Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Ez023HTMo0EtQvu85MxhBYE6Kqs.roa
File:                     Ez023HTMo0EtQvu85MxhBYE6Kqs.roa (raw, json)
Hash identifier:          Zws+vCeB9TTtCQgNq+2wBMzSFMUa2NiVZfnWvrStvHM=
Subject key identifier:   13:3D:36:DC:74:CC:A3:41:2D:42:FB:BC:E4:CC:61:05:81:3A:2A:AB
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0FB7
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Ez023HTMo0EtQvu85MxhBYE6Kqs.roa
Signing time:             Fri 01 Sep 2023 08:57:25 +0000
ROA not before:           Fri 01 Sep 2023 08:57:25 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17714
IP address blocks:        203.78.180.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4023 (0xfb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep  1 08:57:25 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=133D36DC74CCA3412D42FBBCE4CC6105813A2AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:b5:98:74:ba:c4:12:18:28:5c:57:31:07:
                    cd:a5:3a:98:9e:1f:c4:10:6f:f6:c6:8e:0b:48:89:
                    ee:e3:b6:9d:2e:fa:cb:83:ca:2e:04:be:ad:af:9d:
                    b4:09:55:11:2c:f7:2b:83:f2:bf:4a:63:87:10:94:
                    b4:7e:01:b1:81:22:9b:65:20:af:91:e3:42:ae:41:
                    38:2e:33:d5:9e:ed:be:bc:71:10:c4:0b:e5:fa:51:
                    c1:b7:b1:47:bb:6f:23:41:aa:7a:52:87:71:a5:3e:
                    2b:20:a5:85:40:58:f6:85:45:1f:e1:eb:87:5f:d2:
                    3d:d1:fa:96:eb:93:10:66:50:1d:57:a2:d2:54:4e:
                    4b:71:c5:94:73:25:7c:4c:d4:a6:e7:06:2b:3f:60:
                    76:41:c6:2c:92:2e:f8:1f:a9:71:23:90:a0:cd:ea:
                    93:89:a3:07:1b:9e:fe:c8:3b:e8:fd:00:6d:83:c4:
                    e6:63:7b:3c:3b:9f:c1:fe:48:93:ae:47:b3:4d:06:
                    32:44:9a:58:e8:47:81:36:d5:c0:24:63:5c:ed:d2:
                    96:fd:05:2e:98:9d:a6:3d:29:35:44:0d:03:2f:fb:
                    90:d8:38:7a:e0:17:c8:4d:a3:97:00:c9:c5:82:f3:
                    2d:f3:38:b2:b6:48:19:df:6e:44:70:79:51:77:1f:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3D:36:DC:74:CC:A3:41:2D:42:FB:BC:E4:CC:61:05:81:3A:2A:AB
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Ez023HTMo0EtQvu85MxhBYE6Kqs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:89:72:e8:a2:5d:c7:e4:ac:63:07:3c:38:5c:fe:e7:88:9a:
         0d:1e:32:18:0b:00:2e:16:e7:f3:4f:7c:7a:71:9d:a1:42:9a:
         45:34:39:fd:c3:5e:26:44:18:1d:4d:d1:8a:18:b2:f5:6c:01:
         11:16:82:c2:1b:1c:8f:1a:b0:11:3d:32:8b:73:e4:9c:50:c1:
         9a:f5:d7:36:26:5e:2f:e2:1b:3e:63:a5:4d:6b:7b:85:c9:18:
         a3:eb:f3:85:06:86:81:e4:82:bd:a7:9c:23:53:ae:9a:27:9e:
         cf:33:47:47:68:63:51:14:6a:5c:ba:7e:c0:dc:6d:45:25:48:
         78:4c:1d:6c:b8:a4:08:6f:29:a8:d3:45:df:32:95:de:9d:d2:
         2f:5f:c1:0c:19:9e:19:7d:37:e6:0c:bf:81:8b:9c:fe:05:3f:
         22:df:8a:9d:0d:c3:15:e5:58:73:94:2f:95:1c:00:aa:09:af:
         ee:4c:03:53:f6:47:44:65:69:e0:58:37:9f:fb:93:16:7f:9b:
         d8:e3:4e:d6:28:93:9a:5d:fe:c2:2c:54:7b:f8:ce:0b:cc:3f:
         0d:40:96:08:a4:21:95:4c:65:ef:b7:cb:4e:64:e7:38:3e:0f:
         d7:da:92:a7:58:30:69:38:21:83:bc:bd:fb:00:d1:6d:53:17:
         10:05:57:48
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMzA5MDEw
ODU3MjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDEzM0QzNkRDNzRDQ0Ez
NDEyRDQyRkJCQ0U0Q0M2MTA1ODEzQTJBQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNcLWYdLrEEhgoXFcxB82lOpieH8QQb/bGjgtIie7jtp0u+suD
yi4Evq2vnbQJVREs9yuD8r9KY4cQlLR+AbGBIptlIK+R40KuQTguM9We7b68cRDE
C+X6UcG3sUe7byNBqnpSh3GlPisgpYVAWPaFRR/h64df0j3R+pbrkxBmUB1XotJU
TktxxZRzJXxM1KbnBis/YHZBxiySLvgfqXEjkKDN6pOJowcbnv7IO+j9AG2DxOZj
ezw7n8H+SJOuR7NNBjJEmljoR4E21cAkY1zt0pb9BS6YnaY9KTVEDQMv+5DYOHrg
F8hNo5cAycWC8y3zOLK2SBnfbkRweVF3Hz89AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUEz023HTMo0EtQvu85MxhBYE6KqswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9FejAyM0hUTW8wRXRRdnU4NU14
aEJZRTZLcXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy060
MA0GCSqGSIb3DQEBCwUAA4IBAQB5iXLool3H5KxjBzw4XP7niJoNHjIYCwAuFufz
T3x6cZ2hQppFNDn9w14mRBgdTdGKGLL1bAERFoLCGxyPGrARPTKLc+ScUMGa9dc2
Jl4v4hs+Y6VNa3uFyRij6/OFBoaB5IK9p5wjU66aJ57PM0dHaGNRFGpcun7A3G1F
JUh4TB1suKQIbymo00XfMpXendIvX8EMGZ4ZfTfmDL+Bi5z+BT8i34qdDcMV5Vhz
lC+VHACqCa/uTANT9kdEZWngWDef+5MWf5vY407WKJOaXf7CLFR7+M4LzD8NQJYI
pCGVTGXvt8tOZOc4Pg/X2pKnWDBpOCGDvL37ANFtUxcQBVdI
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:10:08 2025 by rpki-client