Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/qgUoEWGcuAr70hIjdxnbAOgHwBQ.roa
File:                     qgUoEWGcuAr70hIjdxnbAOgHwBQ.roa (raw, json)
Hash identifier:          3q7WunEX8Zmz75OjoSbkpb64QW/q1BnFusXQ3aDO+DA=
Subject key identifier:   AA:05:28:11:61:9C:B8:0A:FB:D2:12:23:77:19:DB:00:E8:07:C0:14
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1003
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/qgUoEWGcuAr70hIjdxnbAOgHwBQ.roa
Signing time:             Fri 01 Sep 2023 09:20:44 +0000
ROA not before:           Fri 01 Sep 2023 09:20:44 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     16509
IP address blocks:        103.125.227.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4099 (0x1003)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Sep  1 09:20:44 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=AA052811619CB80AFBD212237719DB00E807C014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4b:25:b4:08:ac:fb:87:c4:c2:91:84:21:d9:
                    fe:2a:6f:75:ef:51:7b:63:09:e2:1a:d9:46:aa:17:
                    f7:14:71:7b:3c:c8:dc:ee:d9:31:69:ed:9a:28:d6:
                    3b:71:dd:e5:6a:e3:f5:d7:f1:5f:c6:a2:54:ca:ab:
                    b0:c0:cd:7b:5b:db:9a:60:ab:63:2b:ee:93:75:9b:
                    66:ae:e2:cf:1c:52:4c:85:e2:f8:fd:17:6f:7b:9f:
                    31:79:55:e4:80:44:36:54:90:bd:80:85:78:9a:7e:
                    c7:93:64:3d:6a:7d:06:da:d6:dd:ff:af:e5:e4:6c:
                    e7:6a:a7:58:68:1c:06:1f:68:d6:2b:d6:1d:8d:e7:
                    36:0a:0a:51:58:3b:9f:2f:ba:9e:08:8f:e3:2b:03:
                    c3:6a:e5:4b:6c:7f:69:ec:af:b0:cc:bd:7b:62:eb:
                    bc:2e:eb:f0:4c:c4:04:a2:8c:7e:fa:9e:24:c7:85:
                    c0:cf:8d:03:7d:83:4c:66:6b:bd:19:e5:fe:77:22:
                    2e:20:bf:01:4b:9d:b6:44:eb:f7:59:58:87:27:c5:
                    de:82:92:d6:c7:d5:9f:31:24:40:0c:3a:89:8a:9a:
                    bf:d1:db:8f:0d:bb:d4:a7:69:15:d5:0d:26:6a:33:
                    16:0d:b7:61:49:19:93:ec:34:bf:bd:85:04:04:0f:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:05:28:11:61:9C:B8:0A:FB:D2:12:23:77:19:DB:00:E8:07:C0:14
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/qgUoEWGcuAr70hIjdxnbAOgHwBQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f3:0d:76:2d:43:69:8f:4b:3f:f6:76:1d:e8:ce:77:ff:b9:
         87:99:39:2d:87:27:76:bd:3d:d7:2c:16:5c:20:8b:8e:a0:b1:
         19:2f:f3:a8:db:a9:4e:f8:cd:35:f2:cb:a2:82:5c:67:fa:5d:
         c3:16:3f:31:b2:21:4e:4c:86:52:64:f7:4c:75:df:13:39:6e:
         16:fb:2a:9c:98:21:44:e9:e4:a0:98:42:5c:3d:a0:67:a4:19:
         fa:26:12:4d:ea:30:3a:66:d0:f0:3c:07:8b:99:eb:47:2f:f4:
         a7:82:da:2e:5c:34:c8:92:27:c6:1f:cb:55:2d:3c:96:1e:d0:
         6a:6b:41:6a:97:da:4b:c2:4b:bd:8f:27:d5:96:d4:20:95:4e:
         0e:14:7c:42:d8:07:59:68:81:ea:65:ee:10:9c:d6:33:75:5d:
         ec:20:e7:89:6a:7b:3d:da:0c:a9:82:58:ce:40:60:05:ab:09:
         b7:18:c9:ec:a8:0e:1b:66:86:84:c5:71:8a:02:a2:14:84:16:
         d1:ac:3e:25:77:4a:eb:bf:e2:78:a5:61:d7:4f:56:cd:14:e0:
         9a:36:4e:80:ab:ef:ea:ba:44:b6:c5:df:89:3c:76:d7:33:5e:
         40:c6:53:dc:a4:a9:34:2d:dd:25:09:6e:81:68:cd:ef:98:96:
         70:d9:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:16 2025 by rpki-client