Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_sPfmj41x78ogfjtKUXLyKrSkI8.roa
File:                     _sPfmj41x78ogfjtKUXLyKrSkI8.roa (raw, json)
Hash identifier:          x3ysfo4dagPQkWJixRi04c09rpkWcYur1Pz8OyZK0QM=
Subject key identifier:   FE:C3:DF:9A:3E:35:C7:BF:28:81:F8:ED:29:45:CB:C8:AA:D2:90:8F
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_sPfmj41x78ogfjtKUXLyKrSkI8.roa
Signing time:             Thu 15 Sep 2022 02:43:32 +0000
ROA not before:           Thu 15 Sep 2022 02:43:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9919
IP address blocks:        122.146.0.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:43:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FEC3DF9A3E35C7BF2881F8ED2945CBC8AAD2908F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:9d:cc:a9:ee:03:3d:6c:89:de:c7:ce:e1:
                    43:3d:dc:09:3f:05:a4:70:03:0c:bf:30:15:99:1e:
                    6f:74:94:68:56:7f:9b:d9:ce:24:c9:59:1c:1d:6e:
                    b0:62:02:88:92:b5:46:70:63:77:0f:16:f4:3d:db:
                    43:3d:6c:83:55:fe:07:55:12:65:55:3b:bd:84:fc:
                    8f:96:f6:01:63:31:5b:a8:6c:8d:77:73:0a:41:1c:
                    e7:bb:e2:13:5f:94:65:70:d3:6f:33:f3:05:c8:12:
                    71:c6:c0:5c:cf:25:6f:08:f0:19:a7:69:18:45:bd:
                    54:77:ee:62:65:4e:a1:6f:0e:35:1c:87:51:87:90:
                    f4:90:14:5c:b6:a6:8b:42:54:74:3a:cd:40:ef:3d:
                    6a:be:02:ce:75:e2:d4:82:5f:0e:4d:37:b5:ec:a6:
                    5d:4e:24:14:b3:1c:30:ca:f8:c5:3d:92:aa:a2:ea:
                    7c:3d:50:e6:e5:53:c7:16:09:eb:a3:5a:be:7b:3e:
                    2d:8b:eb:37:1c:c8:10:f0:0b:e4:79:55:ff:66:ef:
                    15:df:50:5b:68:ae:4d:4d:a2:a7:07:36:e3:d4:0c:
                    f0:70:f9:98:e3:01:f4:38:d6:72:29:3a:2e:04:6f:
                    57:69:f3:e2:b7:37:a1:6f:be:b6:e8:e7:24:48:40:
                    e7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C3:DF:9A:3E:35:C7:BF:28:81:F8:ED:29:45:CB:C8:AA:D2:90:8F
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_sPfmj41x78ogfjtKUXLyKrSkI8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         05:11:78:98:6d:34:1c:5e:cc:b5:44:5c:66:5a:72:cb:84:3f:
         c1:f2:ed:60:76:ae:2f:fc:33:81:08:cc:e1:ab:a8:72:51:fc:
         15:80:aa:ca:9e:86:dc:58:64:6b:52:dc:06:d2:7d:55:84:67:
         c9:ea:d1:d2:3d:62:34:af:22:0c:45:78:e3:62:a3:e1:de:f9:
         bf:07:96:5f:27:28:4b:61:37:2d:52:0d:b3:cf:29:5a:83:1d:
         96:cc:2f:9e:44:df:2f:05:8d:f5:cf:9b:a0:83:ab:81:a6:51:
         20:2c:47:28:27:90:93:ed:d3:27:c8:68:5f:bd:a5:26:81:d9:
         bc:f3:c3:0b:1a:c9:7c:03:da:5b:62:98:6e:48:a9:5b:b8:bf:
         5f:fd:24:fe:8f:2b:e1:ec:d7:1b:91:50:de:35:b8:ee:3e:95:
         fc:fd:e7:c8:ea:d8:f9:7c:86:24:b3:ad:2c:21:20:1d:bd:d3:
         de:da:0e:14:f6:d1:db:e6:f3:d2:bd:6a:75:33:99:cb:28:b9:
         1b:14:9f:f3:43:8b:fe:bf:8b:57:05:21:81:0f:e6:b0:f6:7b:
         45:ed:da:dd:3f:87:ab:ce:40:80:bb:f3:9b:af:43:01:42:57:
         62:bc:23:f2:bb:0e:98:19:51:5b:d5:d0:03:33:64:1e:5b:7d:
         fc:a5:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:03 2025 by rpki-client