Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/auvSWPqI2vc4bzm0LxpFpG4aEAU.roa
File:                     auvSWPqI2vc4bzm0LxpFpG4aEAU.roa (raw, json)
Hash identifier:          tuTZODqATC5ughLqwX2AYEFZZJBKcIffOTyTjMF0WVk=
Subject key identifier:   6A:EB:D2:58:FA:88:DA:F7:38:6F:39:B4:2F:1A:45:A4:6E:1A:10:05
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0C63
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/auvSWPqI2vc4bzm0LxpFpG4aEAU.roa
Signing time:             Sun 07 Feb 2021 11:43:10 +0000
ROA not before:           Sun 07 Feb 2021 11:43:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131627
IP address blocks:        106.105.0.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3171 (0xc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:43:10 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6AEBD258FA88DAF7386F39B42F1A45A46E1A1005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:e1:77:be:33:ae:c1:db:a1:53:d0:aa:8c:
                    9f:a6:65:e3:d4:c7:8d:91:ae:e4:d2:48:6e:54:d8:
                    be:cc:37:c3:b4:30:c3:e3:4e:90:22:af:3c:70:06:
                    48:eb:f3:12:81:b0:73:25:93:b5:9c:d0:e1:31:b0:
                    1e:3f:37:4a:06:da:26:61:f9:3e:81:53:ec:8a:90:
                    72:46:ef:12:67:c7:be:7b:34:74:1d:ea:b8:12:2a:
                    11:26:39:82:a8:28:f0:2a:b7:f1:e0:89:31:80:01:
                    88:ae:35:98:66:04:44:5a:f8:e7:82:f0:81:da:6b:
                    7c:d4:1f:a3:84:c1:80:da:bc:e7:55:cb:0a:6d:d9:
                    11:09:7a:09:42:a8:c3:2f:0d:4d:35:9f:99:72:6c:
                    8b:ae:a6:65:39:91:e2:d5:a2:fa:d5:e7:93:2e:aa:
                    e6:9c:ed:07:54:49:fb:6a:0f:31:fd:73:90:e0:64:
                    03:65:9c:16:3c:b4:6b:2c:b8:d5:b8:27:46:f1:99:
                    63:ec:dd:a1:c0:9e:6a:2a:93:8f:c0:91:e7:24:56:
                    a6:db:cd:f9:56:32:c5:05:13:4e:99:fd:a7:01:b6:
                    dc:43:95:33:4a:75:b7:22:0c:b9:5d:e7:3b:d0:9c:
                    eb:e3:3e:9e:34:f6:40:56:8e:b8:fe:14:ec:18:28:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EB:D2:58:FA:88:DA:F7:38:6F:39:B4:2F:1A:45:A4:6E:1A:10:05
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/auvSWPqI2vc4bzm0LxpFpG4aEAU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:bb:bf:b1:a8:39:b9:ce:e7:23:8c:55:b9:f5:6f:78:72:78:
         b3:47:c6:cd:f3:a4:94:c5:ad:c5:c9:ae:ca:c3:8d:d1:f4:e0:
         06:66:c0:a2:e0:0e:f5:f5:a2:21:cd:a9:25:b5:21:7e:ec:58:
         74:5b:74:cf:2d:5f:d5:c8:e7:14:33:78:13:fa:2d:6c:ac:d4:
         62:33:05:55:90:d0:06:01:29:e1:df:dd:3a:0c:2d:6b:2c:da:
         0a:a5:5b:fd:c6:88:ea:7c:24:1f:92:4f:d9:df:a1:b5:f6:ac:
         16:d1:4d:d1:94:26:53:19:0b:5e:54:e4:e8:e0:49:b5:fb:c8:
         22:15:95:69:ac:fc:6b:a6:e0:aa:a0:fa:af:81:16:6e:e6:43:
         bf:86:44:92:b7:20:2e:be:f8:4f:a9:08:e1:41:ae:de:b0:c9:
         28:0e:21:20:ea:f6:7d:38:e2:87:ff:2a:43:20:9c:7b:8e:76:
         16:19:70:41:b3:b0:6a:d5:f9:c1:82:70:c6:39:4d:15:d4:e8:
         27:37:f7:94:4d:6d:cb:84:d6:d5:ad:76:f2:df:3c:32:e9:d8:
         f0:6e:22:89:1e:c5:85:72:c4:d9:26:8f:6a:f9:85:4a:74:34:
         4a:a2:0a:05:b1:a2:15:a3:9a:5a:e3:ec:3a:21:c7:0f:a9:9c:
         45:cc:7f:6f
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQzMTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZBRUJEMjU4RkE4OERB
RjczODZGMzlCNDJGMUE0NUE0NkUxQTEwMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbzeF3vjOuwduhU9CqjJ+mZePUx42RruTSSG5U2L7MN8O0MMPj
TpAirzxwBkjr8xKBsHMlk7Wc0OExsB4/N0oG2iZh+T6BU+yKkHJG7xJnx757NHQd
6rgSKhEmOYKoKPAqt/HgiTGAAYiuNZhmBERa+OeC8IHaa3zUH6OEwYDavOdVywpt
2REJeglCqMMvDU01n5lybIuupmU5keLVovrV55Muquac7QdUSftqDzH9c5DgZANl
nBY8tGssuNW4J0bxmWPs3aHAnmoqk4/AkeckVqbbzflWMsUFE06Z/acBttxDlTNK
dbciDLld5zvQnOvjPp409kBWjrj+FOwYKC4dAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUauvSWPqI2vc4bzm0LxpFpG4aEAUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvYXV2U1dQcUkydmM0YnptMEx4cEZw
RzRhRUFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGppADAN
BgkqhkiG9w0BAQsFAAOCAQEAGLu/sag5uc7nI4xVufVveHJ4s0fGzfOklMWtxcmu
ysON0fTgBmbAouAO9fWiIc2pJbUhfuxYdFt0zy1f1cjnFDN4E/otbKzUYjMFVZDQ
BgEp4d/dOgwtayzaCqVb/caI6nwkH5JP2d+htfasFtFN0ZQmUxkLXlTk6OBJtfvI
IhWVaaz8a6bgqqD6r4EWbuZDv4ZEkrcgLr74T6kI4UGu3rDJKA4hIOr2fTjih/8q
QyCce452FhlwQbOwatX5wYJwxjlNFdToJzf3lE1ty4TW1a128t88MunY8G4iiR7F
hXLE2SaPavmFSnQ0SqIKBbGiFaOaWuPsOiHHD6mcRcx/bw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:44 2025 by rpki-client