Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/nmfcuVt3TugVRfsw0Bm5gKeAMmg.roa
File:                     nmfcuVt3TugVRfsw0Bm5gKeAMmg.roa (raw, json)
Hash identifier:          AT7kP/oEHX5YP5kiXjwYYxDdfKCnwvJuf7aMJphM0OE=
Subject key identifier:   9E:67:DC:B9:5B:77:4E:E8:15:45:FB:30:D0:19:B9:80:A7:80:32:68
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nmfcuVt3TugVRfsw0Bm5gKeAMmg.roa
Signing time:             Thu 15 Sep 2022 02:42:54 +0000
ROA not before:           Thu 15 Sep 2022 02:42:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131584
IP address blocks:        106.105.183.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 15 02:42:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9E67DCB95B774EE81545FB30D019B980A7803268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:d9:85:da:3d:59:45:e5:df:83:1b:75:f6:
                    29:1e:77:45:ee:df:6c:f8:41:ca:e3:f2:1c:9c:cf:
                    2a:be:ac:ce:ff:9c:af:03:36:36:c5:fe:8c:04:a9:
                    e0:a7:cd:3b:94:2d:9d:1e:d8:ae:d0:3f:6e:51:95:
                    9b:e4:ca:f9:ae:8f:b7:db:18:41:40:ae:c3:98:f1:
                    f4:48:74:c8:d0:b8:b0:16:0d:b8:e2:37:f8:9b:c6:
                    0d:14:9d:b0:d3:a2:43:5c:77:43:60:5f:b8:53:e0:
                    cb:f8:b5:01:0a:ff:37:72:6d:09:13:f7:da:49:37:
                    68:a4:4a:e4:48:8b:11:d8:df:0f:06:26:39:a4:14:
                    25:fb:bb:e9:aa:19:81:49:cb:a9:4f:d5:2e:c0:77:
                    73:9a:bf:77:35:57:ff:ff:69:ae:66:82:a8:c0:9b:
                    9b:db:52:f4:85:5d:ab:35:7f:47:a1:74:80:54:a6:
                    df:bd:dc:f0:ae:06:b0:41:0f:28:80:35:87:8d:bd:
                    36:d3:96:9e:7a:b6:57:06:1a:ed:90:61:5d:af:72:
                    73:eb:a3:6e:8c:1f:50:41:8c:10:7b:b6:fe:ab:86:
                    0d:4e:c0:81:df:a6:32:ca:74:fc:a8:0c:a7:51:c7:
                    c2:83:a4:c2:39:6b:2c:77:ec:41:e4:db:ba:e5:ad:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:67:DC:B9:5B:77:4E:E8:15:45:FB:30:D0:19:B9:80:A7:80:32:68
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/nmfcuVt3TugVRfsw0Bm5gKeAMmg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:28:45:24:ba:9f:b6:57:97:0f:60:9a:24:22:42:fb:17:4e:
         77:4e:9e:d5:e5:1a:6d:66:1e:fa:79:51:24:cf:f6:35:24:d5:
         ad:c4:be:5c:da:07:20:58:37:c8:73:86:a8:30:56:92:b4:93:
         77:a0:7c:d7:74:83:8d:40:f5:65:08:97:9d:cd:86:d6:54:73:
         9c:49:be:ff:1e:e6:6f:8a:a9:89:d2:24:a1:15:5c:b4:a8:65:
         1b:ec:2e:15:8a:4e:f5:7d:5e:92:62:35:a6:f3:84:c1:a2:fe:
         ec:71:d2:62:23:bd:b1:ae:ba:c3:93:cd:c6:4e:ab:f5:d8:22:
         e5:cf:94:32:3c:60:62:84:95:11:ce:68:a8:6f:34:45:90:0e:
         59:c5:7c:ad:1c:16:b9:bc:72:30:91:93:eb:d8:5b:61:ae:f9:
         63:57:70:f0:fe:62:dd:e2:ab:1b:1a:a6:b3:11:1f:81:c7:81:
         ee:f9:ee:94:68:cc:1e:5c:62:cc:3f:1c:76:f4:e0:1d:a7:39:
         6e:31:7b:c3:7b:eb:a6:b9:1c:86:98:cf:9a:6e:e8:f7:47:52:
         d8:eb:27:49:25:88:0c:aa:ae:2a:3b:80:96:39:3b:39:73:ae:
         ba:d1:19:cf:40:1f:ac:a6:2c:0c:e5:20:3f:2a:7a:fa:c3:db:
         ea:b0:21:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:40 2025 by rpki-client