Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/yJ-QqqR_180jHTDzlq5hPTN2QBc.roa
File:                     yJ-QqqR_180jHTDzlq5hPTN2QBc.roa (raw, json)
Hash identifier:          4UHD7JF69BsEpXl2QsmR5xsx4O0NOjFARgwvd3uE3K8=
Subject key identifier:   C8:9F:90:AA:A4:7F:D7:CD:23:1D:30:F3:96:AE:61:3D:33:76:40:17
Certificate issuer:       /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial:       0744
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/yJ-QqqR_180jHTDzlq5hPTN2QBc.roa
Signing time:             Tue 29 Sep 2020 10:00:28 +0000
ROA not before:           Tue 29 Sep 2020 10:00:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4781
IP address blocks:        210.63.101.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
        Validity
            Not Before: Sep 29 10:00:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C89F90AAA47FD7CD231D30F396AE613D33764017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:b5:25:ff:2f:b6:05:e0:10:0e:2d:3a:c0:
                    b7:04:5f:4f:23:19:9e:d4:6e:08:f0:f8:c8:80:31:
                    de:8f:c9:d1:9f:35:be:49:22:70:f5:eb:db:67:eb:
                    d0:7b:25:d2:ae:e2:1b:84:3d:ea:3d:06:07:c1:eb:
                    18:ca:05:4c:ba:e2:d8:c1:cb:15:9c:e6:97:e0:74:
                    6e:43:38:8d:7f:64:a9:19:cd:ff:91:94:b3:0f:10:
                    05:d8:3a:aa:a7:d8:67:12:c6:af:c3:f6:a5:ea:4c:
                    14:a0:2e:73:ad:45:c8:50:d0:e2:83:d8:ac:59:80:
                    97:f6:a3:00:b9:e0:9e:01:f3:29:95:39:e2:e0:af:
                    dd:c7:56:b4:a2:07:26:ea:43:0b:2c:5f:f9:d2:38:
                    5b:f6:95:b2:fc:a4:f3:49:b7:3e:cb:dd:33:04:77:
                    37:55:df:f9:f3:1e:ee:86:1c:1b:1a:01:1f:3f:5b:
                    6e:94:d2:db:0d:95:0a:15:b8:9a:34:bd:4b:91:ee:
                    87:e9:e0:73:35:d4:54:c6:f5:37:a4:cd:d4:56:a3:
                    d4:8f:15:b5:a5:85:f8:55:cc:9a:ed:95:8d:18:f1:
                    71:0b:75:7a:cb:90:d4:9f:9e:b3:7c:f2:ff:c2:df:
                    29:6a:0b:a0:dd:19:c2:f5:bb:55:27:56:45:c6:b9:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9F:90:AA:A4:7F:D7:CD:23:1D:30:F3:96:AE:61:3D:33:76:40:17
            X509v3 Authority Key Identifier:
                keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/yJ-QqqR_180jHTDzlq5hPTN2QBc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:a2:b1:36:6e:17:f4:48:78:bc:25:bb:dd:11:a3:1f:a3:
         b5:94:d8:b1:2b:df:54:b9:56:8f:93:fc:43:fc:28:4f:ee:9b:
         55:be:b1:34:8a:55:7c:c9:f3:a7:dd:df:c5:a2:fa:bc:c5:a9:
         f4:ff:3c:c0:ad:58:01:ae:cd:a2:c7:31:33:1f:76:f5:18:cc:
         a6:10:a7:9d:c3:b7:c8:88:0b:d6:c6:4a:74:43:32:6d:a8:5a:
         3e:93:cf:b9:db:7b:4d:38:4f:ef:d8:db:56:60:15:95:24:3d:
         70:bb:70:50:fb:c0:af:df:a9:25:fb:88:0e:f0:62:80:2b:0f:
         02:1e:bd:75:47:15:0d:2f:f9:3b:11:18:a9:5e:28:6d:e4:cb:
         76:8a:bd:48:4b:0c:a3:c3:d6:36:7c:c2:b7:86:61:34:37:6b:
         80:6d:81:5c:87:fc:e5:57:e8:32:40:f2:47:de:5e:af:08:ab:
         ab:1b:96:11:ed:43:e6:af:dd:25:31:b2:ca:18:56:b0:8d:dc:
         51:8b:e4:26:33:5c:78:9d:99:2e:ef:6f:d5:4f:17:34:b6:9d:
         9b:0e:47:61:2b:ca:10:e3:ee:a2:fc:06:5b:7f:54:03:94:c1:
         44:97:58:b9:19:ea:1f:dd:82:98:ff:48:23:94:ac:29:0c:b5:
         29:06:33:8d
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTI5
QjYwNkRCODYyODNCRDRBMDhBRjdFQjMzRUYzOEEyNTY2MzFCQjAeFw0yMDA5Mjkx
MDAwMjhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM4OUY5MEFBQTQ3RkQ3
Q0QyMzFEMzBGMzk2QUU2MTNEMzM3NjQwMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAF7Ul/y+2BeAQDi06wLcEX08jGZ7Ubgjw+MiAMd6PydGfNb5J
InD169tn69B7JdKu4huEPeo9BgfB6xjKBUy64tjByxWc5pfgdG5DOI1/ZKkZzf+R
lLMPEAXYOqqn2GcSxq/D9qXqTBSgLnOtRchQ0OKD2KxZgJf2owC54J4B8ymVOeLg
r93HVrSiBybqQwssX/nSOFv2lbL8pPNJtz7L3TMEdzdV3/nzHu6GHBsaAR8/W26U
0tsNlQoVuJo0vUuR7ofp4HM11FTG9TekzdRWo9SPFbWlhfhVzJrtlY0Y8XELdXrL
kNSfnrN88v/C3ylqC6DdGcL1u1UnVkXGuWPTAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUyJ+QqqR/180jHTDzlq5hPTN2QBcwHwYDVR0jBBgwFoAUUptgbbhig71KCK9+
sz7ziiVmMbswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEFHSUMv
VXB0Z2JiaGlnNzFLQ0s5LXN6N3ppaVZtTWJzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9VcHRnYmJoaWc3MUtDSzktc3o3emlpVm1NYnMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QQUdJQy95Si1RcXFSXzE4MGpIVER6bHE1
aFBUTjJRQmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0j9l
MA0GCSqGSIb3DQEBCwUAA4IBAQBn1KKxNm4X9Eh4vCW73RGjH6O1lNixK99UuVaP
k/xD/ChP7ptVvrE0ilV8yfOn3d/Fovq8xan0/zzArVgBrs2ixzEzH3b1GMymEKed
w7fIiAvWxkp0QzJtqFo+k8+523tNOE/v2NtWYBWVJD1wu3BQ+8Cv36kl+4gO8GKA
Kw8CHr11RxUNL/k7ERipXiht5Mt2ir1ISwyjw9Y2fMK3hmE0N2uAbYFch/zlV+gy
QPJH3l6vCKurG5YR7UPmr90lMbLKGFawjdxRi+QmM1x4nZku72/VTxc0tp2bDkdh
K8oQ4+6i/AZbf1QDlMFEl1i5Geof3YKY/0gjlKwpDLUpBjON
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:28 2025 by rpki-client