Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/ccElAi-V5WxraaTE-7Ob6jdmDFc.roa
File:                     ccElAi-V5WxraaTE-7Ob6jdmDFc.roa (raw, json)
Hash identifier:          /+m/lT81q4zgTb8Ti5tKG9RiUMUKfS8NSKiGHCWiWGc=
Subject key identifier:   71:C1:25:02:2F:95:E5:6C:6B:69:A4:C4:FB:B3:9B:EA:37:66:0C:57
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0A51
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/ccElAi-V5WxraaTE-7Ob6jdmDFc.roa
Signing time:             Thu 15 Sep 2022 02:50:17 +0000
ROA not before:           Thu 15 Sep 2022 02:50:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        180.92.0.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Sep 15 02:50:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=71C125022F95E56C6B69A4C4FBB39BEA37660C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:67:ed:c1:51:8b:28:8a:93:e1:0c:8b:0d:
                    a4:8c:0f:3e:72:77:de:09:7f:dc:95:e1:af:08:ee:
                    6c:3e:93:a0:c8:c3:58:c4:a8:6d:1c:98:69:0b:a1:
                    93:2f:23:29:94:6b:24:23:4b:81:fc:d2:1c:f0:50:
                    4d:16:21:6b:8b:52:a7:d0:e3:ce:d5:13:d9:03:2d:
                    46:ba:56:04:26:65:63:45:72:97:c0:9b:d0:31:31:
                    85:35:d8:45:67:3b:3e:64:81:df:5b:57:67:38:d2:
                    24:9a:c5:8f:76:a3:22:ff:4c:79:55:7e:f6:06:af:
                    d0:b8:82:0a:5c:43:1d:87:b3:d2:14:7d:82:79:bf:
                    0c:d0:64:f1:4d:2c:1a:c5:fc:c9:74:ca:ed:d9:0b:
                    8d:f6:1b:c6:c3:54:80:9c:c5:9a:dd:b1:b4:32:5f:
                    62:41:d4:cb:a6:f3:a6:89:20:3f:2a:11:50:b2:88:
                    49:28:6b:21:d8:97:4f:6f:ed:a9:bf:a4:38:36:a0:
                    05:13:ac:dc:15:27:c9:07:57:bb:20:e4:e9:a9:e2:
                    3c:44:84:6d:44:92:d0:77:0d:39:02:d5:33:73:9c:
                    16:89:8f:14:41:10:72:56:3e:cf:3b:44:77:70:6b:
                    80:67:24:e3:84:02:52:69:f3:b3:39:b7:ed:94:a8:
                    51:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C1:25:02:2F:95:E5:6C:6B:69:A4:C4:FB:B3:9B:EA:37:66:0C:57
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/ccElAi-V5WxraaTE-7Ob6jdmDFc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.92.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:09:42:ea:71:25:d2:59:d8:b1:75:ec:ff:4e:bc:1f:c1:
         2c:62:d3:75:68:9e:88:7d:52:20:9d:ff:45:ec:e9:37:6d:91:
         24:1e:2b:4a:6a:d3:d3:c3:e4:1a:82:4c:36:0c:1e:75:82:ff:
         2e:6b:ba:e5:0c:1d:60:ca:bc:05:ef:41:30:80:5c:d6:b5:9a:
         6f:40:80:83:fc:a8:99:c1:5f:ee:28:dc:b5:75:08:2a:84:b1:
         d8:e1:b8:83:48:44:e6:4c:5c:89:a7:88:e3:48:51:cd:f4:f2:
         d0:00:23:f0:cd:fc:44:10:37:e2:3d:dc:1e:26:0f:4d:1a:85:
         55:78:bb:a1:a6:d9:86:b8:cf:3f:37:0a:fb:71:bc:b6:c3:ee:
         b4:48:b6:92:be:a0:2a:0c:a5:84:56:18:a7:88:c3:57:99:07:
         5f:3f:0f:c8:d1:f7:4e:7b:b4:95:8c:51:aa:6d:9a:62:82:df:
         98:07:65:72:62:18:11:6c:94:82:0d:93:26:b1:5a:94:87:83:
         d5:a3:09:84:6d:45:c9:98:12:87:18:46:76:a8:cb:a7:9a:f5:
         e3:fc:fe:fa:46:9c:b8:a3:fd:1a:f7:58:6c:39:46:59:cf:99:
         74:c8:cb:22:f5:2f:d1:ea:d3:39:3a:ab:a0:03:8a:26:11:f4:
         6b:ae:97:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:59 2025 by rpki-client