Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9G-G4MahZoiAz2-N602uhSeC_iQ.roa
File:                     9G-G4MahZoiAz2-N602uhSeC_iQ.roa (raw, json)
Hash identifier:          9A2L6uqLIv3ctFkwHb/HwEBUM1i5LykO8OXBeQikDvs=
Subject key identifier:   F4:6F:86:E0:C6:A1:66:88:80:CF:6F:8D:EB:4D:AE:85:27:82:FE:24
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0867
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9G-G4MahZoiAz2-N602uhSeC_iQ.roa
Signing time:             Tue 29 Sep 2020 10:02:25 +0000
ROA not before:           Tue 29 Sep 2020 10:02:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     63199
IP address blocks:        150.116.82.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 29 10:02:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F46F86E0C6A1668880CF6F8DEB4DAE852782FE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:b1:e6:a5:2c:6a:2e:bc:14:dd:99:4d:f5:
                    71:fb:0b:d5:62:9d:31:5c:07:55:14:9b:e7:b8:06:
                    d6:18:4a:a7:c5:1f:11:84:d7:27:85:00:b5:b2:61:
                    42:64:3a:4d:29:69:4a:00:6b:1d:2a:c2:ee:e5:15:
                    51:32:80:9e:e1:59:ca:0c:97:88:20:7a:42:90:1c:
                    3a:9a:96:5b:3e:b7:d3:e7:07:40:1c:0c:fb:cf:1e:
                    b6:b5:be:54:cf:4d:b3:7a:db:ef:d1:16:a5:bc:2a:
                    0e:d7:27:93:2f:b3:cf:89:4c:c0:f3:67:9e:81:9d:
                    63:64:8c:39:46:7e:d9:32:d3:55:ba:6a:63:21:bd:
                    c0:96:8c:3e:aa:53:b3:35:54:5e:fc:88:2c:c1:b7:
                    ae:56:09:20:69:76:85:f3:dd:e4:13:31:18:ba:b7:
                    27:f2:e6:d1:0b:4e:42:b0:36:7c:5d:7a:93:a1:9d:
                    d9:3f:aa:18:8e:64:56:14:62:50:82:6f:5d:c2:c9:
                    3c:f8:db:f8:f6:9e:67:43:a1:b8:a1:43:42:9c:32:
                    9e:56:49:6f:64:e3:da:fc:e7:4b:49:47:30:3c:9b:
                    40:b8:fe:2d:a3:71:e5:9b:dd:54:ba:ff:a8:ab:bb:
                    6c:20:03:c0:f5:cc:34:44:55:24:b3:f0:aa:ec:45:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6F:86:E0:C6:A1:66:88:80:CF:6F:8D:EB:4D:AE:85:27:82:FE:24
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9G-G4MahZoiAz2-N602uhSeC_iQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f6:79:01:ea:83:84:21:89:34:73:09:62:90:09:f4:b7:26:
         98:b6:65:fd:55:a9:bd:a3:d9:fa:c9:96:94:7f:e8:ae:d4:1c:
         02:1e:24:ac:56:59:c0:75:75:c6:f6:77:a4:50:a2:68:4d:c4:
         e2:67:d5:fa:8c:86:a0:ae:41:92:a8:fe:1a:42:dd:98:8f:a9:
         4e:45:24:31:eb:30:3f:a8:c6:00:2c:3d:ae:6d:61:4d:22:a5:
         5f:cb:09:47:cb:ba:10:16:4c:a4:bb:08:03:ed:6f:d9:b0:bf:
         76:98:22:17:17:48:ce:db:5e:2c:c8:58:47:79:a9:71:f7:b3:
         17:8a:9f:64:bd:06:b5:e3:6f:86:23:40:ac:5d:6d:01:ff:2f:
         58:de:f8:51:55:c2:9f:e4:da:ff:f0:a8:29:8a:02:3b:b9:9f:
         f3:90:36:d4:53:26:6d:d8:6a:b7:99:5a:29:27:1e:62:e3:04:
         8e:34:da:01:01:69:91:ba:d8:b1:50:c8:6a:e7:cf:2f:8a:c6:
         76:04:87:c7:e8:bc:c5:f6:d8:cf:cb:7b:63:ee:82:95:11:f0:
         a1:33:65:b5:23:b1:56:48:31:e3:be:38:d8:28:33:3e:ee:8b:
         18:13:d7:3b:06:87:b5:fb:e3:c6:3e:5c:eb:57:32:d7:09:fb:
         66:f6:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:04 2025 by rpki-client