Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/WzN6RW9_oBzX4tQXlVBr73Jfra0.roa
File:                     WzN6RW9_oBzX4tQXlVBr73Jfra0.roa (raw, json)
Hash identifier:          eL6aM9KngzgaWT8tQCeTO+FkOHSGbuLvdXdqMKN7CTw=
Subject key identifier:   5B:33:7A:45:6F:7F:A0:1C:D7:E2:D4:17:95:50:6B:EF:72:5F:AD:AD
Certificate issuer:       /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial:       0751
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/WzN6RW9_oBzX4tQXlVBr73Jfra0.roa
Signing time:             Tue 29 Sep 2020 10:00:42 +0000
ROA not before:           Tue 29 Sep 2020 10:00:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17710
IP address blocks:        150.107.64.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
        Validity
            Not Before: Sep 29 10:00:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5B337A456F7FA01CD7E2D41795506BEF725FADAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:fd:25:c8:fc:a0:47:57:97:6b:80:5e:5e:
                    37:b8:cf:ee:e2:90:2e:71:97:d2:fd:26:12:ee:f5:
                    ab:e5:a8:ad:df:24:f9:e6:0d:fc:ad:59:dc:92:01:
                    a4:9f:e0:42:3f:36:ff:ae:a0:e8:33:a5:44:de:0b:
                    e0:33:1c:d7:64:18:3f:86:f0:68:6f:00:e0:d2:1c:
                    93:36:46:ea:38:30:96:15:77:55:37:a2:cc:1f:d1:
                    cf:ff:fd:88:27:b1:a5:b3:58:23:a3:98:0d:08:9d:
                    bb:65:76:af:5a:d5:df:d3:c1:01:2f:08:12:f2:f9:
                    f4:50:9d:e6:08:9f:b8:26:6e:22:62:aa:36:5c:b6:
                    bc:59:a6:83:91:bc:9d:3f:c3:24:61:ff:af:bf:71:
                    0e:71:18:85:a0:79:ae:82:1a:d0:20:16:df:58:ac:
                    99:d8:e9:40:23:54:7d:7c:f2:4b:64:3e:0d:a7:88:
                    bc:90:2d:f7:d1:6f:a1:d7:ee:ac:52:5e:d6:0f:3b:
                    98:cb:cb:22:aa:71:a2:69:50:d9:14:34:4d:0c:08:
                    b8:36:97:f2:4e:1b:02:9f:f8:6b:4b:0a:45:15:54:
                    7a:05:f8:03:48:97:1a:0d:26:8e:20:f6:1b:c0:f3:
                    e8:d0:ba:b0:04:96:e6:56:91:41:8c:f5:97:c1:51:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:7A:45:6F:7F:A0:1C:D7:E2:D4:17:95:50:6B:EF:72:5F:AD:AD
            X509v3 Authority Key Identifier:
                keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/WzN6RW9_oBzX4tQXlVBr73Jfra0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:43:fa:25:0b:99:bd:ec:5a:1c:4a:9f:eb:8f:7a:c6:9f:3d:
         e2:9e:a6:33:13:50:8b:25:14:6e:b3:69:93:15:1c:eb:9a:bb:
         45:de:17:92:81:d1:52:84:df:a7:84:06:27:c8:d6:ff:60:c5:
         87:7e:31:b6:70:7e:f0:f6:a7:4c:26:68:77:a2:3a:a1:07:e6:
         25:27:2b:75:e2:96:de:b5:ad:10:07:a4:c2:a8:3d:21:73:4b:
         32:f4:59:d6:b8:f8:d6:8e:26:44:e6:0e:76:a6:c3:b7:d7:52:
         da:5c:95:9e:92:1b:29:11:dc:0e:e5:47:6c:4a:29:ad:e0:78:
         3c:e1:fc:da:4e:4d:61:60:53:88:99:a2:3a:90:80:d7:23:30:
         37:f1:53:80:7c:22:1b:4b:c9:ef:a4:6c:23:f2:de:34:02:6a:
         c0:04:e8:3f:df:d0:9c:5c:81:00:00:21:90:d9:ab:fa:c7:58:
         c2:2e:ef:56:d9:8f:2f:fb:c8:7b:18:45:6a:81:12:d1:89:43:
         1d:2d:1e:ef:82:b3:61:c0:f7:1d:e1:7b:f5:7d:51:3b:04:82:
         7a:32:c3:8f:37:30:e8:25:f4:aa:3e:7a:60:b0:f4:bb:8a:75:
         73:75:5e:7c:1f:d3:88:e2:b9:05:ab:5a:b5:2e:28:58:c4:89:
         60:bb:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:22 2025 by rpki-client