Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUHWA/zDph0mkvD6An9l8bFpC9FCp11YE.roa
File:                     zDph0mkvD6An9l8bFpC9FCp11YE.roa (raw, json)
Hash identifier:          1seZFaDHRmGxuuIPn9wnUSSzG1FOvGPq4o/WBiUBml4=
Subject key identifier:   CC:3A:61:D2:69:2F:0F:A0:27:F6:5F:1B:16:90:BD:14:2A:75:D5:81
Certificate issuer:       /CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
Certificate serial:       0F6D
Authority key identifier: 58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/zDph0mkvD6An9l8bFpC9FCp11YE.roa
Signing time:             Thu 28 Oct 2021 06:05:23 +0000
ROA not before:           Thu 28 Oct 2021 06:05:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131627
IP address blocks:        103.124.176.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3949 (0xf6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
        Validity
            Not Before: Oct 28 06:05:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CC3A61D2692F0FA027F65F1B1690BD142A75D581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:84:a0:b6:da:47:18:04:c1:39:98:25:eb:
                    2d:54:73:89:ed:2e:28:08:f1:d9:12:e7:05:c0:c9:
                    93:98:e4:81:5b:b2:07:07:5f:b3:3a:82:f3:45:6a:
                    09:df:02:a4:1c:e5:a8:cb:7b:95:97:c6:7d:ff:71:
                    56:b4:4c:f8:90:b3:32:16:d5:c2:1f:20:dd:f4:38:
                    20:0d:ec:bd:09:56:3d:74:58:5f:5f:76:69:a2:39:
                    94:b4:7d:2d:23:18:4b:52:44:c5:92:d5:b2:3a:cf:
                    4e:49:f6:72:c1:28:79:80:4c:1e:57:77:09:9c:e8:
                    7b:6e:e6:ef:18:cc:0d:98:e8:95:1b:3d:94:e5:84:
                    1f:a7:cb:af:3c:6d:6b:25:98:d4:1e:81:36:2f:b2:
                    6f:56:78:82:89:75:38:81:a7:5b:04:93:b6:5e:6b:
                    06:de:07:ed:b4:54:d2:c1:09:64:a9:e8:9a:00:c6:
                    52:cd:ab:11:61:fb:8b:d9:99:8f:57:e0:ee:bf:69:
                    73:12:45:c2:00:92:34:3c:8d:a8:03:9b:32:9c:ea:
                    f3:c2:a9:5d:37:ab:74:0f:f8:0d:2c:1c:7b:be:3d:
                    17:df:bd:1b:9d:e3:5e:06:fc:bf:9a:56:b2:3e:d2:
                    0e:67:39:3b:82:61:c2:5b:65:7d:cf:33:18:2b:9f:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3A:61:D2:69:2F:0F:A0:27:F6:5F:1B:16:90:BD:14:2A:75:D5:81
            X509v3 Authority Key Identifier:
                keyid:58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/zDph0mkvD6An9l8bFpC9FCp11YE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:45:17:bf:2e:6e:59:48:ea:e0:8b:00:02:e7:52:7c:d5:7e:
         e6:3b:3f:e1:17:a9:98:ae:36:b7:45:43:d3:17:99:eb:45:8a:
         29:20:f4:45:0d:95:5f:6e:b0:99:ef:60:07:9b:29:eb:85:a9:
         43:39:39:04:96:b1:5e:44:38:af:79:1f:47:6b:88:c1:df:87:
         c4:d5:4e:ed:9e:12:1c:28:8e:bc:0a:b1:f6:a5:7d:46:f5:ef:
         21:ac:31:04:1a:f4:13:b5:f9:4e:9a:73:c1:fa:78:81:33:2c:
         39:5e:8c:a4:ce:29:8e:07:22:0f:01:fa:c1:65:8c:e7:f5:17:
         6e:ff:a6:9a:3b:e6:f4:d7:18:50:6d:03:75:de:08:25:79:b3:
         a7:e3:fd:55:33:14:a5:f5:51:d0:ab:01:a4:6e:06:a2:1b:eb:
         88:f1:98:7a:3c:1f:e0:9b:eb:be:b8:39:95:ec:7a:9c:aa:e6:
         73:f2:67:e7:ad:68:d3:99:ed:1b:73:34:26:20:f6:5c:36:d1:
         74:c7:7e:ee:cc:94:d0:3d:2a:7d:2b:53:a3:01:42:ef:d3:9b:
         80:e2:ee:ee:8e:c5:9d:c0:3d:a1:68:9c:84:3f:34:70:42:ea:
         b8:96:47:69:2c:4f:58:73:7c:31:ee:15:8a:e2:68:6c:c6:81:
         62:48:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:47 2025 by rpki-client