Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TXLCic4_d1UqtTx4KY4x0cnc9fE.roa
File:                     TXLCic4_d1UqtTx4KY4x0cnc9fE.roa (raw, json)
Hash identifier:          qFxKpa8lSbhV5jw0uW3awVFqCCD6Usp+YAeatRCuNQs=
Subject key identifier:   4D:72:C2:89:CE:3F:77:55:2A:B5:3C:78:29:8E:31:D1:C9:DC:F5:F1
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C63
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TXLCic4_d1UqtTx4KY4x0cnc9fE.roa
Signing time:             Wed 29 Sep 2021 02:51:13 +0000
ROA not before:           Wed 29 Sep 2021 02:51:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     20940
IP address blocks:        203.66.226.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3171 (0xc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:51:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4D72C289CE3F77552AB53C78298E31D1C9DCF5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:d4:6a:37:88:d9:09:24:66:a3:94:20:95:
                    f2:a9:6b:18:57:fa:75:fd:7c:2d:a2:23:f7:be:05:
                    01:85:f7:01:2f:0e:b2:91:5d:bd:c2:1e:53:ee:2a:
                    72:e1:3d:fc:0f:a2:44:be:f3:6d:e4:b5:ff:af:8e:
                    f8:80:52:e5:d5:e8:a6:b1:7b:7b:61:98:85:0e:f3:
                    d4:11:13:b7:45:b9:6b:17:89:78:10:d3:13:27:ca:
                    ae:d9:6b:59:ad:41:c6:fd:96:31:ac:52:05:d6:73:
                    54:e2:4b:98:43:fc:87:bc:49:17:8c:65:5d:05:2e:
                    db:5e:33:56:d5:54:69:70:59:63:d3:de:b5:80:90:
                    8e:48:52:93:ec:cc:25:f1:83:4d:15:14:14:b6:bd:
                    7d:90:2b:15:ab:1e:b1:76:4d:e2:ef:d4:b4:17:5f:
                    26:d7:01:ed:af:bb:8e:64:87:53:0e:c7:7f:6a:8b:
                    dc:31:7e:5c:61:9f:56:26:eb:99:8c:cc:e7:0c:c6:
                    39:f8:7c:98:fc:b9:d3:e8:57:38:09:e5:10:5a:d1:
                    3f:89:63:3c:ba:54:b4:4d:18:41:a9:50:1a:63:67:
                    07:c4:d9:58:be:53:b9:27:c7:5d:b0:9b:12:a6:b7:
                    9c:e4:df:ad:d6:d1:a4:d0:1f:5b:1c:91:57:1b:fe:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:72:C2:89:CE:3F:77:55:2A:B5:3C:78:29:8E:31:D1:C9:DC:F5:F1
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TXLCic4_d1UqtTx4KY4x0cnc9fE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.66.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:1f:b6:4e:68:d4:66:df:12:76:3b:02:03:e7:56:ce:4f:0c:
         32:20:58:f7:5e:c8:ee:3d:b4:fb:ec:f6:d8:d0:67:b7:6f:1f:
         87:50:62:3f:f7:a1:b1:73:1b:14:16:a5:ea:29:98:7f:84:16:
         32:35:88:cb:b2:83:7a:f6:be:85:99:d7:65:f7:c4:d5:77:04:
         dd:d3:34:49:0d:e2:1c:c0:c4:05:f4:94:fc:17:ac:ec:0b:c7:
         17:86:5d:04:e1:85:c0:d7:f1:ee:f3:7a:6c:4c:24:85:39:56:
         40:49:1f:ef:69:06:7a:89:d5:be:da:cf:0f:a7:91:d6:5d:8e:
         eb:0d:36:d6:8d:b3:94:b4:4f:54:92:f6:6a:c4:6e:fe:86:d6:
         ff:ed:0d:fe:1f:c0:c7:a2:7b:55:9f:64:35:76:f2:1e:46:95:
         c2:44:b7:22:9d:3c:d2:ed:d0:12:ca:a8:eb:20:36:08:79:48:
         7f:69:b2:3f:a8:7a:c1:35:2f:8b:d4:84:db:fd:bc:08:81:c2:
         c5:58:6a:94:7d:1b:61:ae:66:33:59:39:ad:ad:83:c9:34:bb:
         12:97:42:96:53:68:b6:5d:89:03:98:0a:62:0a:ce:55:3e:17:
         32:45:c1:75:d1:3c:08:96:0e:73:16:19:c3:77:b9:ea:e1:66:
         7b:7e:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:41 2025 by rpki-client