Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CPSYS/6D_xF6TcO2xOoexvpyW-jy36b2E.roa
File:                     6D_xF6TcO2xOoexvpyW-jy36b2E.roa (raw, json)
Hash identifier:          LRXaHqJiIJNODJY9HmqKJOLAOteVbLtwB0+5d0knh1k=
Subject key identifier:   E8:3F:F1:17:A4:DC:3B:6C:4E:A1:EC:6F:A7:25:BE:8F:2D:FA:6F:61
Certificate issuer:       /CN=1F877983527470E200D5AE06A01588213555FEE6
Certificate serial:       F2
Authority key identifier: 1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/6D_xF6TcO2xOoexvpyW-jy36b2E.roa
Signing time:             Fri 29 Sep 2023 06:46:30 +0000
ROA not before:           Fri 29 Sep 2023 06:46:30 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38042
IP address blocks:        103.14.170.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F877983527470E200D5AE06A01588213555FEE6
        Validity
            Not Before: Sep 29 06:46:30 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=E83FF117A4DC3B6C4EA1EC6FA725BE8F2DFA6F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:65:1f:95:51:bb:2a:73:1c:6a:1e:3e:5e:
                    dc:91:b3:63:4d:97:67:84:2b:7b:83:92:ab:60:5e:
                    52:95:e6:8f:0d:39:4c:bc:6d:e2:83:7f:b9:25:5b:
                    61:3e:59:7b:13:b1:e2:9d:da:2c:d5:60:84:0e:ec:
                    4e:86:07:42:9f:99:b7:52:1f:9c:ce:36:ff:46:fa:
                    68:c4:29:ed:4c:12:e1:4f:04:b3:b4:31:9f:fe:93:
                    07:cc:69:2b:a6:c3:82:94:68:a2:a6:e5:62:c5:d3:
                    7b:e7:79:9d:03:2e:54:3c:bf:20:cb:80:72:a5:d9:
                    fc:a2:cd:b0:4d:e3:60:f8:61:3b:75:f7:06:e1:8b:
                    8c:e0:33:01:62:8b:c9:ee:d2:ca:d6:90:22:df:13:
                    f4:a4:40:08:20:14:76:28:c3:28:83:de:92:41:6b:
                    fb:ac:9b:c4:82:cd:16:e6:ef:93:1f:9d:23:c3:2e:
                    04:a2:c2:85:78:7e:e5:0e:ee:49:ba:01:b5:97:8f:
                    d2:8b:55:5a:bf:10:e0:a0:bc:3d:1e:0e:13:a9:f8:
                    16:57:7b:96:af:dc:a2:2b:e3:cb:c7:20:ae:32:85:
                    83:96:06:fd:b3:09:03:1b:00:5b:c9:bb:54:b0:54:
                    a0:19:ec:ad:79:18:0c:f5:11:81:c6:23:9e:e6:88:
                    e8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:F1:17:A4:DC:3B:6C:4E:A1:EC:6F:A7:25:BE:8F:2D:FA:6F:61
            X509v3 Authority Key Identifier:
                keyid:1F:87:79:83:52:74:70:E2:00:D5:AE:06:A0:15:88:21:35:55:FE:E6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/H4d5g1J0cOIA1a4GoBWIITVV_uY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/H4d5g1J0cOIA1a4GoBWIITVV_uY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CPSYS/6D_xF6TcO2xOoexvpyW-jy36b2E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:6c:ea:f5:b1:d4:69:be:10:09:c2:94:e4:a5:56:73:68:50:
         b8:6b:5c:83:a2:32:02:32:4a:74:77:b3:22:7a:0e:5f:f5:83:
         b8:a7:61:8a:ec:e2:db:22:38:2d:e4:c1:3a:1b:4f:88:4c:87:
         a8:e5:9e:47:8a:49:d8:fc:1e:7e:a5:5e:3c:9d:6a:d0:ed:a9:
         39:fb:3b:cc:b5:0f:50:d8:7d:d9:d6:5f:5f:7b:6b:23:3a:41:
         a4:d9:4f:0a:5c:f5:63:2d:72:93:93:d0:fe:c7:ab:13:3e:e7:
         67:f0:f8:60:32:05:36:0c:cd:e6:d2:c8:ea:73:1d:7c:ba:45:
         2e:89:82:36:78:dd:fe:c5:71:fc:da:da:65:16:34:85:53:4c:
         50:48:a7:72:86:13:b4:86:0b:f4:9f:28:f9:6c:9c:80:5c:8b:
         e2:6a:8e:6e:f5:f3:6d:3c:35:e6:75:01:5c:9c:0d:2a:cf:bd:
         e6:6e:0d:d3:32:71:de:85:14:e4:4a:6c:7d:c8:03:9a:45:60:
         a3:3e:37:9b:fd:5e:22:0f:07:02:bc:08:7c:74:8a:1b:1e:1f:
         32:40:37:94:be:78:98:38:fb:90:db:1c:e5:1c:37:7d:f8:78:
         be:37:67:a1:cd:a2:7d:80:7d:37:f8:a6:52:39:80:eb:dc:b8:
         9b:84:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:21 2025 by rpki-client