Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/05xaVSUEoU9jjfxS2RYcQMgbKkw.roa
File:                     05xaVSUEoU9jjfxS2RYcQMgbKkw.roa (raw, json)
Hash identifier:          SNh/i044/owe6XgA2vwH7hW+13wxHkKIhJdy6IX2/yg=
Subject key identifier:   D3:9C:5A:55:25:04:A1:4F:63:8D:FC:52:D9:16:1C:40:C8:1B:2A:4C
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       1058
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/05xaVSUEoU9jjfxS2RYcQMgbKkw.roa
Signing time:             Thu 19 Oct 2023 06:00:28 +0000
ROA not before:           Thu 19 Oct 2023 06:00:28 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18464
IP address blocks:        103.127.240.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4184 (0x1058)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Oct 19 06:00:28 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=D39C5A552504A14F638DFC52D9161C40C81B2A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:ed:3d:57:e4:a5:66:b3:f3:13:91:fe:41:
                    65:50:78:25:39:70:eb:52:d9:4b:ac:37:df:4d:0f:
                    0e:bd:43:bb:f5:69:a9:33:e6:75:8d:78:8c:96:66:
                    8a:00:38:3a:af:0c:3a:df:31:47:3f:b2:20:94:59:
                    7a:93:e8:d3:28:bb:9e:c3:ad:67:f7:19:65:9e:5b:
                    81:5b:d9:c5:7e:84:67:7b:db:e8:a1:b0:fb:76:61:
                    7a:5d:36:11:b6:a2:42:18:7b:f1:34:9c:1d:41:fe:
                    12:42:db:75:1f:6e:de:ab:e4:87:e6:26:83:66:8d:
                    ad:33:67:d0:ad:25:0a:55:0e:00:5c:0e:2a:95:c4:
                    20:b2:99:4b:ec:76:e0:ad:e5:6d:13:38:17:05:7d:
                    1f:e4:f9:93:0f:a2:af:bd:1a:08:bd:29:2f:f3:d2:
                    c4:be:57:e6:cc:79:a5:2c:d1:63:93:96:85:a0:3c:
                    92:b4:f8:7b:23:d1:a6:59:58:f1:dc:e5:29:e2:43:
                    8d:15:f2:c1:af:0d:2f:76:23:6c:4d:2d:e4:a1:f5:
                    da:23:77:65:f8:96:11:b4:0d:00:05:65:6b:f2:ff:
                    f6:cb:76:ef:d0:76:af:c3:1a:91:70:c3:29:fc:b7:
                    1a:a8:14:8e:f5:dc:53:24:16:b3:a3:3e:bf:2b:92:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9C:5A:55:25:04:A1:4F:63:8D:FC:52:D9:16:1C:40:C8:1B:2A:4C
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/05xaVSUEoU9jjfxS2RYcQMgbKkw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:99:bd:94:23:97:a4:a7:05:d4:c5:ab:34:6e:86:8f:65:35:
         dd:57:e2:8e:49:ce:8d:3a:62:cf:99:7f:bc:53:f6:03:f7:af:
         0e:67:b9:9c:07:b0:89:9f:70:48:f2:82:12:f5:48:15:a5:50:
         23:d6:aa:83:c5:95:c3:02:a0:4d:34:9a:00:e7:7f:e6:2f:db:
         78:0c:cb:e0:d2:d4:10:c0:10:48:01:ec:44:09:c4:84:54:cf:
         d0:72:84:27:4a:df:13:d6:07:1c:bf:cd:a6:d1:fb:93:cb:85:
         bb:c9:9b:8a:bf:e9:ad:02:30:0b:47:63:67:2a:00:99:64:e6:
         4a:01:2a:29:8d:0f:a3:e2:d9:e6:1e:aa:a3:0e:7e:d6:91:b8:
         50:24:31:26:cb:0d:6f:f1:9f:24:84:f5:bf:da:61:e3:85:85:
         bb:27:a8:7d:7f:2f:d6:24:ea:86:d1:dd:c6:5b:97:7b:27:fa:
         84:1e:38:1a:b6:42:9f:fe:b9:22:b2:e0:c6:17:59:07:07:85:
         c6:c3:f2:0b:37:f6:e7:39:5c:00:00:48:4c:43:e3:e2:e0:ae:
         42:78:52:d7:90:92:ca:0e:ab:9b:35:44:85:cd:58:13:35:15:
         d8:d3:25:ca:04:49:0c:ed:25:0e:ce:43:15:32:79:46:84:0d:
         c5:74:23:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:34 2025 by rpki-client