Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/9kuBAgo1WRLiclv_BUb9fsi2zY4.roa
File:                     9kuBAgo1WRLiclv_BUb9fsi2zY4.roa (raw, json)
Hash identifier:          Zl6h42+gsceNaxXMZfepkksDcWs7oj+sQqM0CZKMfg8=
Subject key identifier:   F6:4B:81:02:0A:35:59:12:E2:72:5B:FF:05:46:FD:7E:C8:B6:CD:8E
Certificate issuer:       /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial:       5714
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/9kuBAgo1WRLiclv_BUb9fsi2zY4.roa
Signing time:             Thu 15 Sep 2022 02:47:40 +0000
ROA not before:           Thu 15 Sep 2022 02:47:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38851
IP address blocks:        103.46.190.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22292 (0x5714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
        Validity
            Not Before: Sep 15 02:47:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F64B81020A355912E2725BFF0546FD7EC8B6CD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:dc:44:0e:fd:24:55:85:00:42:88:24:48:
                    fb:e7:b4:6a:82:ee:91:1c:0f:04:36:a7:43:dc:8b:
                    67:b4:60:be:ad:45:69:b6:df:df:64:20:9f:10:81:
                    07:06:87:14:24:72:4b:a5:6c:d1:eb:81:f3:5b:03:
                    be:98:1b:3e:01:c6:f1:ba:cd:d8:25:24:7d:42:5a:
                    87:b3:6c:bc:fe:ae:98:40:6d:bb:b3:96:7a:e4:21:
                    45:a5:63:da:1f:83:c2:ca:9d:9f:6c:99:e5:0d:3a:
                    a0:3f:1d:f1:a7:f8:40:44:e8:ca:4a:28:50:1e:bf:
                    93:5e:58:63:bc:d4:2f:d3:88:28:67:ce:57:43:95:
                    4a:c5:8b:51:f6:9e:e3:87:a5:1d:69:d6:f9:9f:3a:
                    77:c4:c4:2a:a4:09:d0:74:df:11:5c:ec:de:d3:86:
                    30:b1:6c:a9:26:28:f8:c7:bc:a9:99:32:24:a8:62:
                    25:83:9f:bc:7a:c6:f2:d9:ca:0c:f1:80:7b:00:ae:
                    22:0c:99:c1:f3:b9:bc:1f:76:0c:ad:7d:42:20:34:
                    79:67:77:81:a0:61:1d:21:99:fe:0d:f9:6a:97:7c:
                    bf:33:33:34:d7:7e:63:5a:52:87:01:54:1f:31:af:
                    b4:46:32:52:15:5f:18:71:76:14:fd:51:2c:64:5c:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4B:81:02:0A:35:59:12:E2:72:5B:FF:05:46:FD:7E:C8:B6:CD:8E
            X509v3 Authority Key Identifier:
                keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/9kuBAgo1WRLiclv_BUb9fsi2zY4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:55:2f:f5:be:13:3b:01:01:7c:35:2a:1d:3e:b6:cb:e4:41:
         2a:d4:60:9b:cb:4f:c1:2b:dd:28:98:0e:a8:26:fa:ea:ae:aa:
         1b:7a:0d:f0:23:2a:dc:c2:65:49:c3:78:de:c8:0b:aa:90:27:
         41:be:e5:0b:1d:06:6a:b8:3e:af:47:5a:c6:6d:20:ba:d4:bb:
         5e:06:d8:f5:33:f3:df:20:4e:85:4e:cc:06:23:8d:d4:75:e4:
         7c:2c:43:8f:fa:07:ff:6c:77:f5:39:b0:ce:e9:a8:38:ca:fd:
         ca:f3:7b:71:b5:90:39:a1:c0:3a:36:09:be:25:d2:e7:c7:cf:
         3d:aa:30:5a:a0:60:f3:11:50:7d:dc:2e:a3:19:61:29:69:b7:
         14:d2:87:f9:bd:55:75:bf:56:9f:4c:7e:78:5e:0a:89:03:b4:
         72:fe:0b:38:84:cf:86:f8:0f:3e:20:c2:3d:c5:66:68:8c:30:
         b8:b3:54:af:47:b9:04:db:2e:1e:e7:db:fb:bb:2d:26:89:36:
         93:53:50:b3:d8:f5:79:fd:9d:a6:00:19:b4:32:3c:95:4c:0f:
         96:42:9d:69:09:b3:dd:78:ef:2f:be:98:e4:73:8a:52:55:cf:
         74:df:42:f6:d2:1b:11:2f:87:19:e2:82:75:a4:b2:42:be:09:
         c5:a2:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:54 2025 by rpki-client