Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/349eIsPtBr4gJyUkPiD0piDMlbg.roa
File:                     349eIsPtBr4gJyUkPiD0piDMlbg.roa (raw, json)
Hash identifier:          zTTavjSUGFOHVVmxUQI5RFy3Gn7v3h0k03Qy49VJBFg=
Subject key identifier:   DF:8F:5E:22:C3:ED:06:BE:20:27:25:24:3E:20:F4:A6:20:CC:95:B8
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0779
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/349eIsPtBr4gJyUkPiD0piDMlbg.roa
Signing time:             Tue 29 Sep 2020 10:00:15 +0000
ROA not before:           Tue 29 Sep 2020 10:00:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        103.117.112.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Sep 29 10:00:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DF8F5E22C3ED06BE202725243E20F4A620CC95B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:32:c5:89:dd:ea:88:fb:54:6c:22:72:24:
                    58:82:9c:89:3a:15:1e:ab:3e:78:1c:3a:c8:9d:05:
                    c9:28:31:33:0a:49:53:2e:64:79:e3:01:d7:43:e7:
                    ea:3e:b4:93:55:a3:bc:90:f4:a2:49:e4:80:97:b3:
                    a3:04:c5:49:66:a7:50:b9:a3:f3:b6:d7:be:0c:72:
                    8e:c3:78:15:00:db:d9:70:b5:e7:f7:fd:de:d8:60:
                    c4:2a:ad:f3:2c:db:a6:e2:7d:78:aa:f3:75:50:5e:
                    51:62:88:77:71:5e:66:0f:df:e1:b6:c0:0e:4f:f3:
                    48:c5:b3:dd:89:d6:fc:24:35:ce:c0:bd:3b:1d:a1:
                    e1:1a:7b:f6:40:33:95:42:31:31:a1:82:34:a2:f1:
                    76:2b:53:af:f7:bd:3a:c6:28:32:1a:fe:6e:cb:da:
                    59:72:35:f8:59:dd:14:d5:2b:d4:53:52:8c:16:28:
                    00:c6:9d:04:d4:a1:db:43:1f:1a:40:0e:5c:18:9f:
                    5b:ce:d7:bb:02:89:1f:95:25:b1:bc:fd:ca:e3:29:
                    50:4d:6d:50:25:ac:fa:76:ce:b5:6f:17:00:49:ad:
                    07:87:72:2d:2a:ab:5e:a6:a8:50:56:d7:2a:85:9e:
                    d1:55:26:83:00:23:93:d8:0e:40:da:4e:ec:b3:f2:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8F:5E:22:C3:ED:06:BE:20:27:25:24:3E:20:F4:A6:20:CC:95:B8
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/349eIsPtBr4gJyUkPiD0piDMlbg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:ce:2d:b5:18:34:6d:c9:71:f8:13:f6:6e:01:cf:88:8c:01:
         39:b9:79:2e:05:4d:e6:22:ce:ce:0f:79:aa:b8:31:9b:84:7d:
         3b:91:82:bf:44:6e:47:cc:d6:91:ce:b3:9c:9f:90:6e:54:85:
         08:1d:ee:98:b0:dd:89:66:75:67:d5:14:0c:db:81:47:f5:10:
         77:de:12:6b:56:62:c9:bd:fc:fc:0b:b8:72:12:b5:95:fc:e2:
         88:2e:dd:42:dc:07:bf:51:ba:e6:c0:1a:ca:01:5f:8a:60:b5:
         99:00:3f:f2:8f:b6:98:1d:29:26:5d:fc:ca:75:0a:73:f2:b4:
         0b:cf:d1:31:a3:db:c4:5e:de:fa:65:75:e2:9a:09:26:d3:a5:
         cf:14:aa:b1:77:96:c2:e6:f9:bd:96:b3:71:6f:4a:46:99:cb:
         f1:be:8a:44:a4:c6:8f:90:1b:9b:c5:d9:75:40:07:0e:28:fe:
         27:aa:94:9f:50:4a:61:8f:cb:de:e5:7d:ed:9c:dc:cf:21:5b:
         30:2f:99:c4:07:f4:fb:7d:d5:07:ed:b0:88:06:88:b0:87:8d:
         a6:70:a6:d9:a5:a5:e3:f4:6f:15:97:71:b3:20:f3:18:b3:79:
         91:e4:a4:51:29:2c:fc:68:77:97:57:93:0c:30:de:db:0f:29:
         63:34:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:05 2025 by rpki-client