Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/f_X2OdmqvS4iuAdRT_w0MfuCLbw.roa
File:                     f_X2OdmqvS4iuAdRT_w0MfuCLbw.roa (raw, json)
Hash identifier:          1fbzQYIWpVnh1K4Zfro+tlhzF1/5MfkAstJFPk2sMGY=
Subject key identifier:   7F:F5:F6:39:D9:AA:BD:2E:22:B8:07:51:4F:FC:34:31:FB:82:2D:BC
Certificate issuer:       /CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
Certificate serial:       0136
Authority key identifier: 8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/f_X2OdmqvS4iuAdRT_w0MfuCLbw.roa
Signing time:             Thu 15 Sep 2022 02:46:45 +0000
ROA not before:           Thu 15 Sep 2022 02:46:45 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     16509
IP address blocks:        103.168.156.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
        Validity
            Not Before: Sep 15 02:46:45 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7FF5F639D9AABD2E22B807514FFC3431FB822DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:1e:65:74:2c:0d:51:bd:1e:a3:08:f6:bc:
                    ef:bc:21:86:97:22:f8:5f:02:61:4e:4f:2b:a4:d4:
                    01:91:32:5e:a5:dd:60:e1:a4:1f:28:3d:b6:c0:d4:
                    28:52:4a:d5:1d:12:3f:a0:08:d5:4c:6d:40:5f:9a:
                    e3:d4:ab:ed:44:e7:78:71:10:b0:fa:02:3c:d1:1a:
                    74:83:b9:b3:f3:0c:20:cb:74:0f:e0:be:9b:e9:4a:
                    05:cd:7f:91:00:4b:6b:2f:67:42:49:7f:19:bd:b5:
                    8e:f2:24:75:72:40:6f:88:d3:c4:29:4e:e1:d6:f1:
                    d1:38:b6:30:12:d9:3f:11:3c:b0:1f:bc:03:a9:bd:
                    ea:72:29:4c:0b:49:59:3c:b4:2c:08:ed:99:b1:57:
                    d0:4b:6c:8b:80:3f:80:7b:a0:84:d6:aa:aa:33:d9:
                    73:34:09:9d:3a:f5:71:cd:5a:4c:23:99:40:50:23:
                    c9:8c:71:2f:94:ab:3c:a5:1f:83:cb:15:2c:60:88:
                    dd:3b:c9:03:a0:0a:90:90:28:9d:91:38:86:86:27:
                    15:34:a9:b8:88:4f:91:e2:10:50:0b:95:a2:04:6f:
                    ac:c4:c4:d5:05:b9:e3:e7:ca:58:2a:74:59:db:f0:
                    b1:c6:f9:b8:a9:c3:c9:90:ec:be:06:d6:10:7b:e9:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F5:F6:39:D9:AA:BD:2E:22:B8:07:51:4F:FC:34:31:FB:82:2D:BC
            X509v3 Authority Key Identifier:
                keyid:8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/f_X2OdmqvS4iuAdRT_w0MfuCLbw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:17:db:2a:1d:2d:4c:6b:9a:6a:8b:77:b7:d0:4a:ac:8c:28:
         7c:f4:b9:bd:1f:ab:5d:2d:cd:40:8c:24:f3:bc:47:f6:96:99:
         73:af:af:ae:72:47:88:98:98:e0:d8:ca:20:f3:4e:53:fd:2e:
         af:d4:6f:8c:a6:16:22:41:67:29:7e:91:31:07:bd:77:b1:22:
         75:fc:f3:56:e2:c2:85:c2:b2:93:de:a3:56:25:30:99:94:7e:
         1e:9b:70:be:46:f1:ca:e5:93:1f:8d:06:a2:1d:a4:0f:47:bb:
         7f:27:6e:53:b9:74:36:6f:f2:3a:44:a6:5f:f2:cc:b4:9b:e8:
         e5:87:3d:2a:c6:95:c5:b6:c4:30:4b:fb:9a:9c:12:6f:59:63:
         dc:6a:d7:03:6f:1c:ea:c5:99:0b:28:5f:dc:62:0c:31:e2:24:
         2c:ec:2e:5a:19:47:a4:81:76:c5:38:31:44:4f:a2:43:8c:7e:
         48:a8:08:e0:a4:6a:10:df:02:85:c7:54:0e:28:67:88:94:da:
         71:ac:6a:b6:69:b2:eb:e6:22:d1:06:a4:19:4e:40:4a:bb:a1:
         f5:dd:00:29:7f:b6:77:33:07:bc:0d:48:a9:03:42:44:a4:3f:
         4e:40:c2:92:91:5a:26:4c:09:69:dd:53:85:27:cd:da:f3:be:
         d2:ee:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:19 2025 by rpki-client