Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AwJADruVzKEVluMxE3wFXChK3lE.roa
File:                     AwJADruVzKEVluMxE3wFXChK3lE.roa (raw, json)
Hash identifier:          F9wx3wwXUqzYDOGVyhPFgcsiYfwykwzW16rheirbFVs=
Subject key identifier:   03:02:40:0E:BB:95:CC:A1:15:96:E3:31:13:7C:05:5C:28:4A:DE:51
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0893
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AwJADruVzKEVluMxE3wFXChK3lE.roa
Signing time:             Tue 29 Sep 2020 10:02:39 +0000
ROA not before:           Tue 29 Sep 2020 10:02:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131627
IP address blocks:        150.116.192.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195 (0x893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 29 10:02:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0302400EBB95CCA11596E331137C055C284ADE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:9d:9e:ca:06:91:9a:16:8c:a7:5a:bc:62:
                    48:11:f9:45:4b:09:0c:14:a5:cc:7e:91:4c:c5:06:
                    93:e3:86:13:75:f1:c5:9a:ed:00:fa:60:ef:d6:3c:
                    e4:7c:5e:b2:db:ae:30:36:92:f9:92:5a:01:4e:36:
                    8f:eb:7e:34:36:0d:3a:80:aa:81:f5:e5:92:c4:83:
                    5b:6a:3e:4d:f5:d9:e8:7a:ac:ad:c6:0b:f0:20:62:
                    43:4c:4c:aa:34:1a:8e:21:1f:3a:44:b6:5c:8d:76:
                    2e:5a:21:6d:e5:a8:59:fc:81:a7:82:96:9d:59:8d:
                    9d:29:f7:ce:c6:14:2c:b4:40:18:66:b5:6a:a6:46:
                    bc:3a:82:e1:e2:d1:66:91:c4:b6:8a:c2:20:9e:45:
                    93:38:17:a5:c6:7b:df:60:34:86:75:e1:c5:1a:a8:
                    e3:04:de:bd:42:3f:0a:f7:4b:b1:21:b2:fd:d9:ba:
                    ec:45:0c:b1:f8:eb:5b:2d:a1:24:e0:ea:cb:a0:12:
                    85:b4:c5:e7:f1:3f:dc:42:56:f7:98:59:fa:f0:d4:
                    be:f8:53:2d:1c:ee:78:f8:55:f5:ca:da:6f:f6:df:
                    68:5a:2d:6a:94:02:3c:5f:22:61:b6:04:a8:f1:12:
                    dd:b4:e9:a7:6c:39:62:d7:f2:0b:1b:54:5d:89:8b:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:02:40:0E:BB:95:CC:A1:15:96:E3:31:13:7C:05:5C:28:4A:DE:51
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/AwJADruVzKEVluMxE3wFXChK3lE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b6:de:09:42:b0:56:d0:49:46:53:5d:4d:d6:1e:78:25:7f:d9:
         39:90:f3:09:e0:b2:27:2c:0b:d8:24:9f:c7:12:09:a1:db:5e:
         a0:bc:65:55:a2:2c:14:7f:27:56:f2:31:68:77:0b:99:c5:9d:
         cf:43:93:81:8a:9f:af:2f:75:d2:33:9e:10:bc:3b:dc:c5:10:
         a9:08:bf:f8:32:0f:e6:c8:af:45:d3:77:dc:b3:c8:f8:9b:56:
         dc:be:2f:98:40:c7:50:37:99:1e:14:0b:1b:e6:9e:f6:ce:d3:
         26:26:1b:b8:ef:e7:3f:e6:fd:53:11:77:56:93:fd:61:fe:4d:
         2f:e0:23:99:36:1f:df:74:70:e3:7c:1f:de:ba:9a:12:52:64:
         58:79:7f:a4:67:14:e5:e3:94:92:d8:8c:68:2e:49:04:d6:e4:
         20:cc:92:db:fd:ff:75:48:3f:18:de:e3:c5:b5:d9:a1:9e:70:
         c2:63:46:4c:3b:fc:24:02:bc:25:c4:82:9f:21:ad:21:a2:e7:
         2a:4e:80:da:d4:37:21:31:09:29:a0:78:6f:0e:2a:ab:fd:04:
         6c:77:39:8d:72:3e:96:08:75:40:65:ee:b6:ce:ad:d8:9b:61:
         9a:f3:a5:d9:33:62:46:14:76:4c:37:6d:15:29:f1:9d:b4:37:
         da:47:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:42 2025 by rpki-client