Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/VpybtK3IdQd9UR8FHl67IVYR0uU.roa
File:                     VpybtK3IdQd9UR8FHl67IVYR0uU.roa (raw, json)
Hash identifier:          vZwkBgUJGBZ3p4PmVBTyTnDO8omunxLL9mwMz4f42Ac=
Subject key identifier:   56:9C:9B:B4:AD:C8:75:07:7D:51:1F:05:1E:5E:BB:21:56:11:D2:E5
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0A6F
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/VpybtK3IdQd9UR8FHl67IVYR0uU.roa
Signing time:             Thu 15 Sep 2022 02:49:55 +0000
ROA not before:           Thu 15 Sep 2022 02:49:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18046
IP address blocks:        150.129.36.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2671 (0xa6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Sep 15 02:49:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=569C9BB4ADC875077D511F051E5EBB215611D2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:6c:db:32:9b:3c:b1:a2:2c:34:16:f0:2b:
                    14:93:e7:be:b9:77:b0:9a:c8:3d:1d:d8:85:b8:9e:
                    73:a9:b3:7f:8b:e3:30:a5:83:88:c4:48:32:7f:d7:
                    04:e3:ec:9e:8c:28:33:f9:1c:07:f2:9b:a8:96:3a:
                    ed:5b:06:75:64:a7:b8:83:ea:cd:d1:ec:68:ac:cd:
                    31:53:7b:85:81:19:a9:2d:ff:07:ec:96:ba:5a:23:
                    0e:cc:07:4a:71:20:eb:d2:ff:6a:b0:d1:56:35:25:
                    ae:54:d4:88:2f:6c:c9:d2:60:e3:09:90:62:8b:f4:
                    4c:50:2f:29:a7:f9:bd:2e:b7:83:97:43:87:40:92:
                    86:a0:b8:b0:4e:1a:27:6d:4d:eb:22:fc:1b:9a:80:
                    ec:da:08:43:ba:6a:82:11:99:1c:8e:36:19:78:3f:
                    dc:20:f6:65:c2:0f:06:a5:cc:0b:c8:e8:b4:db:a9:
                    97:c5:a9:d2:99:72:ac:a3:9d:a2:fb:1b:1e:ae:d4:
                    cb:dd:73:d0:4c:ad:93:07:51:2d:67:79:d9:af:67:
                    03:18:0b:32:e3:57:c8:b0:37:ca:02:67:15:13:d3:
                    50:d9:9a:84:58:0f:99:cf:ef:6f:30:50:2c:ae:a9:
                    13:cd:bb:78:a2:21:1c:ea:1d:99:99:53:6a:28:4e:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9C:9B:B4:AD:C8:75:07:7D:51:1F:05:1E:5E:BB:21:56:11:D2:E5
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/VpybtK3IdQd9UR8FHl67IVYR0uU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:7c:b2:a9:ac:9d:e1:c2:a1:db:fd:e1:a3:3d:45:ac:e0:1c:
         a0:0e:f6:03:6b:4e:51:3f:d3:0d:a8:99:1a:c9:96:4f:c0:90:
         54:db:de:ed:90:5a:3c:69:89:2d:ab:59:6d:ea:69:d6:05:e4:
         14:6c:ed:ae:37:a1:ee:7f:ff:89:87:46:a3:bf:70:46:49:50:
         fa:29:f9:56:1b:0d:94:77:fb:01:2d:79:f7:1a:78:b9:5e:8d:
         f9:4e:a6:15:62:c5:0e:b0:ea:43:69:6f:59:df:11:93:ef:f8:
         5f:74:04:3c:a7:48:17:3c:0f:82:b2:bb:3d:8d:65:cf:ce:b2:
         35:7d:21:ee:56:0e:b7:07:af:80:fd:50:b3:0b:3b:fd:48:9d:
         5d:50:4a:da:b1:47:64:41:e7:14:2d:57:aa:73:79:59:6f:14:
         0d:7e:f7:13:76:d1:4b:8b:df:1d:70:5d:0c:08:4f:7a:48:a8:
         74:68:9b:ad:ce:38:b2:9a:4f:37:27:ad:9c:f8:76:8a:83:34:
         f0:3b:42:9a:ed:bb:65:c7:d9:c0:89:33:a4:46:f9:51:61:bb:
         46:50:25:f9:46:92:0b:d5:cb:78:7f:76:15:dd:5f:c7:0a:36:
         51:4a:15:79:7f:eb:a7:01:9b:ba:a0:d9:73:88:4c:60:cc:4a:
         82:6b:14:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:31 2025 by rpki-client