Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/W9Z2B2bIhchigbuFbPYon_QsguM.roa
File:                     W9Z2B2bIhchigbuFbPYon_QsguM.roa (raw, json)
Hash identifier:          dDEraPeRyUGXCFpkzMes9PIFR5dyLIBQrX/cx5o36o4=
Subject key identifier:   5B:D6:76:07:66:C8:85:C8:62:81:BB:85:6C:F6:28:9F:F4:2C:82:E3
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       078D
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/W9Z2B2bIhchigbuFbPYon_QsguM.roa
Signing time:             Tue 29 Sep 2020 09:59:43 +0000
ROA not before:           Tue 29 Sep 2020 09:59:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131611
IP address blocks:        121.50.184.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Sep 29 09:59:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5BD6760766C885C86281BB856CF6289FF42C82E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:7c:e9:a5:78:c0:b5:8c:5f:e4:3c:5f:1e:
                    34:4b:97:36:2c:be:70:ca:3d:c9:76:71:2f:e2:ec:
                    67:9d:13:e7:63:60:d5:78:20:a9:d0:59:f0:46:14:
                    43:27:fa:03:ed:78:a6:cf:d8:ac:c5:8e:cb:ac:bf:
                    37:59:81:a6:0f:82:26:2b:1b:80:69:a5:b5:13:f0:
                    b8:4b:eb:16:7f:eb:c3:1e:dd:94:8c:85:bc:78:73:
                    1e:d1:67:5f:1d:17:27:8f:e8:2d:9d:4f:37:d1:a2:
                    4b:b5:af:41:d2:a5:8f:0a:5a:f8:ad:90:d3:64:49:
                    8a:4f:89:a0:19:dd:aa:ad:91:f1:95:ba:77:ce:26:
                    2e:6b:0c:21:66:fa:d1:cc:48:5e:68:b5:9f:3d:c6:
                    7e:29:7e:9a:1b:5e:24:17:7c:f2:6b:95:50:3b:c7:
                    98:e8:8c:f3:0d:df:d5:87:e3:b0:ac:0d:5d:8c:f5:
                    65:67:f2:40:5b:a2:2f:00:cd:b0:a4:80:8e:22:12:
                    be:83:53:38:f5:30:0b:45:aa:a5:88:d5:90:99:a8:
                    b9:19:b8:da:12:93:b9:54:5a:aa:38:4c:5a:67:65:
                    69:f5:ce:d1:85:4f:43:c8:a5:30:09:3a:bb:03:b8:
                    46:fe:7e:c0:61:17:c6:40:27:05:90:2a:d7:75:ac:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D6:76:07:66:C8:85:C8:62:81:BB:85:6C:F6:28:9F:F4:2C:82:E3
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/W9Z2B2bIhchigbuFbPYon_QsguM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:3f:42:13:84:8d:e7:1e:ea:79:45:5d:83:2f:6c:5d:e6:
         39:e4:0a:95:a6:c0:e7:dc:a4:36:ab:bf:37:2d:95:e5:cf:60:
         a7:4b:eb:ec:1e:31:9f:c6:a0:cf:73:9d:13:28:79:d5:de:17:
         c5:23:88:34:08:8d:33:91:39:ca:fd:b4:f2:d0:77:82:fd:8b:
         be:13:d7:aa:1c:b1:c7:f7:23:d8:ac:74:49:3f:6d:44:d7:15:
         a5:b6:84:90:de:10:9c:db:c9:a8:51:68:4b:68:2f:4a:68:76:
         3a:3d:1c:5f:1a:d6:12:b1:0b:43:15:3a:c6:bc:04:75:95:d3:
         a2:38:ee:31:f2:9c:33:3a:cf:46:f6:89:8a:aa:c5:d0:6e:e5:
         d9:62:32:bd:51:0a:8c:3a:c6:99:b0:d6:4a:9a:16:70:98:bb:
         ea:28:cd:13:35:01:ad:e8:0c:02:f4:27:59:ba:c6:99:8f:c1:
         64:65:e8:bd:c4:38:5c:f3:b7:24:6e:b7:22:d1:49:ad:52:20:
         9e:53:4d:c7:9a:43:ce:8e:01:45:8f:89:37:e3:97:68:5b:f7:
         07:4b:74:89:11:0e:95:26:fa:a6:6f:22:6b:23:94:31:bc:46:
         68:59:24:4d:4a:b2:d3:dc:25:e1:3d:7e:71:ff:33:41:a5:1f:
         b9:22:ee:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:15 2025 by rpki-client