Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/BJzhfo59SKdVshIP0Iskj3VOLWU.roa
File:                     BJzhfo59SKdVshIP0Iskj3VOLWU.roa (raw, json)
Hash identifier:          g3QSK10OcM/FBRzUiTs10qE2+5XtRnqk83ePVSlvRLQ=
Subject key identifier:   04:9C:E1:7E:8E:7D:48:A7:55:B2:12:0F:D0:8B:24:8F:75:4E:2D:65
Certificate issuer:       /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial:       0D3E
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/BJzhfo59SKdVshIP0Iskj3VOLWU.roa
Signing time:             Tue 29 Sep 2020 09:57:56 +0000
ROA not before:           Tue 29 Sep 2020 09:57:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131616
IP address blocks:        103.124.148.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3390 (0xd3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
        Validity
            Not Before: Sep 29 09:57:56 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=049CE17E8E7D48A755B2120FD08B248F754E2D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:67:0e:43:8d:ac:ad:78:a5:c7:53:39:73:
                    ce:94:f7:78:96:cc:ed:89:da:40:92:f5:f4:34:61:
                    fb:ff:f9:8a:4e:53:66:75:d0:55:19:b1:15:7e:b6:
                    c0:e5:d9:3a:66:df:47:8b:3c:27:3d:6b:1b:cc:54:
                    61:b8:c8:4b:8d:cf:14:e5:7b:60:a0:e4:96:18:b5:
                    67:59:58:c2:da:00:6d:f3:1a:8d:e7:37:14:50:c8:
                    ce:e1:b7:7c:5a:10:84:83:ba:32:e1:98:51:64:e4:
                    54:2c:04:36:2f:00:0c:ac:35:51:9d:2b:ef:a2:4c:
                    65:50:14:c8:dd:33:ca:43:95:6a:61:d5:96:e2:55:
                    af:18:80:19:4c:c8:8f:aa:09:72:e7:c5:60:91:a9:
                    0c:71:9e:28:ca:33:f0:7a:8d:74:a7:04:95:75:e6:
                    4a:04:d3:98:30:ee:9f:e3:a4:63:10:45:d5:8b:76:
                    55:d4:a9:fc:98:c2:cd:69:db:a1:30:ec:28:53:04:
                    98:ea:d4:61:b7:5e:58:76:92:da:f6:e8:c8:6d:99:
                    0c:06:9e:ef:88:c4:d3:1e:0d:97:5d:b1:e2:5a:b9:
                    7a:9e:1a:9e:67:59:a0:44:3c:5e:59:72:94:9b:1a:
                    ed:53:94:8d:da:36:85:ba:b8:6b:e8:81:74:86:9d:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9C:E1:7E:8E:7D:48:A7:55:B2:12:0F:D0:8B:24:8F:75:4E:2D:65
            X509v3 Authority Key Identifier:
                keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/BJzhfo59SKdVshIP0Iskj3VOLWU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:43:1b:ae:9e:e0:04:73:d1:17:c3:1d:37:20:6d:7d:0c:
         1e:f7:d6:f3:c7:83:47:42:ef:2c:d0:3c:4e:2c:88:a3:59:aa:
         d9:a7:8d:cc:9d:a9:91:6d:a2:c2:cc:15:cb:95:87:50:31:88:
         ea:2b:80:a9:ea:a1:50:07:c9:46:f9:52:9b:75:60:12:30:f9:
         26:01:45:bf:51:62:af:ab:13:db:88:bf:32:05:43:d5:23:a2:
         47:23:a7:99:b6:89:39:50:e7:bf:30:2e:21:fc:ad:64:8a:33:
         b3:3d:70:eb:55:71:80:8a:e5:11:4d:56:cc:0d:2a:a9:ac:c6:
         e7:10:aa:00:fc:8d:a9:a7:ac:ed:4d:1d:a5:f9:fe:55:7a:33:
         e2:5e:b1:c7:9c:dd:ca:d3:0b:44:cb:b9:a2:5b:2a:58:7d:96:
         e7:40:59:da:f0:a5:47:11:b2:59:76:fb:89:89:fa:e2:2a:d5:
         10:5c:fc:af:1b:6b:1c:d2:b5:06:dc:8e:c3:de:ae:3d:7d:fc:
         77:84:5b:ff:3b:91:c8:70:a8:49:48:6c:f1:2a:01:58:5e:0f:
         df:77:c5:95:8f:b6:88:a4:27:ed:39:d4:a3:b8:1b:94:83:4b:
         4b:51:82:9a:25:cc:7c:31:78:97:79:dc:83:67:8d:8a:2d:77:
         1e:f4:43:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:24 2025 by rpki-client