Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/m2ixb4OTq4ZYExTOpHOgXppCipA.roa
File:                     m2ixb4OTq4ZYExTOpHOgXppCipA.roa (raw, json)
Hash identifier:          MWcEK90K2+lgUkD1g0fOF60Zayw+qkuZmNvj3YUbUB4=
Subject key identifier:   9B:68:B1:6F:83:93:AB:86:58:13:14:CE:A4:73:A0:5E:9A:42:8A:90
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1073
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/m2ixb4OTq4ZYExTOpHOgXppCipA.roa
Signing time:             Tue 06 Feb 2024 09:41:30 +0000
ROA not before:           Tue 06 Feb 2024 09:41:30 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     64496
IP address blocks:        103.125.226.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4211 (0x1073)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Feb  6 09:41:30 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=9B68B16F8393AB86581314CEA473A05E9A428A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:89:5f:49:9c:3a:85:45:4b:16:e3:ad:fe:
                    c0:d5:01:1b:a4:d6:d7:14:48:77:87:59:f9:8d:a9:
                    e4:6a:a1:9b:c8:26:66:06:89:78:d0:17:21:57:56:
                    ec:d3:6e:1f:88:ba:5a:c3:4e:15:55:4f:6f:42:82:
                    c9:57:6c:73:4a:f0:65:d2:ef:24:95:19:ad:3c:e6:
                    34:20:dc:b4:63:a9:cc:ca:f7:00:59:de:2a:b8:5e:
                    04:3d:a7:57:65:45:69:a7:6a:fd:3b:5e:8f:56:7f:
                    e4:5f:e5:c1:af:0f:de:6e:4e:9d:3c:ef:be:d6:00:
                    a3:aa:72:38:80:09:b3:3c:82:6a:72:ed:83:bd:43:
                    59:09:df:1b:57:04:5d:3a:36:d3:dc:c3:b6:6c:e4:
                    f2:2c:55:4c:b4:c4:ff:e4:3b:bb:8d:38:3f:bd:25:
                    6b:1f:dc:7b:d7:96:20:15:f5:05:04:b7:18:2e:2d:
                    17:fb:cc:20:d7:22:11:4e:7a:08:be:09:d7:9c:20:
                    d4:79:7b:37:b3:a4:c6:8c:1c:2c:6c:2b:5a:31:4c:
                    5f:b4:ba:14:4a:50:34:78:ab:9d:f4:f2:04:e4:1a:
                    bc:f2:e8:0b:2b:e9:42:ac:24:dc:09:1f:a9:8f:f6:
                    46:18:9d:96:d3:da:bf:5f:ef:c6:de:12:42:4b:1b:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:68:B1:6F:83:93:AB:86:58:13:14:CE:A4:73:A0:5E:9A:42:8A:90
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/m2ixb4OTq4ZYExTOpHOgXppCipA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:f4:ed:48:89:1a:e8:fe:ae:75:cd:26:ff:1b:7e:a4:4f:
         55:da:6d:58:8f:ba:0a:27:db:5c:c7:32:46:fa:8b:a6:a7:38:
         45:53:7e:9f:28:e9:9f:08:71:ae:96:56:11:b3:19:e3:07:db:
         f0:7f:7d:33:9e:45:c2:31:b0:2d:5c:6f:b1:70:8f:b8:07:26:
         95:e3:65:a7:51:fe:70:06:de:4e:bd:c0:1a:4d:8c:22:d4:ce:
         52:4d:07:ea:ea:03:76:b1:a4:30:fb:fd:8e:32:4a:ca:33:63:
         d8:99:c9:20:9e:c5:c8:e8:93:e3:da:05:b3:06:d0:49:46:7a:
         2c:f7:fd:d4:79:82:d6:1d:a9:c9:eb:14:21:66:08:b4:de:f0:
         07:52:25:e8:15:df:d0:d1:28:59:b8:f9:8f:fe:4b:0b:7a:f4:
         de:ac:2f:7a:9f:4c:a1:4f:26:60:ae:3f:f7:5f:74:14:8e:42:
         52:aa:3e:61:b2:25:e0:35:a5:af:4b:78:2c:02:0f:66:20:f7:
         a8:3f:83:49:6c:c8:75:b1:3d:8b:77:53:2d:b5:91:9e:b8:a8:
         9d:ab:9c:59:5b:d3:06:9e:0c:57:80:cf:3e:a7:6c:ec:ab:dd:
         df:02:91:f3:e3:dd:de:d9:00:43:75:bc:8e:31:f6:eb:ec:04:
         61:d9:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:35 2025 by rpki-client