Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/QliQ61PQ-H_dpc1QW-oivbSmrK4.roa
File:                     QliQ61PQ-H_dpc1QW-oivbSmrK4.roa (raw, json)
Hash identifier:          9zOyUO66r/rzEAz+SB/f81qc+H4Fh/a/H6L7g3AasFI=
Subject key identifier:   42:58:90:EB:53:D0:F8:7F:DD:A5:CD:50:5B:EA:22:BD:B4:A6:AC:AE
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0B20
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/QliQ61PQ-H_dpc1QW-oivbSmrK4.roa
Signing time:             Sun 07 Feb 2021 13:08:03 +0000
ROA not before:           Sun 07 Feb 2021 13:08:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     141167
IP address blocks:        150.116.81.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2848 (0xb20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Feb  7 13:08:03 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=425890EB53D0F87FDDA5CD505BEA22BDB4A6ACAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:df:c4:6d:55:57:42:f1:b6:e1:1c:38:db:fe:
                    93:c2:9a:ae:b7:6d:55:e7:fc:5f:91:82:53:14:af:
                    a2:7f:98:b7:28:53:13:d3:30:73:aa:a0:99:15:cd:
                    d3:e6:8b:fe:4c:01:d3:69:5b:a2:aa:8d:a7:18:32:
                    af:1c:1c:7d:e0:a1:67:f5:51:c6:e4:7b:a3:62:bd:
                    25:e6:44:72:a0:dd:71:61:22:01:b1:65:7b:80:13:
                    a5:17:27:07:29:5f:37:85:c1:0a:c5:79:1e:28:4b:
                    47:ac:4c:d4:36:f6:13:54:b5:2b:43:bd:7b:65:8c:
                    20:0c:2b:ca:c8:18:ed:7b:b8:38:ee:01:63:a6:a3:
                    04:3e:e5:df:b6:dd:ea:7c:ef:87:84:2a:cd:3c:02:
                    43:6a:90:ae:42:47:ff:5e:91:c2:79:75:09:85:dd:
                    78:d8:9a:39:ce:1f:49:38:63:7e:d9:f6:d9:03:69:
                    58:db:fb:0b:bc:db:d5:7e:2f:12:44:74:52:f5:bc:
                    68:26:24:ed:6b:67:20:3b:60:a1:ee:fd:74:2c:b2:
                    ea:c2:15:dd:5c:5a:29:ec:af:54:c7:61:61:5a:a4:
                    2c:d6:50:1d:bc:11:bb:55:1f:dc:15:11:e5:fe:a0:
                    09:e8:db:47:c7:27:aa:00:98:4d:cd:3c:b4:e2:83:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:58:90:EB:53:D0:F8:7F:DD:A5:CD:50:5B:EA:22:BD:B4:A6:AC:AE
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/QliQ61PQ-H_dpc1QW-oivbSmrK4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:69:c1:e3:37:dc:a7:cb:60:58:34:8c:21:11:7f:bc:c1:76:
         cb:fd:6c:31:e8:ac:ea:a2:37:63:f9:8c:c0:fb:d2:e1:df:53:
         a7:b2:e1:5a:49:9e:c5:21:a2:e5:20:d8:2b:36:81:e6:fb:36:
         60:28:75:cc:8e:ce:76:79:c3:f0:57:79:fb:11:2b:29:f7:fa:
         75:56:21:20:d3:e7:1f:df:d2:3a:cf:5c:b5:58:df:b0:4c:f7:
         60:ea:0f:15:e7:3d:2e:87:56:1a:26:69:81:36:8c:6d:22:89:
         b6:32:df:1e:db:ba:89:45:62:33:fb:17:6f:c7:35:a7:54:be:
         e9:31:47:35:5f:6d:ab:54:1c:91:99:5b:f8:32:27:bd:c1:5d:
         00:25:c9:0e:85:83:1f:7d:7c:91:7a:28:f2:63:a4:bf:54:5a:
         ae:a7:75:0b:d5:f6:92:4f:b4:74:b0:5a:1d:3f:ee:ac:b7:f1:
         df:7f:0d:2e:61:ad:ef:53:43:7e:98:2c:2b:48:64:88:8e:61:
         ae:17:45:14:e7:bb:00:f1:53:ba:1a:33:20:d3:ef:d6:b9:b0:
         99:10:ad:31:6e:04:7b:4a:ec:b6:99:14:d6:14:6f:37:9d:9f:
         aa:e1:f4:07:45:62:5d:d6:61:10:84:8b:22:79:7e:78:e4:1e:
         64:b2:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:59 2025 by rpki-client