Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/6k3Ga7DlN9Gcjw-HRp_z1w8EU9M.roa
File:                     6k3Ga7DlN9Gcjw-HRp_z1w8EU9M.roa (raw, json)
Hash identifier:          hM/iVM8t9X1dOnSusvuY45OB9Nb3XW7SLuOexNKPEM4=
Subject key identifier:   EA:4D:C6:6B:B0:E5:37:D1:9C:8F:0F:87:46:9F:F3:D7:0F:04:53:D3
Certificate issuer:       /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial:       0778
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/6k3Ga7DlN9Gcjw-HRp_z1w8EU9M.roa
Signing time:             Tue 29 Sep 2020 10:00:20 +0000
ROA not before:           Tue 29 Sep 2020 10:00:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18426
IP address blocks:        203.145.192.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912 (0x778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
        Validity
            Not Before: Sep 29 10:00:20 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EA4DC66BB0E537D19C8F0F87469FF3D70F0453D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:41:e9:ff:0a:b6:f3:2e:2d:dc:b4:09:3b:0c:
                    7a:0c:0f:72:92:6d:5f:b7:a4:63:c3:a2:ce:73:6b:
                    d7:74:74:a7:ee:ad:63:bb:8a:47:3e:9f:cb:82:12:
                    2e:60:4d:85:13:ea:9d:81:1e:f9:62:4f:85:ba:fb:
                    e0:91:37:da:5e:af:2e:0d:db:5d:6b:9b:78:3e:56:
                    9a:81:40:8f:37:a7:80:b9:3d:81:1a:13:ad:73:91:
                    f6:6a:1a:90:5c:2d:0c:a7:0f:e5:5a:f3:49:eb:e2:
                    8c:c8:e6:f8:87:8a:0e:16:b3:4c:88:80:f4:96:47:
                    5d:60:fd:bd:52:e4:ad:7f:37:37:ef:3c:44:bf:09:
                    41:61:fc:f6:50:9a:55:3c:66:7f:60:95:fc:89:42:
                    72:4e:71:13:19:8d:cb:54:f3:50:3c:52:4d:5b:e7:
                    2d:ad:62:40:c7:17:86:f7:50:4d:96:ec:bd:00:a2:
                    3f:ab:09:15:a4:d9:74:46:70:98:b1:67:6d:d8:c9:
                    7c:e2:05:b0:a0:33:a3:c7:a0:d9:ea:cb:e3:4e:37:
                    b9:c7:6f:e4:33:55:18:24:f0:0f:40:b8:27:53:6f:
                    2f:4e:b6:82:69:7b:b5:48:9d:6a:da:e7:be:ab:13:
                    cc:67:8b:c6:65:05:4d:e9:08:34:8b:18:20:ba:31:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4D:C6:6B:B0:E5:37:D1:9C:8F:0F:87:46:9F:F3:D7:0F:04:53:D3
            X509v3 Authority Key Identifier:
                keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/6k3Ga7DlN9Gcjw-HRp_z1w8EU9M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:8a:24:2f:a3:8d:57:fd:89:6b:15:e0:53:20:f5:05:27:
         41:ec:fe:bc:4b:ce:44:5e:9b:b5:1d:6d:55:92:e0:3f:9d:2a:
         90:f5:53:e8:b1:19:49:48:db:2c:8a:cc:70:38:51:d0:1c:30:
         64:56:4f:b3:0c:37:47:b7:ee:6d:80:10:af:91:33:58:11:3d:
         2f:96:30:4d:b8:1f:d5:aa:ea:90:9b:bd:eb:c4:df:b9:b8:c3:
         0b:48:23:ac:57:b9:9b:c4:d7:c0:b8:3c:0e:3c:c1:91:b3:69:
         27:e2:77:71:13:8f:8f:de:64:f9:83:a5:d9:ba:36:30:e5:25:
         09:c1:47:db:79:20:c4:45:fd:f5:bf:c8:db:d3:fa:c9:92:32:
         b8:cd:3b:0c:a4:26:32:5e:b6:ef:bb:c7:1b:f5:ec:d9:09:89:
         fd:e4:76:44:4d:e7:0c:8a:39:28:4e:24:f7:3b:f3:0f:a4:a8:
         17:9a:b6:19:db:ea:af:4e:e2:8f:73:e6:6e:05:57:7a:0e:28:
         76:7f:8c:09:64:52:e2:8b:57:5e:01:f6:fc:61:5f:e6:cb:8a:
         55:7f:26:34:0d:4c:11:97:f3:4f:4c:ce:8e:b8:b9:5f:6b:9a:
         3d:db:6f:dd:b2:07:4d:85:f3:ca:06:0e:34:38:c3:7b:3f:a4:
         d3:3d:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:31 2025 by rpki-client