Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VoMlul5k1AQcn7ZDwFRbaD2C6T4.roa
File:                     VoMlul5k1AQcn7ZDwFRbaD2C6T4.roa (raw, json)
Hash identifier:          WK02MoVJLgUJeCOheQ1nxpgSGEWY6oGfVE4SgBIs8Bw=
Subject key identifier:   56:83:25:BA:5E:64:D4:04:1C:9F:B6:43:C0:54:5B:68:3D:82:E9:3E
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VoMlul5k1AQcn7ZDwFRbaD2C6T4.roa
Signing time:             Thu 15 Sep 2022 02:39:17 +0000
ROA not before:           Thu 15 Sep 2022 02:39:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131627
IP address blocks:        150.116.83.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 15 02:39:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=568325BA5E64D4041C9FB643C0545B683D82E93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:cb:73:10:e7:ca:4c:35:4d:09:ae:14:6f:
                    e9:81:f6:10:6f:0e:a3:3e:93:ba:c8:a4:a3:70:d1:
                    99:01:05:80:93:a2:08:8a:ce:0b:6a:7d:4d:79:01:
                    6e:52:40:49:d9:3a:b1:ee:8d:77:cb:9f:eb:39:85:
                    88:ca:b9:1e:3d:08:2a:25:32:e9:7e:ee:79:4e:0b:
                    57:7a:0d:23:38:eb:e2:14:0b:b8:7b:b6:d1:6a:6c:
                    95:f0:20:11:37:95:bf:29:8f:53:21:13:51:06:cb:
                    80:90:4f:75:00:85:73:64:5a:f1:74:b7:13:5e:2d:
                    da:63:33:dd:1a:ed:74:d7:a3:ac:d3:f3:bb:5f:d5:
                    b9:dd:19:0e:08:4d:7d:6d:d5:26:b5:f4:28:2a:0e:
                    ee:a3:21:48:f3:1c:50:4b:94:03:bf:dc:68:30:1e:
                    d6:d4:e7:d2:7f:f6:7c:a4:95:7c:9f:18:c0:58:54:
                    37:07:96:69:f0:c8:f6:df:7a:99:1b:c8:65:fc:91:
                    41:ec:f3:02:d7:f1:62:01:cd:f2:a5:95:2c:e3:bb:
                    8b:86:09:2d:b3:5f:98:0a:c3:e6:44:47:35:1b:5b:
                    c7:39:f9:0c:c0:c5:d8:32:db:6d:61:41:9a:2c:0b:
                    73:4f:c9:e5:dd:66:31:9d:b4:f2:1f:0f:f2:71:cc:
                    33:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:83:25:BA:5E:64:D4:04:1C:9F:B6:43:C0:54:5B:68:3D:82:E9:3E
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/VoMlul5k1AQcn7ZDwFRbaD2C6T4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:df:59:35:7f:88:49:df:61:e3:39:fe:83:4a:f6:d9:03:06:
         ab:59:e9:01:84:6c:85:22:b4:3d:ad:38:69:d5:42:cf:14:8e:
         9e:4b:4f:99:b9:da:f1:b3:4e:9e:9e:38:26:22:9f:56:6e:54:
         c8:20:8b:58:32:c7:93:27:ed:e9:12:3e:56:a0:f1:19:f1:5e:
         fe:c5:e4:9c:8a:30:4b:d1:0b:82:aa:62:5b:68:ed:1f:cd:e6:
         25:a1:97:e1:8e:76:17:9c:27:23:91:b4:9d:7b:e7:41:b3:ad:
         8c:63:2a:e9:25:89:c1:b0:e0:e0:90:0c:f2:f3:2c:84:0f:b4:
         13:91:d2:a1:0c:a2:81:9b:91:8e:73:a2:a5:27:65:85:21:02:
         2f:ba:dd:3f:da:ad:44:bb:2c:79:da:4c:42:c1:13:27:56:0e:
         08:e5:f4:1d:ec:09:27:d7:3e:8a:52:7d:47:cb:b4:44:80:ec:
         3c:e8:7a:d6:95:2e:1d:65:85:18:d2:81:02:60:0c:30:ff:d8:
         06:91:18:d9:f5:9f:5d:0c:eb:76:99:9b:ed:00:8c:4c:cd:68:
         72:df:6d:cd:d1:48:89:fb:f3:15:d1:2d:e1:3d:8c:95:d4:ed:
         00:b3:47:0f:4d:73:c7:c8:da:29:8b:d1:e3:c1:05:ba:59:15:
         a9:94:b8:2a
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjA5MTUw
MjM5MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU2ODMyNUJBNUU2NEQ0
MDQxQzlGQjY0M0MwNTQ1QjY4M0Q4MkU5M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp3ctzEOfKTDVNCa4Ub+mB9hBvDqM+k7rIpKNw0ZkBBYCTogiK
zgtqfU15AW5SQEnZOrHujXfLn+s5hYjKuR49CColMul+7nlOC1d6DSM46+IUC7h7
ttFqbJXwIBE3lb8pj1MhE1EGy4CQT3UAhXNkWvF0txNeLdpjM90a7XTXo6zT87tf
1bndGQ4ITX1t1Sa19CgqDu6jIUjzHFBLlAO/3GgwHtbU59J/9nyklXyfGMBYVDcH
lmnwyPbfepkbyGX8kUHs8wLX8WIBzfKllSzju4uGCS2zX5gKw+ZERzUbW8c5+QzA
xdgy221hQZosC3NPyeXdZjGdtPIfD/JxzDPpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUVoMlul5k1AQcn7ZDwFRbaD2C6T4wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9Wb01sdWw1azFBUWNu
N1pEd0ZSYmFEMkM2VDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnRTMA0GCSqGSIb3DQEBCwUAA4IBAQCI31k1f4hJ32HjOf6DSvbZAwarWekB
hGyFIrQ9rThp1ULPFI6eS0+Zudrxs06enjgmIp9WblTIIItYMseTJ+3pEj5WoPEZ
8V7+xeScijBL0QuCqmJbaO0fzeYloZfhjnYXnCcjkbSde+dBs62MYyrpJYnBsODg
kAzy8yyED7QTkdKhDKKBm5GOc6KlJ2WFIQIvut0/2q1Euyx52kxCwRMnVg4I5fQd
7Akn1z6KUn1Hy7REgOw86HrWlS4dZYUY0oECYAww/9gGkRjZ9Z9dDOt2mZvtAIxM
zWhy323N0UiJ+/MV0S3hPYyV1O0As0cPTXPHyNopi9HjwQW6WRWplLgq
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:36 2025 by rpki-client