Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/YvfqcVFZFyIfs80S43yE8s4OUqw.roa
File:                     YvfqcVFZFyIfs80S43yE8s4OUqw.roa (raw, json)
Hash identifier:          ZKmA/E6qYMybdtakJ700Tnvw8xms5w8RrtPx1CDqjcA=
Subject key identifier:   62:F7:EA:71:51:59:17:22:1F:B3:CD:12:E3:7C:84:F2:CE:0E:52:AC
Certificate issuer:       /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial:       0E75
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/YvfqcVFZFyIfs80S43yE8s4OUqw.roa
Signing time:             Tue 02 Feb 2021 10:43:05 +0000
ROA not before:           Tue 02 Feb 2021 10:43:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     63199
IP address blocks:        103.124.150.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3701 (0xe75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
        Validity
            Not Before: Feb  2 10:43:05 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=62F7EA71515917221FB3CD12E37C84F2CE0E52AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:a9:6b:a2:52:d2:4a:75:c1:fa:ce:3d:4d:
                    76:55:fe:70:83:b2:50:02:eb:92:e6:e1:6b:58:1f:
                    99:ee:cf:0c:13:e9:a0:00:ce:6e:21:39:1e:45:5d:
                    3a:44:05:f9:b3:07:5c:af:b0:f3:25:d9:b3:47:3d:
                    df:33:0d:1f:0a:46:bb:94:23:55:c2:2a:27:93:16:
                    80:81:8c:ca:f6:48:ec:31:03:07:b7:cd:44:f6:f5:
                    a9:65:09:46:4a:ff:2e:51:66:be:08:7f:35:99:7c:
                    cb:79:d6:64:be:0c:0e:bf:19:12:76:c3:ac:b3:e0:
                    7a:67:1e:16:af:64:45:f1:86:2d:17:5e:60:7d:df:
                    fd:36:99:71:8e:b6:9a:ea:30:f3:67:7c:e9:1d:a2:
                    0a:bc:7e:40:96:17:60:64:bc:ba:7b:2f:a8:dd:39:
                    3e:dc:e5:fc:05:a0:db:dd:f5:8e:27:2b:44:bb:63:
                    41:e1:41:b2:2c:a9:75:4f:ef:eb:4f:1f:ee:3b:b0:
                    b8:3f:b3:39:7b:e9:3a:d9:93:71:d4:ce:53:ec:90:
                    6f:82:68:45:84:96:bf:a2:08:9e:2f:d5:08:9b:71:
                    fc:24:f7:f1:18:78:f7:42:1e:e0:34:68:f4:a5:c6:
                    da:ef:0d:53:02:34:d6:cb:ea:10:75:43:00:54:e0:
                    17:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F7:EA:71:51:59:17:22:1F:B3:CD:12:E3:7C:84:F2:CE:0E:52:AC
            X509v3 Authority Key Identifier:
                keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/YvfqcVFZFyIfs80S43yE8s4OUqw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:cd:6c:db:5e:f6:78:04:07:0d:3c:33:1c:fa:7d:35:87:
         75:26:24:5b:31:f4:c0:56:7f:c8:3b:6c:aa:89:c2:fd:d7:99:
         12:c3:7d:41:a7:b0:7b:08:79:75:e7:9c:08:7e:cd:cc:d5:36:
         68:d3:97:8a:a8:e8:23:6c:73:c0:39:bc:45:f2:42:39:40:c6:
         4b:15:1c:1d:9a:0c:1f:24:79:ec:43:d6:1b:61:cf:69:1b:05:
         cc:6a:88:57:71:fc:6f:7f:03:b3:5b:f5:10:94:84:4e:62:09:
         1d:1a:a2:78:3f:28:d9:a8:b9:92:6a:31:cd:1d:f0:4c:1d:a6:
         e9:75:f2:96:be:7f:fe:7b:c0:28:78:f7:21:81:1b:96:13:7f:
         61:63:a4:93:4b:1d:99:92:dd:fc:c0:66:df:41:23:8b:0c:fc:
         5e:c6:79:6b:05:cb:5f:6b:0f:8f:0a:e1:cb:82:0a:61:82:ff:
         3c:c0:60:91:14:18:77:3d:56:18:01:5c:2e:e2:a7:2c:90:89:
         e3:a5:ea:c0:d5:ca:c6:5a:58:18:46:96:0c:4b:50:3e:7f:cd:
         a4:66:26:71:59:26:87:7d:fa:b7:10:c4:c0:cb:e0:0d:19:12:
         43:75:53:a6:c2:22:f4:94:7a:aa:0c:98:56:e0:55:90:06:ad:
         36:31:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:22 2025 by rpki-client