Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AIRPAYTW/Vr-Zocc5-LNU6hTTMJHGrB-0vi8.roa
File:                     Vr-Zocc5-LNU6hTTMJHGrB-0vi8.roa (raw, json)
Hash identifier:          S/4UJqp7gxIbiLzKkF8DT4nw7zGrfmg1uaLrMZ7DQHE=
Subject key identifier:   56:BF:99:A1:C7:39:F8:B3:54:EA:14:D3:30:91:C6:AC:1F:B4:BE:2F
Certificate issuer:       /CN=23E0C44033B500F78931D123EBD9F35E9AE17DC4
Certificate serial:       0C6E
Authority key identifier: 23:E0:C4:40:33:B5:00:F7:89:31:D1:23:EB:D9:F3:5E:9A:E1:7D:C4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/I-DEQDO1APeJMdEj69nzXprhfcQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AIRPAYTW/Vr-Zocc5-LNU6hTTMJHGrB-0vi8.roa
Signing time:             Tue 29 Sep 2020 09:59:10 +0000
ROA not before:           Tue 29 Sep 2020 09:59:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131635
IP address blocks:        103.127.232.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3182 (0xc6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23E0C44033B500F78931D123EBD9F35E9AE17DC4
        Validity
            Not Before: Sep 29 09:59:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=56BF99A1C739F8B354EA14D33091C6AC1FB4BE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:75:de:84:67:1e:e2:a2:f9:6b:54:46:21:
                    3c:ae:79:34:8c:1b:80:9a:cd:9a:0c:af:52:20:79:
                    87:4e:55:8f:2b:ad:35:a3:fa:98:20:ea:c2:2f:da:
                    dc:1b:ae:ff:0c:d0:16:7d:a0:e1:28:8f:4a:e7:ec:
                    ff:92:ce:73:a0:8d:ed:0c:5e:35:b5:df:82:80:a4:
                    af:bf:75:6b:21:01:35:e1:09:7c:82:65:0e:39:e7:
                    4a:4f:45:2b:59:b9:e1:66:ff:b5:e5:c0:6f:8b:e6:
                    94:ee:81:e9:1f:91:58:43:8e:cd:4a:19:c8:91:08:
                    f7:47:37:11:0f:f2:91:6d:54:96:9c:14:6c:73:02:
                    9c:dc:14:d3:30:04:4c:ff:40:67:a9:c5:19:a0:fe:
                    90:c6:48:d3:88:d7:99:a8:12:ec:02:ea:d5:72:8d:
                    fb:d8:1b:00:16:40:20:09:fe:bd:13:39:13:28:82:
                    03:a7:fa:d9:f3:e7:d3:e2:c5:66:5b:8e:1f:95:58:
                    3f:5a:04:54:0d:09:ab:ca:f1:fb:cc:4e:ee:79:6d:
                    b5:8c:08:70:8d:d8:72:9f:27:75:ee:c0:b3:ec:e8:
                    7c:d6:02:e9:3e:10:9e:d3:1b:68:f3:93:a4:9e:2e:
                    23:a5:8c:a6:9e:e1:48:16:f3:3a:6c:a2:e5:93:d5:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BF:99:A1:C7:39:F8:B3:54:EA:14:D3:30:91:C6:AC:1F:B4:BE:2F
            X509v3 Authority Key Identifier:
                keyid:23:E0:C4:40:33:B5:00:F7:89:31:D1:23:EB:D9:F3:5E:9A:E1:7D:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AIRPAYTW/I-DEQDO1APeJMdEj69nzXprhfcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/I-DEQDO1APeJMdEj69nzXprhfcQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AIRPAYTW/Vr-Zocc5-LNU6hTTMJHGrB-0vi8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:f1:9d:98:13:2f:8d:0a:f0:08:b9:03:d6:ba:b0:0f:79:73:
         54:c0:27:f2:b0:db:23:68:fc:33:d7:89:1d:e5:48:72:e6:77:
         e3:95:7e:92:b9:a2:7c:92:26:77:b4:a6:8d:d7:e6:60:77:3e:
         6c:17:53:b0:3f:4e:44:3d:b7:f4:40:a8:06:ce:1f:07:fb:87:
         29:31:bb:a8:90:b7:74:e9:14:2f:b0:ec:ca:47:bc:26:38:05:
         a7:00:50:1e:bf:2c:31:14:74:b8:59:56:de:38:97:41:b4:e0:
         63:82:0a:be:2e:4f:40:72:0b:1d:69:ed:24:f8:8c:dd:b7:52:
         ee:45:f1:30:e9:73:65:cd:c9:22:a1:5d:ed:cc:9f:72:51:38:
         36:c0:4f:08:a0:cc:06:8e:e9:eb:10:8c:09:c3:62:ab:0a:7e:
         44:cb:2d:9f:cb:e3:97:b8:a2:42:12:3c:fb:17:0b:4d:0e:18:
         05:74:35:a2:30:28:8b:cc:a4:bc:dd:9a:4c:98:e7:b3:a4:57:
         67:8c:28:b8:83:3d:4d:9e:95:e9:2a:1a:2a:2f:fa:13:b2:52:
         f1:25:8e:bb:7a:72:5b:61:65:04:e6:3d:59:f1:f2:4a:85:93:
         61:90:69:48:96:e4:d2:58:d9:c8:8d:2d:33:82:1f:b3:32:33:
         94:dd:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:10 2025 by rpki-client