e8:66:ef:13:fa:3c:ba:c1:51:3b:6d:4f:
         a7:c3:2d:55:ac:89:f8:f2:28:51:b3:28:51:c1:ad:a1:61:00:
         6b:9c:94:14:c7:5e:de:1d:44:50:f7:8a:f4:42:5a:8a:90:d0:
         b1:98:0e:50:dd:8f:a5:46:c2:e7:53:6a:74:1d:2f:2f:1a:bf:
         5f:13:4e:62:d5:53:ec:83:a2:64:b1:59:e8:1b:c8:b7:59:84:
         ff:b7:40:81:4b:81:10:3a:50:0a:32:7e:44:dd:f0:ef:69:dc:
         96:11:e0:f1:ba:7f:a7:ac:53:8d:e0:17:11:e5:7f:b8:d5:42:
         e8:c6:ec:fa:23:e7:0b:c5:8c:d2:cc:98:e0:7f:e1:13:1a:d0:
         a1:a9:e5:5f:87:99:53:04:b9:84:57:77:76:97:99:44:09:9d:
         85:23:20:30:0f:95:99:c5:30:1e:c3:0a:1c:6c:39:14:d2:40:
         3c:0c:7f:45
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUyMTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZDMzExNzk4RUMxNDI2
OEI3OEYzMjIxN0YxOTAzNDY2QkU4RjVGMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxBnTkX7DXxt4mWhBJRZvTM6wXadMl+9pe6IhmZzhWWMaPXNEM
yAViQlaGwrJb1kpfKj41+/GPvXP6MNbIWB02IOUtkhvNX0MtOvvs7tQeOM2KqdSH
DqNCTJv0AJkEY5lhFvt2/KdCMj+hvZVNYI8bY6gT+GqZpBTRUPfgeVVYRkRvTEiF
7MXabX/M8rm0B/irVJnFAqGrWJvnGUYSmXWWKvpOkTd3EUVtGe2La3TATg8jfEOY
OeaOorDpzGe28TK3oGuhBrKf/ViV0sEtr0SFsiqXbIgADqwjtWHsNLR4W9nrAm4/
/XAG57p+Z2upPs2lG7dWlMf6pkGeTOzdsE71AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU/DEXmOwUJot48yIX8ZA0Zr6PXyMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvX0RFWG1Pd1VKb3Q0OHlJWDhaQTBa
cjZQWHlNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGppMDAN
BgkqhkiG9w0BAQsFAAOCAQEAuI+iqZ7Txi3RMC1qEiSna5T0kmeFfDK3v4cfwq35
rmhZLpifZRBKNbQzc0FbzGpmjnat3DV2sR18a+sukV+RP3GHGRsjq9J6a9yFFclJ
6GbvE/o8usFRO21Pp8MtVayJ+PIoUbMoUcGtoWEAa5yUFMde3h1EUPeK9EJaipDQ
sZgOUN2PpUbC51NqdB0vLxq/XxNOYtVT7IOiZLFZ6BvIt1mE/7dAgUuBEDpQCjJ+
RN3w72nclhHg8bp/p6xTjeAXEeV/uNVC6Mbs+iPnC8WM0syY4H/hExrQoanlX4eZ
UwS5hFd3dpeZRAmdhSMgMA+VmcUwHsMKHGw5FNJAPAx/RQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:03 2025 by rpki-client