Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/UVs1SZ5mMQYFWapdISYokg7AI8I.roa
File:                     UVs1SZ5mMQYFWapdISYokg7AI8I.roa (raw, json)
Hash identifier:          vSEJzjeDDMkPemEmNLMxB6YCuaq4MrZ3VNAAr6HOmQ4=
Subject key identifier:   51:5B:35:49:9E:66:31:06:05:59:AA:5D:21:26:28:92:0E:C0:23:C2
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0855
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UVs1SZ5mMQYFWapdISYokg7AI8I.roa
Signing time:             Tue 29 Sep 2020 09:58:38 +0000
ROA not before:           Tue 29 Sep 2020 09:58:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        203.75.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=515B35499E6631060559AA5D212628920EC023C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:be:ce:9c:a7:90:b3:b3:bc:35:ee:59:82:
                    26:3c:12:03:5a:db:ad:35:50:c5:63:05:61:7f:e8:
                    15:94:2a:56:51:2a:5e:94:1c:cd:d7:75:7f:83:82:
                    fc:25:76:6c:5b:62:69:49:30:12:88:9d:20:cd:6c:
                    af:e8:b6:65:8b:3f:a6:88:ed:84:1a:2e:06:44:e5:
                    8b:d8:81:dc:95:6b:d4:40:31:20:cb:17:5b:e0:77:
                    13:d4:ad:4f:83:d0:2b:a3:73:7c:7a:58:49:09:26:
                    6f:ea:4f:bd:8f:9f:57:4c:9a:a1:99:4b:ca:9f:c7:
                    f1:f8:c7:f8:b4:cb:65:a8:f1:17:25:b9:54:fe:b1:
                    bb:13:c2:73:a5:22:6b:a9:6a:1a:67:11:bf:75:c6:
                    f0:23:92:3b:d6:01:33:b2:ca:f3:e1:d0:97:49:fc:
                    ac:c1:9a:f6:29:1a:20:51:f6:a8:db:cb:94:70:75:
                    a3:3b:3c:06:32:fc:eb:1b:3a:ad:03:d9:e8:00:ca:
                    8f:c5:26:b9:4c:e6:ec:60:dd:f8:41:18:4c:6e:7a:
                    5f:ea:4a:c1:22:b6:53:0c:ec:0e:7e:05:0e:fe:cf:
                    cc:7d:d1:83:25:ae:8f:67:72:ef:be:e3:a4:85:9d:
                    da:b7:70:7e:30:c9:9e:13:51:ef:ef:d3:cb:77:60:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5B:35:49:9E:66:31:06:05:59:AA:5D:21:26:28:92:0E:C0:23:C2
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UVs1SZ5mMQYFWapdISYokg7AI8I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:fb:90:14:35:22:b8:11:2a:20:f0:ae:00:41:56:e3:50:
         1b:c0:32:73:47:85:8e:54:a9:aa:10:72:f6:a6:e5:26:4f:fe:
         0c:44:dc:5a:15:e7:1e:80:31:07:bc:72:ef:fd:57:6e:8c:39:
         cc:72:0e:5e:19:2b:36:ab:c2:3b:a4:ae:f7:ec:a1:ea:a9:cc:
         3e:15:03:86:12:1f:62:37:65:d7:85:6d:dd:1a:be:62:de:64:
         74:da:87:38:d2:7f:d3:d8:d1:28:2e:3d:b7:aa:64:83:97:e6:
         56:14:cc:f6:35:e0:bb:79:91:a3:47:07:04:30:f1:6f:3d:2b:
         2b:54:d2:1a:9b:0e:a9:5d:47:48:81:b1:fd:4d:5b:65:5e:fa:
         9a:b3:ec:b2:41:03:0d:c1:e5:20:98:1c:c0:0a:20:82:b9:8e:
         93:de:8e:9b:05:c7:1f:5f:e8:d1:a4:f3:4d:ef:6c:e2:19:bf:
         1c:e0:fa:d2:a6:bf:33:20:c8:69:70:cc:58:64:27:75:1e:74:
         83:97:7a:e0:c4:c8:cf:8f:33:10:18:d5:9e:01:21:bb:da:b7:
         81:b6:76:ad:76:94:45:85:8b:c1:80:16:92:4a:3f:cf:86:64:
         9d:6b:1f:be:d5:d7:27:82:6d:29:aa:71:5f:a7:7c:69:1e:88:
         5c:78:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:18 2025 by rpki-client