Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/4b4B4fI-R9ALddGdsikHU7huL9k.roa
File:                     4b4B4fI-R9ALddGdsikHU7huL9k.roa (raw, json)
Hash identifier:          TD1/wmrlqysHcEVvAmjzS8jTNhrSyM3/O/H4DelEB2U=
Subject key identifier:   E1:BE:01:E1:F2:3E:47:D0:0B:75:D1:9D:B2:29:07:53:B8:6E:2F:D9
Certificate issuer:       /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial:       099F
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/4b4B4fI-R9ALddGdsikHU7huL9k.roa
Signing time:             Wed 29 Sep 2021 02:36:52 +0000
ROA not before:           Wed 29 Sep 2021 02:36:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18046
IP address blocks:        61.65.236.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463 (0x99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
        Validity
            Not Before: Sep 29 02:36:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E1BE01E1F23E47D00B75D19DB2290753B86E2FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:f6:18:31:ee:8b:3b:ef:55:9a:bb:55:13:
                    25:82:e8:17:b9:7d:6b:6c:e4:fa:60:5b:0c:d1:17:
                    16:7b:43:ac:73:82:84:c1:19:5b:fa:f4:51:ba:25:
                    45:81:6d:b8:c6:f9:17:50:76:4c:1a:a3:17:39:44:
                    b7:a4:c9:af:a7:9c:1f:96:d6:a9:15:6d:4e:b4:bc:
                    f2:74:e1:2c:a4:1f:51:8e:73:95:e6:e1:43:8d:6e:
                    77:7a:5a:c3:3d:a4:79:3f:de:a6:bd:cf:dd:36:af:
                    59:0d:31:cb:e6:c5:f3:26:9a:82:99:3e:79:b3:7a:
                    19:5f:6b:8b:56:fe:94:fa:16:2a:e9:2a:07:c4:aa:
                    91:5f:37:a4:ee:b9:53:5e:19:c3:b0:5b:0f:2f:40:
                    e2:73:bd:70:00:b6:91:90:cc:ae:7e:d2:ac:bb:de:
                    88:40:92:4a:ed:94:34:83:ab:b4:7a:55:fd:e8:ca:
                    75:56:d8:4c:57:e8:89:b7:1c:f5:ba:55:fe:39:fe:
                    9e:1d:cd:60:03:91:2b:9d:29:60:c7:d1:c3:ec:b4:
                    73:85:d0:d9:88:b7:c8:38:9b:d1:27:b5:8b:a7:d4:
                    cc:b4:d6:30:c8:c4:70:39:ab:ed:27:c2:71:fb:bc:
                    ff:fe:70:a9:43:5d:6d:f1:ee:99:25:13:e7:31:86:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BE:01:E1:F2:3E:47:D0:0B:75:D1:9D:B2:29:07:53:B8:6E:2F:D9
            X509v3 Authority Key Identifier:
                keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/4b4B4fI-R9ALddGdsikHU7huL9k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.65.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:4b:41:14:19:27:a0:ae:62:fe:5a:a9:4b:73:41:a6:fe:99:
         f8:fd:6f:05:40:a7:5a:b6:fc:6a:58:70:79:f0:0f:47:0e:83:
         e9:bd:b9:8c:cb:77:24:62:eb:b2:6d:e6:bf:71:f8:b9:d2:1a:
         05:de:53:2a:fa:6a:33:b3:76:71:d2:0e:f9:34:9f:a2:53:af:
         81:f0:3a:d7:51:2d:79:38:ad:c9:0d:25:97:3d:4a:d8:2c:59:
         3d:3c:45:d4:a3:55:69:11:58:16:fd:d8:d2:77:01:ad:e7:75:
         84:70:86:9f:39:86:00:72:10:c2:b0:86:15:d5:86:b6:f8:ef:
         b2:23:fa:b1:2b:4e:7f:a0:73:49:d8:d0:ab:a4:a5:ad:1d:96:
         1c:ea:8b:91:ae:10:f4:08:25:05:57:69:c2:de:f3:c9:2e:e8:
         40:c6:99:ae:76:d2:12:5b:8d:f3:f1:50:bc:83:72:83:00:62:
         ae:99:97:d7:c8:05:2a:18:8f:bd:66:af:d2:2d:93:8f:ed:38:
         99:85:72:74:a2:b9:fd:b1:75:e1:de:17:1d:d6:05:95:d5:95:
         f1:32:0a:9c:6e:c8:a8:04:f6:de:cf:10:0c:b7:a7:1b:bc:15:
         87:a8:30:10:3f:72:aa:b8:77:f8:68:85:68:4e:1a:ed:11:21:
         2a:91:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:42 2025 by rpki-client