Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/HMPulduKeb8q96k_CfSma1n_GpA.roa
File:                     HMPulduKeb8q96k_CfSma1n_GpA.roa (raw, json)
Hash identifier:          jIKGtKvKuDyrIhYABmg1p8vBR3TrO/2UL0onR/PBWFc=
Subject key identifier:   1C:C3:EE:95:DB:8A:79:BF:2A:F7:A9:3F:09:F4:A6:6B:59:FF:1A:90
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       1054
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/HMPulduKeb8q96k_CfSma1n_GpA.roa
Signing time:             Thu 19 Oct 2023 05:59:18 +0000
ROA not before:           Thu 19 Oct 2023 05:59:18 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18464
IP address blocks:        103.127.240.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4180 (0x1054)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Oct 19 05:59:18 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1CC3EE95DB8A79BF2AF7A93F09F4A66B59FF1A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8b:34:c6:b1:5d:1f:5d:0f:f5:84:61:e3:b6:
                    c7:fd:c1:b1:a4:1f:fd:89:21:5b:95:e9:ec:62:78:
                    61:8b:00:95:0b:7e:07:54:f3:b0:59:bc:35:73:9c:
                    b2:43:85:eb:b6:15:06:4d:7e:64:89:6b:07:f6:09:
                    82:c2:f1:06:79:1e:d3:6d:15:7f:57:2e:32:9e:1c:
                    d9:e2:1f:cf:8f:61:01:9f:9a:37:cd:dc:c8:bc:3c:
                    7d:76:85:be:66:0a:04:9f:24:d5:93:9b:c0:82:0f:
                    d4:bd:71:77:f9:e2:83:d8:c4:77:ac:7a:09:8f:71:
                    49:45:90:be:a9:ac:5d:e1:c3:76:e3:ce:40:2b:ef:
                    07:56:18:56:51:1e:0c:33:49:76:f8:0b:57:40:f0:
                    36:c9:9c:34:84:52:54:ba:dd:6b:76:82:cb:6e:72:
                    ac:72:88:81:21:fc:6b:53:66:63:50:21:34:5e:27:
                    84:03:17:c9:a3:4f:6a:68:67:f8:31:b7:e1:a0:57:
                    cc:99:e3:a8:00:15:2a:b6:e5:a3:b6:c3:c4:df:19:
                    b6:9c:0b:07:1d:53:3a:72:15:5d:f0:e9:50:e6:c1:
                    0d:4d:96:64:f2:e4:d9:e8:48:1f:ac:32:ea:3f:72:
                    17:f9:a0:e6:c6:98:33:d1:ae:8d:93:25:de:cc:93:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C3:EE:95:DB:8A:79:BF:2A:F7:A9:3F:09:F4:A6:6B:59:FF:1A:90
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/HMPulduKeb8q96k_CfSma1n_GpA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:1c:d0:38:d2:71:fc:86:f4:d4:2f:7d:a3:b9:5b:bb:1e:
         ae:6f:8f:dc:8e:d6:82:a7:58:ff:da:61:2c:f5:20:07:1b:5b:
         37:f2:3a:72:1d:aa:0e:ad:49:4e:64:74:c5:c5:69:4c:cb:39:
         7b:5c:6e:28:de:db:a1:ce:7b:46:4e:c8:9a:75:de:a2:c6:8c:
         68:92:32:9c:3d:f8:20:cd:2f:77:ca:8d:8f:7a:28:00:a3:79:
         a0:5e:d1:7d:20:c3:7c:fd:c4:e9:eb:5e:9a:03:fb:5a:b6:89:
         ec:74:b4:d6:66:fa:70:cd:6b:d3:b4:23:9a:04:1f:e6:c5:27:
         c5:8d:36:ff:4d:bc:d3:49:c5:1f:9b:32:f1:e0:e6:b9:b5:ca:
         d9:f1:ad:13:96:3b:c0:72:17:05:8f:c0:48:c0:a9:ee:33:e7:
         54:64:dc:e4:d0:9a:e2:9b:ee:af:18:da:9a:06:e5:c2:01:7d:
         49:bb:62:a6:15:e0:1a:a5:2a:f6:ee:4c:9c:01:34:54:d5:14:
         2f:56:31:e2:be:07:f3:d9:23:08:ea:23:a6:bf:f1:87:16:cb:
         23:42:c0:c9:49:e4:d5:7c:ac:e4:27:a7:ca:10:00:2f:d6:78:
         1e:0a:53:30:a1:26:6a:7b:b0:94:12:6d:7d:a7:74:b0:eb:2f:
         9b:02:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:41 2025 by rpki-client