Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/5Syig5DwmldsMhDc-t6DqXNxPlk.roa
File:                     5Syig5DwmldsMhDc-t6DqXNxPlk.roa (raw, json)
Hash identifier:          jicvnoK6YA713dCnBk1xFx2qY7vwk9LBUl1li5fn6kA=
Subject key identifier:   E5:2C:A2:83:90:F0:9A:57:6C:32:10:DC:FA:DE:83:A9:73:71:3E:59
Certificate issuer:       /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial:       0891
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/5Syig5DwmldsMhDc-t6DqXNxPlk.roa
Signing time:             Sun 07 Feb 2021 13:00:54 +0000
ROA not before:           Sun 07 Feb 2021 13:00:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4781
IP address blocks:        210.63.96.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
        Validity
            Not Before: Feb  7 13:00:54 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E52CA28390F09A576C3210DCFADE83A973713E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:cf:9c:83:ba:06:40:06:6f:47:7d:d8:52:
                    6d:e8:25:0d:f0:a9:71:15:7f:57:4b:d8:ce:70:a7:
                    1a:8b:7a:ec:17:0e:98:7b:61:59:0f:b3:71:8e:29:
                    07:2c:3e:ab:77:e7:a8:ac:22:82:b0:a4:9c:d0:4c:
                    05:75:0a:41:ba:69:dc:c2:cb:87:50:47:b8:da:2e:
                    51:33:ed:5c:36:89:8f:64:23:c6:7d:a6:17:e1:82:
                    d4:ad:e9:72:14:0d:87:e3:5b:cc:6d:81:18:f5:2c:
                    b3:c3:f2:33:53:fa:3c:bd:05:7c:f7:b5:cd:54:15:
                    4b:43:4d:3d:f3:74:0d:63:26:02:f4:f4:0f:fa:5a:
                    ad:b9:47:fe:7c:db:17:4a:2e:5e:94:a8:f7:77:7f:
                    88:71:cf:bd:7e:59:b4:9b:89:e6:d3:15:10:59:ae:
                    2f:1e:9a:42:78:c1:5a:ff:99:69:d2:eb:86:16:cd:
                    16:96:c2:ad:b2:41:bf:32:6d:1a:24:36:4d:a1:e0:
                    11:38:c9:90:5e:ff:cc:87:31:ab:b0:ac:1c:56:a2:
                    de:f4:0a:0d:fb:fd:3d:41:b1:81:17:eb:ad:fc:73:
                    06:f1:eb:ec:b0:67:22:bb:1a:34:23:ba:ee:18:2e:
                    8c:d2:e2:03:b3:8e:03:17:d4:34:0c:08:2c:7a:59:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2C:A2:83:90:F0:9A:57:6C:32:10:DC:FA:DE:83:A9:73:71:3E:59
            X509v3 Authority Key Identifier:
                keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/5Syig5DwmldsMhDc-t6DqXNxPlk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:d0:bf:01:21:af:8e:ac:d7:b2:0d:2f:b4:70:1b:ed:13:83:
         b4:69:f9:e4:50:6f:9f:0a:18:55:ce:4b:f9:55:35:33:e7:82:
         1e:8f:64:c9:45:26:b3:ec:fc:71:5f:dd:83:1b:54:e7:4e:8e:
         82:1a:2b:ea:30:13:b5:a1:a9:66:70:66:06:6c:04:bd:2d:42:
         49:8b:22:dc:b0:08:9c:6d:28:57:30:b9:f1:31:dd:31:a1:99:
         5a:e7:14:82:07:5c:c9:4d:d8:73:8c:79:37:0d:e6:ea:0f:7b:
         95:91:60:27:06:10:e1:4c:01:4f:73:56:b6:52:c4:14:b7:bb:
         7b:8d:e9:20:c6:5d:83:33:bd:15:3c:ce:47:2e:d6:ae:a6:e2:
         8b:37:cb:31:2d:eb:72:f8:14:96:b4:ce:2a:08:36:38:f3:02:
         4a:14:6f:9e:7f:b4:fe:5f:06:11:dd:48:b1:72:a4:78:26:ae:
         18:27:a7:eb:f0:de:e7:c9:dc:85:af:61:05:56:c6:65:5b:84:
         6e:8b:45:97:ea:37:c5:54:fa:28:45:bb:c9:a4:1e:d2:eb:d6:
         40:53:3e:15:5a:c5:5e:6f:fe:a7:d6:bb:f0:fe:0a:dd:e8:2e:
         02:13:ff:18:99:b0:63:8e:c5:fa:62:79:eb:a7:bf:6d:e2:0d:
         48:ce:0e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:34 2025 by rpki-client