Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/EO7NfpvRRugXG4NyEEtz2J7JuMg.roa
File:                     EO7NfpvRRugXG4NyEEtz2J7JuMg.roa (raw, json)
Hash identifier:          8foSuVkFL5yGytw+qwAs1oLU5D6e1NZugt8PblL/zbw=
Subject key identifier:   10:EE:CD:7E:9B:D1:46:E8:17:1B:83:72:10:4B:73:D8:9E:C9:B8:C8
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0846
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EO7NfpvRRugXG4NyEEtz2J7JuMg.roa
Signing time:             Tue 29 Sep 2020 09:58:33 +0000
ROA not before:           Tue 29 Sep 2020 09:58:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        122.120.0.0/13 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118 (0x846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=10EECD7E9BD146E8171B8372104B73D89EC9B8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d5:c5:10:5d:a5:04:ca:51:c4:25:bf:65:f8:
                    d3:99:a0:00:46:49:86:ec:d5:4f:e1:29:a4:6c:f8:
                    ac:a9:1a:3c:dd:fe:97:6f:d9:c3:2a:b2:47:34:38:
                    0d:6d:81:d5:d0:4d:81:0e:df:63:9d:52:23:75:42:
                    57:b1:e7:ab:ba:89:f9:c0:e5:55:6b:ed:1c:fc:c7:
                    ad:52:c0:4b:40:c0:17:0a:f3:a9:31:de:93:cf:67:
                    0d:ee:cc:eb:ed:1a:92:d9:31:e8:23:cb:fe:a2:81:
                    5a:92:f2:2a:c6:b6:4c:95:ca:09:34:e1:dd:ec:31:
                    8e:ec:98:ef:ab:94:c4:75:7b:98:2c:11:09:8c:79:
                    4f:5a:9c:fd:50:92:93:8c:8d:f1:ce:98:ad:da:84:
                    89:e3:79:15:7f:1e:d7:ba:bc:8e:16:71:c5:1a:67:
                    10:a8:3b:b2:c7:e8:c0:c0:52:41:2d:d9:78:b0:60:
                    b5:a5:6b:ba:18:67:6f:0f:61:40:0c:af:ee:09:24:
                    7c:68:e0:57:71:47:56:6a:c4:8d:31:25:29:34:68:
                    4c:ee:33:c5:bd:87:a9:63:c5:6f:36:cc:66:4b:d6:
                    9c:1b:08:b7:ec:fe:6f:1d:cc:cc:00:f7:47:19:0b:
                    cf:8a:f3:96:45:a3:93:8c:c9:a9:8e:3d:a1:ed:f2:
                    c2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EE:CD:7E:9B:D1:46:E8:17:1B:83:72:10:4B:73:D8:9E:C9:B8:C8
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EO7NfpvRRugXG4NyEEtz2J7JuMg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.120.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         66:07:f6:2e:7e:18:7c:ed:bb:a0:d5:70:48:6b:64:d1:8b:98:
         ee:f8:63:0b:3b:55:cf:41:10:ab:e1:d9:38:14:eb:c0:44:c3:
         1f:11:9f:7b:b5:e7:6e:df:3b:72:21:52:d6:d5:a1:2b:a7:03:
         dd:05:73:94:ae:de:b7:96:be:ba:f2:53:80:d6:4f:7c:1a:6d:
         ee:ca:af:7e:5e:3b:12:2e:d3:e9:49:7c:da:2f:8d:bf:ac:26:
         1e:9d:4b:5c:05:f5:a7:36:bb:df:2f:4c:3e:e7:55:82:37:11:
         33:2b:42:39:f6:fa:75:7a:bf:3e:53:00:e4:86:d7:01:3c:89:
         ef:15:8f:10:cb:e1:c0:6c:84:af:b7:e6:b2:67:2c:d2:05:cb:
         fd:e5:05:b8:66:f7:b2:7a:83:48:9a:e3:91:d4:c7:f8:12:c9:
         95:b4:4d:c0:12:07:33:fd:4f:b3:cc:46:13:b8:a0:f3:f3:6c:
         c7:b5:c7:9c:e9:ba:22:d5:76:c5:df:bd:88:81:62:46:92:39:
         5b:ab:06:fa:75:b0:03:1d:18:d5:0f:e9:9b:36:21:32:c6:8a:
         96:8e:b0:aa:44:7c:48:eb:d6:5f:49:0a:71:4c:06:c5:17:ce:
         23:93:bd:25:15:17:61:d7:45:e5:a9:3d:7d:4d:ba:0d:91:99:
         b0:38:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:01 2025 by rpki-client