Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/9sei_7yAMZMlVWHgT3YDl-oiR-Y.roa
File:                     9sei_7yAMZMlVWHgT3YDl-oiR-Y.roa (raw, json)
Hash identifier:          QDcqUENkR/UfMqer+0Wzoxs7WCpe+YzVtdKrroNJebY=
Subject key identifier:   F6:C7:A2:FF:BC:80:31:93:25:55:61:E0:4F:76:03:97:EA:22:47:E6
Certificate issuer:       /CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
Certificate serial:       13
Authority key identifier: 8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/9sei_7yAMZMlVWHgT3YDl-oiR-Y.roa
Signing time:             Wed 14 Jul 2021 01:58:40 +0000
ROA not before:           Wed 14 Jul 2021 01:58:40 +0000
ROA not after:            Tue 21 Jun 2022 07:39:58 +0000
asID:                     16509
IP address blocks:        103.168.156.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
        Validity
            Not Before: Jul 14 01:58:40 2021 GMT
            Not After : Jun 21 07:39:58 2022 GMT
        Subject: CN=F6C7A2FFBC803193255561E04F760397EA2247E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:78:d2:bc:70:ce:88:66:2d:3f:d6:cb:20:
                    e6:e7:e5:d1:19:e8:dd:e1:03:b9:68:76:ae:e2:21:
                    bf:a7:14:fe:c5:bd:46:6b:14:f8:fe:84:18:84:b1:
                    03:b7:d7:03:f0:a8:02:3b:5c:c4:71:cb:72:42:dd:
                    77:47:fe:b4:dd:6a:9a:6d:f2:5c:44:42:f0:7f:e9:
                    2c:34:ff:e8:ae:d2:64:cc:90:5a:83:d2:10:c0:09:
                    71:b3:f1:cf:1b:03:46:c3:b9:84:c4:dd:83:e1:40:
                    2f:b0:dc:6b:bb:bd:2d:3c:d9:50:cd:4e:d2:90:77:
                    ad:31:92:a2:09:54:45:a2:a9:60:19:fd:ad:1f:04:
                    8f:18:75:84:80:61:8c:60:6a:dd:84:20:b3:5f:24:
                    e8:25:9a:42:e8:73:d2:fb:c7:3d:6e:46:14:ec:75:
                    e2:bc:f2:2d:5c:aa:30:3e:47:23:87:a3:df:71:33:
                    ca:20:7b:12:0f:2d:0c:ee:a8:6b:f5:e8:c2:63:7c:
                    74:e2:c6:54:01:90:d0:71:da:d4:75:80:2e:40:9a:
                    84:50:33:d1:ed:61:ce:9e:43:0c:45:98:58:dc:31:
                    67:ce:75:e8:5e:80:13:09:4e:02:9e:5c:a1:30:ff:
                    38:6a:0a:71:e5:f8:94:48:cc:a8:74:d6:87:3d:0d:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C7:A2:FF:BC:80:31:93:25:55:61:E0:4F:76:03:97:EA:22:47:E6
            X509v3 Authority Key Identifier:
                keyid:8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/9sei_7yAMZMlVWHgT3YDl-oiR-Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:70:d8:bd:e7:1a:49:5f:b0:92:de:52:08:5b:be:4c:22:68:
         97:fc:79:90:64:cf:74:cb:50:8a:63:70:04:66:63:69:d4:bc:
         ff:9a:0d:03:58:ec:10:4a:17:70:c7:78:d6:8c:4d:0a:98:20:
         f2:78:e3:b8:44:a2:98:7e:c1:79:0e:40:97:35:1e:d1:a6:1a:
         5d:3e:f0:88:e6:cb:51:08:89:32:fa:22:70:47:89:3f:b8:c5:
         0a:05:99:69:fd:47:79:a1:ee:fd:2f:9f:e9:1a:67:11:e8:4c:
         80:24:2b:60:ab:59:c2:e8:63:5d:cc:7c:6e:3a:53:1d:c0:c5:
         f4:e2:e3:a0:bc:2e:a1:9e:db:2b:cc:79:bb:6d:bf:7f:54:0e:
         eb:31:84:73:9d:c3:2c:19:30:eb:f8:d7:9f:b8:09:92:68:8e:
         6a:72:08:a0:5c:9e:6a:2d:e9:e0:56:40:42:f9:3b:2e:67:bb:
         5e:3c:ba:ec:0c:76:eb:dd:1f:6a:5f:b8:a2:91:a1:dd:a0:f2:
         e2:e7:28:cd:3e:52:69:38:83:35:d8:5e:2a:ff:7f:df:c3:78:
         29:e0:2e:4f:8d:d7:b0:11:ff:31:b4:89:bc:1c:f1:d2:32:49:
         ef:72:7d:51:ac:62:82:68:c0:85:28:34:a7:c3:8f:23:4d:4c:
         be:5f:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:30 2025 by rpki-client