Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/-4BeGLPNb22B5NGEAiuqojPkkg8.roa
File:                     -4BeGLPNb22B5NGEAiuqojPkkg8.roa (raw, json)
Hash identifier:          oDBYYnyZKa8dbnZRoWb55xNsF7gaBq9AyT2MyB9a7xo=
Subject key identifier:   FB:80:5E:18:B3:CD:6F:6D:81:E4:D1:84:02:2B:AA:A2:33:E4:92:0F
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       09C3
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/-4BeGLPNb22B5NGEAiuqojPkkg8.roa
Signing time:             Wed 29 Sep 2021 02:36:46 +0000
ROA not before:           Wed 29 Sep 2021 02:36:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9244
IP address blocks:        61.56.67.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2499 (0x9c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 02:36:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FB805E18B3CD6F6D81E4D184022BAAA233E4920F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:ed:de:3e:1e:6c:6d:07:39:cf:04:b5:03:
                    ef:66:0f:b0:fa:bc:3d:d3:78:9f:f9:ee:20:d5:a9:
                    03:0a:e4:f8:df:0c:c6:71:13:79:a9:6b:4d:9a:f0:
                    e7:93:24:f2:31:9c:80:c4:c3:74:a0:7a:27:c2:07:
                    32:20:13:73:33:67:26:09:45:24:76:72:ba:91:4f:
                    bc:45:31:03:1a:96:76:b3:e7:69:5b:99:94:56:16:
                    e2:8e:a9:72:3e:16:69:40:45:40:9e:d5:e9:7a:ff:
                    c5:57:93:34:9e:fd:1c:50:e3:42:bc:d0:26:44:97:
                    17:7c:d6:fa:6e:e9:5f:e7:80:27:39:63:94:b0:e1:
                    cb:5b:1e:93:e2:74:bc:82:fa:2a:cd:66:fe:f7:45:
                    34:b4:ec:91:7b:64:5b:78:45:76:7e:d5:c5:bc:57:
                    c7:4b:b1:55:00:ae:8b:d3:c0:45:79:2b:ca:42:5f:
                    7d:32:67:d4:b2:0c:ca:4f:6e:99:c9:71:be:38:af:
                    dc:c1:c1:da:5a:6d:7c:3d:13:7e:7e:24:d4:5b:3a:
                    4f:79:8c:43:4b:67:05:1f:b1:6b:2e:67:a4:cb:c1:
                    21:a4:1b:67:1f:26:77:7c:b7:86:b1:f9:15:24:84:
                    89:01:f6:44:ae:2b:84:c9:dd:a2:f5:f7:aa:51:28:
                    a9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:80:5E:18:B3:CD:6F:6D:81:E4:D1:84:02:2B:AA:A2:33:E4:92:0F
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/-4BeGLPNb22B5NGEAiuqojPkkg8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0e:0e:b9:73:7e:e4:0a:d2:2f:02:37:4c:66:60:9b:ae:db:
         b4:e7:1b:0e:cd:70:bd:b2:62:72:13:cb:11:76:74:22:87:1a:
         eb:c9:c3:17:ec:26:4f:61:8a:db:6f:0f:88:9f:81:51:32:8e:
         ac:db:85:ac:b2:ea:df:48:38:0d:09:6c:24:4f:c0:7d:70:45:
         fe:29:5d:1e:5c:e3:38:e9:00:4c:53:ac:80:4c:3c:52:50:0d:
         4c:8d:40:33:dc:09:50:c5:7f:a6:37:d9:14:6f:03:14:8a:77:
         62:d5:02:b6:d7:dd:d4:b0:16:61:fe:7a:06:bf:6d:11:98:91:
         d3:d9:30:77:47:30:9c:09:c8:2c:1a:e8:37:ac:9c:d0:10:a3:
         bc:c1:92:eb:33:0a:42:37:50:a9:14:ea:51:65:37:fc:3e:d4:
         48:41:09:63:a6:ff:bd:e5:a8:c4:3f:1b:17:f7:d7:69:b6:af:
         68:b2:bd:db:d1:0e:37:09:02:df:57:91:ec:ee:00:8d:ee:01:
         1b:1d:3e:d8:e5:9d:ab:08:76:bf:5e:19:26:ea:a0:7f:e0:22:
         ae:dc:13:a1:0c:d6:a2:30:c1:df:ec:82:43:95:9f:70:74:29:
         47:ba:d3:e1:eb:56:76:03:4c:35:64:7f:7d:fe:3a:a8:8d:96:
         51:5e:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:59 2025 by rpki-client