Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/_VWi8C53xVyOoY6_ouZHKP3Rgts.roa
File:                     _VWi8C53xVyOoY6_ouZHKP3Rgts.roa (raw, json)
Hash identifier:          7V1WukoD5QJDSxqJ/4QA9TeygcLEWEGt/3Mi9l3Exoo=
Subject key identifier:   FD:55:A2:F0:2E:77:C5:5C:8E:A1:8E:BF:A2:E6:47:28:FD:D1:82:DB
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0A7E
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/_VWi8C53xVyOoY6_ouZHKP3Rgts.roa
Signing time:             Thu 15 Sep 2022 02:50:05 +0000
ROA not before:           Thu 15 Sep 2022 02:50:05 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131596
IP address blocks:        61.57.64.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2686 (0xa7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep 15 02:50:05 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FD55A2F02E77C55C8EA18EBFA2E64728FDD182DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:fa:37:14:88:49:49:2f:d3:41:c1:2c:07:
                    3b:57:2e:08:33:74:e5:26:be:c8:90:9f:ed:d7:75:
                    7e:99:a7:47:07:8f:a6:fe:d5:60:ae:85:bd:e7:5c:
                    bd:e1:a5:27:84:2c:88:0b:45:0f:c9:ee:13:91:d5:
                    bd:e0:70:e3:ca:e4:8a:67:6d:90:1f:02:c0:6d:18:
                    af:be:7f:67:eb:8d:d2:27:f7:7f:f3:46:87:2f:0f:
                    3b:4c:61:b1:45:89:6e:5b:d6:22:16:78:6e:b0:a4:
                    07:cc:91:14:58:c6:31:7e:21:3f:d8:d7:11:b0:3d:
                    d1:75:8f:aa:aa:53:a7:58:3f:24:f9:0c:1f:76:4b:
                    c0:07:bc:3a:93:a4:5a:5c:77:1c:dd:47:7a:2e:85:
                    e7:e0:74:af:d3:02:f6:aa:ca:de:54:1d:07:8b:ed:
                    46:30:9c:5e:ee:93:18:3d:b5:a2:0f:aa:c5:7d:55:
                    23:1a:0f:4d:90:77:bf:d3:31:4b:18:5f:70:96:39:
                    96:25:cb:6e:d2:25:fd:fb:6d:7f:60:d8:8f:9a:ac:
                    69:25:8c:14:19:2a:c2:b1:2e:77:05:9f:19:5c:8d:
                    43:ce:bf:d1:3d:ea:90:59:59:71:e0:4e:db:2a:21:
                    49:e7:56:32:ea:24:b1:68:ef:c0:bc:f3:0b:9f:da:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:55:A2:F0:2E:77:C5:5C:8E:A1:8E:BF:A2:E6:47:28:FD:D1:82:DB
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/_VWi8C53xVyOoY6_ouZHKP3Rgts.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.57.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:70:32:35:2e:00:6a:e5:c5:53:5e:92:b0:62:a7:8d:9b:
         d5:b5:ca:48:63:d0:4f:ea:f3:c1:38:04:85:31:83:8f:fa:5a:
         33:be:45:24:21:82:25:24:90:db:9d:74:62:4b:34:f2:e7:f2:
         2c:be:0f:20:0e:af:e5:11:22:e3:92:9f:fa:89:56:cd:49:71:
         4b:a6:54:2d:6c:18:a3:f3:fb:a6:ce:71:cf:59:36:25:07:5d:
         12:89:df:96:c5:2c:9b:93:aa:e1:6d:5f:97:ad:da:67:79:d6:
         24:02:79:00:2c:28:7b:97:bd:80:22:16:ed:05:a4:76:52:8e:
         8c:bc:c8:fd:0e:a5:87:a7:e2:41:15:b8:fd:24:d8:94:21:31:
         88:f7:fb:53:0e:84:57:61:ab:60:86:b4:6c:c1:5b:e6:63:fb:
         b8:c3:4a:f4:da:a6:20:9d:33:b4:19:33:3b:a0:f7:96:49:75:
         6b:ba:56:37:ab:99:44:c8:7f:bd:1e:e2:6b:b9:aa:52:53:c9:
         2e:6b:c7:39:23:67:9d:6e:48:7e:2c:a9:6c:38:59:a2:87:d9:
         24:88:b2:84:d8:b0:13:29:3e:0b:ba:fb:cd:b1:9e:af:e0:b9:
         aa:75:17:14:48:a8:dd:4b:89:60:49:93:4a:30:f2:ff:a2:d6:
         92:68:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:23 2025 by rpki-client