Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eJuz0Ueb4kXkxn5L-r_NTS_mN8w.roa
File:                     eJuz0Ueb4kXkxn5L-r_NTS_mN8w.roa (raw, json)
Hash identifier:          ubSK/LPb0gjrrIR0b5wQYeHDUBSWOy7LJQ1lTQad4uA=
Subject key identifier:   78:9B:B3:D1:47:9B:E2:45:E4:C6:7E:4B:FA:BF:CD:4D:2F:E6:37:CC
Certificate issuer:       /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial:       0AE8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eJuz0Ueb4kXkxn5L-r_NTS_mN8w.roa
Signing time:             Thu 15 Sep 2022 02:40:54 +0000
ROA not before:           Thu 15 Sep 2022 02:40:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9416
IP address blocks:        115.43.0.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2792 (0xae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
        Validity
            Not Before: Sep 15 02:40:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=789BB3D1479BE245E4C67E4BFABFCD4D2FE637CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:37:05:7c:b4:0e:a7:0b:07:81:d7:32:4e:
                    64:63:cb:dd:00:4b:ba:b0:fc:ab:3d:3d:26:ea:d2:
                    30:1b:89:e5:f6:ad:7e:fa:89:5e:75:94:1d:a3:1f:
                    bb:d7:91:89:6c:9d:25:cb:39:c5:df:3b:22:1e:9e:
                    12:a6:6d:ca:c7:a0:82:4f:06:ec:b2:da:7d:ab:87:
                    06:44:f7:94:17:9f:ad:f3:b2:92:65:fd:b1:09:13:
                    fe:54:25:d6:a4:f8:c2:1a:ec:fd:5d:70:f8:56:75:
                    11:03:06:ac:f9:c8:d2:a3:22:c3:53:1b:2f:b3:76:
                    20:c8:73:58:38:cb:5c:62:27:3c:0c:33:a0:5a:8b:
                    c1:c6:38:c6:f0:95:af:4f:be:4c:c7:4e:a4:0f:7c:
                    16:37:bd:a5:22:e6:ef:39:e1:66:75:87:4c:8b:b6:
                    54:6e:0c:e9:47:d8:c4:fe:18:b2:5c:93:92:2c:43:
                    25:7a:5b:c4:ef:03:a1:f0:5b:73:56:71:da:12:a3:
                    fe:6c:d1:02:5a:6c:6f:49:58:59:f8:e3:df:be:ed:
                    aa:2b:58:d8:8f:73:bf:6c:93:6e:20:2f:4f:14:09:
                    df:15:93:4b:04:90:ef:b9:43:c9:eb:68:42:c8:bc:
                    c2:72:bc:25:28:58:ee:13:d8:7c:e8:e9:6c:7f:77:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9B:B3:D1:47:9B:E2:45:E4:C6:7E:4B:FA:BF:CD:4D:2F:E6:37:CC
            X509v3 Authority Key Identifier:
                keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eJuz0Ueb4kXkxn5L-r_NTS_mN8w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.43.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:20:58:54:90:01:c6:64:db:75:df:46:e5:11:17:f2:2d:
         fd:ab:ca:7e:91:25:84:36:2e:1f:61:84:f3:0e:58:32:7a:91:
         4c:a4:06:d9:d8:fb:61:5c:a4:59:13:9e:91:c0:0a:fa:f6:7d:
         44:8d:e9:4c:b8:2b:a2:31:e6:14:ef:39:38:b6:f6:37:d6:ef:
         03:18:35:d7:b2:6e:19:a4:0f:8a:1e:86:09:2a:93:b2:57:ce:
         75:40:ae:1e:a3:99:7f:6f:69:9c:3a:fd:7b:62:f6:b2:17:14:
         18:37:ad:88:09:e6:f4:48:58:55:7e:9a:d0:28:b1:5d:99:c7:
         79:fb:27:9b:66:b7:f5:9d:05:4b:f2:1e:64:7d:cc:e9:60:73:
         69:5d:a5:9c:12:d7:ff:7b:66:7a:c8:fd:79:ab:a6:1b:d6:61:
         c3:6d:7e:b2:7b:d0:ce:02:ff:78:9f:77:18:82:a0:9f:2d:2e:
         16:08:66:83:0d:8f:fc:01:a6:eb:65:1e:b3:d7:d7:5a:ab:27:
         f5:f5:ab:5d:2b:d3:b2:45:39:05:b3:3a:9e:d4:fa:ab:7b:4d:
         7d:2a:cf:7e:83:4c:f5:c6:20:66:14:4d:d7:18:a1:97:7a:f9:
         09:9f:08:ee:ad:9e:0a:41:27:82:24:bc:ac:5f:c7:94:15:61:
         d7:49:fc:0d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMjA5MTUw
MjQwNTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc4OUJCM0QxNDc5QkUy
NDVFNEM2N0U0QkZBQkZDRDREMkZFNjM3Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSfTcFfLQOpwsHgdcyTmRjy90AS7qw/Ks9PSbq0jAbieX2rX76
iV51lB2jH7vXkYlsnSXLOcXfOyIenhKmbcrHoIJPBuyy2n2rhwZE95QXn63zspJl
/bEJE/5UJdak+MIa7P1dcPhWdREDBqz5yNKjIsNTGy+zdiDIc1g4y1xiJzwMM6Ba
i8HGOMbwla9PvkzHTqQPfBY3vaUi5u854WZ1h0yLtlRuDOlH2MT+GLJck5IsQyV6
W8TvA6HwW3NWcdoSo/5s0QJabG9JWFn449++7aorWNiPc79sk24gL08UCd8Vk0sE
kO+5Q8nraELIvMJyvCUoWO4T2Hzo6Wx/d9WBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeJuz0Ueb4kXkxn5L+r/NTS/mN8wwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL2VKdXowVWViNGtYa3huNUwt
cl9OVFNfbU44dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdz
KwAwDQYJKoZIhvcNAQELBQADggEBAFl+IFhUkAHGZNt130blERfyLf2ryn6RJYQ2
Lh9hhPMOWDJ6kUykBtnY+2FcpFkTnpHACvr2fUSN6Uy4K6Ix5hTvOTi29jfW7wMY
NdeybhmkD4oehgkqk7JXznVArh6jmX9vaZw6/Xti9rIXFBg3rYgJ5vRIWFV+mtAo
sV2Zx3n7J5tmt/WdBUvyHmR9zOlgc2ldpZwS1/97ZnrI/XmrphvWYcNtfrJ70M4C
/3ifdxiCoJ8tLhYIZoMNj/wBputlHrPX11qrJ/X1q10r07JFOQWzOp7U+qt7TX0q
z36DTPXGIGYUTdcYoZd6+QmfCO6tngpBJ4IkvKxfx5QVYddJ/A0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:31 2025 by rpki-client