Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_pLVHcpEuFXgY2Keajzmm9rclcY.roa
File:                     _pLVHcpEuFXgY2Keajzmm9rclcY.roa (raw, json)
Hash identifier:          bNHN/NPi8y4AL5lKQfMGG/yXYS3JHQV6orIegGqlQvo=
Subject key identifier:   FE:92:D5:1D:CA:44:B8:55:E0:63:62:9E:6A:3C:E6:9B:DA:DC:95:C6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0EBA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_pLVHcpEuFXgY2Keajzmm9rclcY.roa
Signing time:             Wed 29 Sep 2021 02:43:54 +0000
ROA not before:           Wed 29 Sep 2021 02:43:54 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        123.51.181.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3770 (0xeba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:54 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FE92D51DCA44B855E063629E6A3CE69BDADC95C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:66:0d:d0:da:26:d5:d7:ef:9b:d1:f9:a6:
                    9e:9b:61:46:5a:65:af:70:ac:26:6e:9e:20:d9:4a:
                    46:ce:90:c1:93:6d:81:fa:6b:19:68:50:72:da:2c:
                    8f:d1:53:8b:6c:e6:3d:e9:07:db:e1:d8:f8:8b:a6:
                    b2:ef:45:23:ce:5b:a6:a2:42:ce:8d:90:b8:66:ca:
                    1d:41:9e:29:14:e1:dd:12:ae:d2:a0:be:21:00:13:
                    91:bf:2e:2f:4c:89:1a:47:46:08:d4:76:1d:f4:4c:
                    05:e4:26:1b:28:87:d3:12:f7:5c:60:30:46:f2:3f:
                    59:e3:f0:55:e4:76:4e:47:83:cc:4a:94:be:f3:b4:
                    ae:d0:6e:b7:71:9d:0e:04:be:13:8f:a2:1c:69:96:
                    d2:47:02:e6:46:db:0f:c2:f7:03:69:2b:17:a1:d5:
                    40:7e:39:c2:40:e0:67:53:34:4e:63:27:2b:3a:2a:
                    b4:f6:22:26:f8:78:02:83:70:4b:1d:7e:33:68:70:
                    35:cd:ee:b4:3f:bc:b7:69:d7:5c:87:b5:66:5c:f4:
                    8c:f8:2d:25:a1:bb:6b:b1:fc:5c:f7:36:7b:3a:39:
                    14:2d:5f:83:66:68:9a:23:6f:99:12:97:7e:0d:21:
                    b2:f4:cf:9d:5f:5b:42:07:db:b0:7f:e0:be:a2:36:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:D5:1D:CA:44:B8:55:E0:63:62:9E:6A:3C:E6:9B:DA:DC:95:C6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_pLVHcpEuFXgY2Keajzmm9rclcY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.51.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:3d:c6:af:99:27:fc:4e:93:f5:0e:f3:04:89:e0:67:0f:2e:
         76:31:8a:4f:ea:93:37:72:2a:fd:36:e6:2e:8c:42:47:e1:f9:
         ee:26:f9:56:b4:b5:f8:24:ac:00:52:de:8b:e4:0d:75:5d:a1:
         ab:9a:27:ae:76:33:9c:44:42:b8:53:65:1f:2b:84:25:7c:ad:
         b0:5c:49:7d:92:08:e7:d0:d3:b5:83:71:84:81:52:01:53:e6:
         3c:5a:fc:fb:eb:2d:12:9d:11:5a:00:31:4d:bd:7c:49:81:48:
         d6:66:10:97:5e:d7:49:d1:dd:f4:19:86:88:f8:ff:c3:f1:20:
         bf:0c:61:7f:e6:26:d0:62:d8:46:67:4e:02:24:b7:4c:ba:2d:
         ba:8b:e6:0c:18:6c:d4:70:14:d0:53:03:97:96:62:a0:28:41:
         ba:45:28:02:c2:34:a8:2e:db:7f:f3:73:e9:f2:0f:12:07:d2:
         67:98:1b:80:05:17:70:3b:ef:5f:38:cf:79:9d:df:0c:60:72:
         fe:6a:4d:ac:15:a9:c5:51:43:fb:d9:01:25:81:1a:26:fd:67:
         eb:43:87:68:05:db:95:1f:6c:d6:a4:4a:63:a4:96:e3:86:d2:
         1e:e4:0d:db:04:21:e2:13:9c:58:ed:3d:1f:8c:3e:67:6b:69:
         14:66:52:46
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzNTRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZFOTJENTFEQ0E0NEI4
NTVFMDYzNjI5RTZBM0NFNjlCREFEQzk1QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCql2YN0Nom1dfvm9H5pp6bYUZaZa9wrCZuniDZSkbOkMGTbYH6
axloUHLaLI/RU4ts5j3pB9vh2PiLprLvRSPOW6aiQs6NkLhmyh1BnikU4d0SrtKg
viEAE5G/Li9MiRpHRgjUdh30TAXkJhsoh9MS91xgMEbyP1nj8FXkdk5Hg8xKlL7z
tK7QbrdxnQ4EvhOPohxpltJHAuZG2w/C9wNpKxeh1UB+OcJA4GdTNE5jJys6KrT2
Iib4eAKDcEsdfjNocDXN7rQ/vLdp11yHtWZc9Iz4LSWhu2ux/Fz3Nns6ORQtX4Nm
aJojb5kSl34NIbL0z51fW0IH27B/4L6iNrKHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU/pLVHcpEuFXgY2Keajzmm9rclcYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvX3BMVkhjcEV1RlhnWTJLZWFqem1t
OXJjbGNZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHsztTAN
BgkqhkiG9w0BAQsFAAOCAQEACT3Gr5kn/E6T9Q7zBIngZw8udjGKT+qTN3Iq/Tbm
LoxCR+H57ib5VrS1+CSsAFLei+QNdV2hq5onrnYznERCuFNlHyuEJXytsFxJfZII
59DTtYNxhIFSAVPmPFr8++stEp0RWgAxTb18SYFI1mYQl17XSdHd9BmGiPj/w/Eg
vwxhf+Ym0GLYRmdOAiS3TLotuovmDBhs1HAU0FMDl5ZioChBukUoAsI0qC7bf/Nz
6fIPEgfSZ5gbgAUXcDvvXzjPeZ3fDGBy/mpNrBWpxVFD+9kBJYEaJv1n60OHaAXb
lR9s1qRKY6SW44bSHuQN2wQh4hOcWO09H4w+Z2tpFGZSRg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:58 2025 by rpki-client