Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/JRUWbxRAbG4ekVLSwU38CEeIAWw.roa
File:                     JRUWbxRAbG4ekVLSwU38CEeIAWw.roa (raw, json)
Hash identifier:          mvM9VIkd62D2geW/PLVbdRLwmZMEJtyi0vzYzUGRcyc=
Subject key identifier:   25:15:16:6F:14:40:6C:6E:1E:91:52:D2:C1:4D:FC:08:47:88:01:6C
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       04
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/JRUWbxRAbG4ekVLSwU38CEeIAWw.roa
Signing time:             Wed 04 Aug 2021 05:02:44 +0000
ROA not before:           Wed 04 Aug 2021 05:02:44 +0000
ROA not after:            Thu 21 Jul 2022 02:43:53 +0000
asID:                     396982
IP address blocks:        103.169.213.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Aug  4 05:02:44 2021 GMT
            Not After : Jul 21 02:43:53 2022 GMT
        Subject: CN=2515166F14406C6E1E9152D2C14DFC084788016C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:95:7e:14:fe:11:03:ae:db:10:15:07:3b:
                    8f:bb:b8:d8:75:cd:33:a3:92:2b:52:44:67:83:86:
                    20:79:d0:26:b0:fc:6a:27:88:3c:25:f1:fe:d0:39:
                    46:f5:83:dc:34:6b:23:6a:73:0a:cc:34:07:5d:ba:
                    fa:2c:8b:04:c7:40:20:b5:49:90:2a:b8:aa:58:56:
                    f0:5e:a2:44:88:9e:48:8c:0f:f5:31:f8:11:d6:f4:
                    15:70:db:b5:cf:08:ef:1a:a9:33:10:ab:45:ae:c7:
                    85:f0:e0:ad:74:ef:c4:67:af:67:87:1d:92:34:b5:
                    eb:4d:f4:48:8b:9a:37:99:07:9f:69:c1:c0:b3:b2:
                    3b:4a:ac:b2:ca:5d:c6:09:3d:b4:99:bd:93:70:66:
                    96:7b:97:a0:ae:2b:a0:f4:c0:25:d0:b4:d5:23:6b:
                    df:36:f1:62:53:eb:91:89:c3:6f:e2:2e:93:60:0e:
                    e8:ac:7b:cd:a1:73:59:ba:bc:49:4a:04:f7:07:ee:
                    36:b7:97:45:05:15:81:7f:68:c8:b3:b7:c9:21:de:
                    dc:3a:dd:99:a6:36:04:1b:72:bc:df:22:58:f9:0f:
                    15:f4:83:08:cb:b5:53:82:ae:0f:c1:77:21:66:af:
                    70:c6:79:61:ce:09:34:ea:3f:5e:6f:3f:63:ae:35:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:15:16:6F:14:40:6C:6E:1E:91:52:D2:C1:4D:FC:08:47:88:01:6C
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/JRUWbxRAbG4ekVLSwU38CEeIAWw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f6:7a:f8:86:4f:64:9a:81:5e:55:07:c9:c5:ad:97:28:2c:
         48:e5:a2:01:82:29:d1:64:21:d3:63:15:ab:e8:14:ee:71:fd:
         b0:6d:42:33:b4:d8:c3:63:b3:a7:2d:09:83:75:c2:0b:fe:fb:
         c5:c7:a8:72:0f:0c:ce:c9:f2:28:18:8f:c4:ca:e3:b1:02:39:
         2b:0f:18:97:f2:b4:9c:f6:b9:46:6e:80:aa:8a:24:01:50:f7:
         58:9c:9c:53:27:df:b6:dd:ea:03:a7:ae:65:bd:8c:ff:b4:d9:
         9d:2a:72:30:f6:e6:02:ab:3d:0b:08:22:c1:e7:0e:22:99:11:
         72:2c:d6:15:0a:2c:33:ee:f0:9a:98:95:0f:42:25:aa:66:d8:
         79:d2:76:26:95:62:31:6e:fd:19:2e:98:5c:5d:4e:49:52:39:
         58:91:4f:3b:16:10:ba:b7:a2:a3:74:9b:bd:87:06:28:03:6e:
         f6:67:a0:2a:9d:af:00:47:a7:c3:d1:0d:ce:f9:0f:58:d3:20:
         22:a6:4b:44:c3:71:4c:fd:4d:36:de:54:f1:14:c7:b7:01:3c:
         b5:78:a0:8a:a2:39:b0:d9:27:63:a4:b5:11:88:9a:58:b1:ca:
         e0:5f:eb:b5:ed:f8:78:a3:cf:e0:92:c7:d7:39:e2:64:d5:5a:
         8e:3a:d9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:14 2025 by rpki-client