Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3-mUxdJ4qcVUe_qa_QDdCT3BeUg.roa
File:                     3-mUxdJ4qcVUe_qa_QDdCT3BeUg.roa (raw, json)
Hash identifier:          smz2lUIsYObeFyViSQnsfT0ym6H9R29lC4hUvP8/gow=
Subject key identifier:   DF:E9:94:C5:D2:78:A9:C5:54:7B:FA:9A:FD:00:DD:09:3D:C1:79:48
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0981
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3-mUxdJ4qcVUe_qa_QDdCT3BeUg.roa
Signing time:             Wed 29 Sep 2021 02:52:23 +0000
ROA not before:           Wed 29 Sep 2021 02:52:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131611
IP address blocks:        121.50.184.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2433 (0x981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Sep 29 02:52:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DFE994C5D278A9C5547BFA9AFD00DD093DC17948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:1f:19:93:e1:fd:3b:23:d5:63:e5:fc:05:
                    70:8d:e2:3d:77:b0:6f:9c:aa:86:e4:00:1f:7a:34:
                    12:7c:7c:95:b6:8d:f4:2c:43:45:b2:e9:31:d9:89:
                    ec:8e:2e:e3:88:34:90:2d:43:28:3f:df:f6:ba:d6:
                    ce:a8:d3:76:40:da:ba:8f:db:38:c5:65:1b:a5:9d:
                    ea:b3:e5:19:d1:54:25:eb:46:53:ed:8e:fb:18:6e:
                    e1:a7:8f:b5:ad:d4:88:d0:08:51:8e:97:a9:f1:95:
                    4c:dd:69:8e:94:6f:0a:1a:90:5b:e3:d8:dd:25:91:
                    f5:34:34:82:15:93:ce:f6:1e:44:80:e9:2e:79:05:
                    c6:0a:25:b4:54:c8:47:cf:75:e5:49:31:6a:0a:db:
                    35:ff:22:cb:81:e4:e1:8a:1b:92:14:b4:51:ac:0a:
                    6c:88:fc:87:d3:36:83:7c:47:34:3b:6b:c0:48:40:
                    31:10:29:11:c6:13:36:a4:05:79:b5:87:6d:b9:17:
                    fd:1e:5f:93:64:02:be:da:63:94:64:97:7e:91:97:
                    7a:b3:8f:a1:d2:25:8d:a0:ea:d4:20:0f:4d:20:03:
                    f4:05:c0:0f:d0:80:46:f0:d0:8d:ae:a8:0a:f1:94:
                    93:be:49:1b:fa:a7:11:8d:83:ab:52:fd:43:7a:41:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E9:94:C5:D2:78:A9:C5:54:7B:FA:9A:FD:00:DD:09:3D:C1:79:48
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3-mUxdJ4qcVUe_qa_QDdCT3BeUg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:0f:ae:ef:29:0d:50:91:91:7c:a5:f1:35:0e:0c:4d:29:
         fd:ed:1f:3b:16:06:77:c6:6c:dc:2f:5e:23:47:e8:97:23:d2:
         b2:f8:cf:3c:08:17:2a:ae:67:3d:b7:1f:24:7a:1e:f7:bd:69:
         1f:8a:00:eb:a0:84:69:10:e1:c2:1e:a5:25:c3:7b:8c:37:2b:
         a4:49:1d:e2:c1:43:72:8a:0c:f1:84:96:a9:f4:fa:32:de:73:
         60:87:47:eb:55:19:dc:a9:f7:09:72:0a:32:5c:bc:ba:73:f8:
         9a:f5:8e:c1:53:f4:f0:84:ab:3e:21:5f:02:e2:9a:07:27:0b:
         58:86:a5:05:f8:b1:21:04:09:2f:91:f8:f4:6b:7c:f7:29:84:
         26:27:1d:c5:13:f6:ad:fe:b8:2f:9a:d8:a1:80:42:66:99:4e:
         ec:4a:ad:ef:26:e8:f0:30:d2:21:04:56:a9:bc:79:51:59:19:
         02:1c:9e:d8:7d:64:11:c7:cb:34:54:4c:03:55:c4:82:b0:26:
         16:35:59:6f:fe:2a:a7:c1:2d:14:fd:48:be:cb:54:12:12:ab:
         d4:47:79:f8:11:fb:5b:e6:81:f7:4c:ad:d6:c5:4b:38:70:96:
         98:b1:d8:48:2f:56:b8:52:7a:2f:68:64:20:5f:4b:41:6a:38:
         8b:9e:50:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:00 2025 by rpki-client