Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/b7cS5Dm4nUZO0B4QMyyKUmrVGrA.roa
File:                     b7cS5Dm4nUZO0B4QMyyKUmrVGrA.roa (raw, json)
Hash identifier:          07haihIl2oA3QdrrSM99uDQB6kyeDV+huFVRBXISSYM=
Subject key identifier:   6F:B7:12:E4:39:B8:9D:46:4E:D0:1E:10:33:2C:8A:52:6A:D5:1A:B0
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       105C
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/b7cS5Dm4nUZO0B4QMyyKUmrVGrA.roa
Signing time:             Thu 19 Oct 2023 06:01:32 +0000
ROA not before:           Thu 19 Oct 2023 06:01:32 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18464
IP address blocks:        103.127.241.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4188 (0x105c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Oct 19 06:01:32 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=6FB712E439B89D464ED01E10332C8A526AD51AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:3f:33:1b:a0:be:2a:c3:32:97:40:bb:8c:
                    7d:15:c1:6e:c3:93:59:b5:c6:b8:dc:27:b6:cf:25:
                    46:ac:4f:e4:63:4e:16:88:48:74:f3:28:0c:eb:bf:
                    ae:db:fb:5f:f6:5c:4e:18:65:87:57:87:29:ac:8a:
                    ca:4e:16:81:c8:a5:4d:af:b0:d7:a6:74:fa:da:c0:
                    db:28:30:0c:cf:89:9a:a1:a9:3b:84:d5:e3:f7:b6:
                    dd:e6:4d:8b:65:3f:31:55:9c:33:bc:dc:37:18:d2:
                    59:2e:f2:a3:7d:fa:93:7f:2d:5d:46:2d:57:b9:96:
                    96:4a:6a:1b:70:4b:cc:b3:44:3c:42:c6:3a:8c:93:
                    16:0b:40:f0:01:ae:63:a7:fe:1e:27:cc:6a:30:c8:
                    d0:07:2c:45:22:07:89:fd:4d:9a:78:c1:b4:4d:82:
                    14:d8:9c:02:34:fb:79:93:3c:c6:14:51:35:09:e4:
                    66:b2:55:76:70:59:4d:b3:d4:30:c4:60:33:dd:c7:
                    91:0e:90:07:39:b2:b5:10:ba:3a:07:6e:f6:bc:f0:
                    c2:10:ea:f5:71:4c:bf:89:3f:16:6c:1b:80:5a:47:
                    75:99:b9:13:11:ca:c0:48:f6:89:80:c3:35:8a:09:
                    95:24:d2:59:4c:7b:60:41:cb:ed:8a:68:33:76:d2:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B7:12:E4:39:B8:9D:46:4E:D0:1E:10:33:2C:8A:52:6A:D5:1A:B0
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/b7cS5Dm4nUZO0B4QMyyKUmrVGrA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:b0:1f:74:18:74:61:db:bc:c4:7f:98:ef:c2:56:2d:c9:6c:
         3f:06:d5:80:ca:d0:f7:76:9c:22:96:ca:d6:ca:52:41:c9:60:
         db:cb:3e:8a:ce:e6:66:1c:8f:27:59:26:72:ac:48:57:4f:a3:
         c2:44:72:a8:44:e3:43:9f:fc:1a:99:92:bf:25:a4:4b:36:51:
         a3:a9:82:38:16:ef:83:bf:80:dd:0b:76:1b:ca:60:a3:d9:8d:
         4a:9f:fc:d3:91:31:1b:6d:ff:bf:9f:c7:5b:a9:90:a2:16:1f:
         22:f2:5a:86:a3:85:50:05:e9:8e:eb:74:18:0a:63:3a:e0:a6:
         32:e0:71:ac:0b:7f:ff:ab:67:27:2c:4d:6b:36:30:91:07:83:
         19:29:e2:13:82:84:a7:ce:18:ed:56:cd:79:db:39:9c:f7:df:
         c8:2c:e4:0a:a4:eb:fd:90:27:47:ff:bd:65:9a:1e:99:e6:d3:
         85:01:28:e0:3c:69:08:03:a1:17:0f:44:b0:ed:30:18:c7:43:
         c8:d0:0b:50:89:c1:6a:d8:6f:cd:af:9a:9c:d0:03:11:40:ee:
         a6:56:aa:05:46:b3:ca:85:6c:25:93:07:13:5b:5a:8e:4a:fa:
         9c:bc:d7:c3:06:1c:8b:73:ea:dc:94:67:84:07:95:00:0f:9e:
         11:ad:65:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:19 2025 by rpki-client