Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/xHStgJ_uDHRIzRRqVslswRLqLWU.roa
File:                     xHStgJ_uDHRIzRRqVslswRLqLWU.roa (raw, json)
Hash identifier:          HTEDNANMX7DacGa2hAb2zPMZRxWYg5A8mtzXAfWyLwI=
Subject key identifier:   C4:74:AD:80:9F:EE:0C:74:48:CD:14:6A:56:C9:6C:C1:12:EA:2D:65
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0865
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xHStgJ_uDHRIzRRqVslswRLqLWU.roa
Signing time:             Tue 29 Sep 2020 09:58:42 +0000
ROA not before:           Tue 29 Sep 2020 09:58:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        218.160.0.0/14 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C474AD809FEE0C7448CD146A56C96CC112EA2D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:84:c9:5f:68:51:02:58:50:30:d3:ba:3b:
                    ba:e2:87:fe:b7:01:f3:62:7d:05:51:75:79:91:0c:
                    c5:64:c3:21:4f:f9:47:dd:68:db:d1:5e:39:87:fe:
                    d3:76:d4:87:3b:50:67:13:f6:ce:79:fd:88:86:7f:
                    c9:a5:37:6a:ae:bb:07:47:97:52:7f:c2:90:bb:4d:
                    ca:b8:18:07:1b:e0:68:cb:b5:82:57:aa:9e:8b:c5:
                    0c:22:ba:07:84:44:50:bd:84:9d:0f:11:1f:bf:77:
                    65:f9:84:e1:90:31:5f:ec:18:c1:cf:d4:11:55:42:
                    d2:b4:46:38:7a:5b:ba:69:12:42:94:3c:ce:5c:ff:
                    1a:ef:e5:94:fc:34:e5:7d:97:d6:37:03:cd:e8:66:
                    7d:e5:7d:d5:49:38:a5:e5:8c:03:c2:1b:9f:57:03:
                    52:f8:60:a9:2d:bf:a4:f0:7e:56:f0:24:05:56:6e:
                    df:1d:bc:17:ae:17:74:d8:35:ad:01:5a:26:72:19:
                    32:5a:72:9a:86:cd:65:3a:de:aa:21:e4:2f:4b:fc:
                    38:c8:60:e7:83:8d:3c:d0:a3:c7:29:34:c8:8c:86:
                    45:21:2e:41:e3:5d:98:86:9e:28:4b:34:f0:08:3c:
                    6b:4a:69:3c:02:60:22:8d:8d:65:77:58:d3:d9:0b:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:AD:80:9F:EE:0C:74:48:CD:14:6A:56:C9:6C:C1:12:EA:2D:65
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xHStgJ_uDHRIzRRqVslswRLqLWU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:cc:5f:f3:e9:dc:2a:98:cd:f5:b4:c4:42:e7:f6:d4:dc:
         d5:c0:a1:28:04:a8:8e:fb:dc:07:a8:de:53:6d:7e:7a:5a:a9:
         c8:48:e4:5d:8c:7c:ce:1d:e7:57:59:3b:a9:54:3e:b5:7f:43:
         1e:61:eb:1e:ff:fb:53:d3:44:3f:6b:ea:05:8f:6b:ef:d5:ad:
         67:49:7a:ff:63:d0:1d:76:98:5a:a9:2d:51:d8:7e:97:a0:57:
         eb:7f:97:da:7c:fd:42:ef:93:0a:0f:08:37:c1:6d:9c:71:1d:
         6d:66:77:b7:51:f1:01:c2:db:f1:58:f4:68:4c:9e:4e:3d:96:
         5a:ad:49:1f:1d:76:60:4d:ae:f0:56:83:ec:94:b6:0c:a7:f2:
         ee:09:77:9f:f7:35:ba:47:01:1f:07:9e:d7:20:8b:4c:4d:73:
         4e:63:78:e1:05:d6:98:98:1d:09:c3:0b:4c:92:1c:20:11:32:
         1d:01:f5:c2:8b:19:2f:c2:aa:ca:58:87:3f:fa:8d:d9:a9:f1:
         96:93:5d:c6:f0:80:51:28:e0:01:97:5a:cd:f9:d3:a7:26:6e:
         8d:37:bb:f0:a2:c9:65:9a:6d:dd:9f:e2:a8:90:60:ab:18:f4:
         77:24:88:83:bf:71:5b:f9:ca:02:ca:a4:ed:cf:60:33:ce:db:
         4c:ca:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:55 2025 by rpki-client