Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/anUe_sFCylTUD2waIbGREZsGMp4.roa
File:                     anUe_sFCylTUD2waIbGREZsGMp4.roa (raw, json)
Hash identifier:          4o0AX6VMbEMXFvdo6NpaaVqUuZmFU+ru8Q5sWqvpeRw=
Subject key identifier:   6A:75:1E:FE:C1:42:CA:54:D4:0F:6C:1A:21:B1:91:11:9B:06:32:9E
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0788
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/anUe_sFCylTUD2waIbGREZsGMp4.roa
Signing time:             Tue 29 Sep 2020 09:59:59 +0000
ROA not before:           Tue 29 Sep 2020 09:59:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131596
IP address blocks:        123.0.192.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep 29 09:59:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6A751EFEC142CA54D40F6C1A21B191119B06329E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b0:86:e1:e0:e1:2d:0b:c1:6a:e3:d4:74:60:
                    97:c8:b2:86:05:33:c8:49:88:d9:56:40:01:7d:62:
                    eb:c9:fe:d9:4a:f6:55:ad:86:de:6b:a3:d5:28:e1:
                    8f:45:92:87:67:75:4d:50:6f:6e:c3:57:51:6c:1f:
                    46:4c:5d:aa:24:af:4a:d4:5f:df:5d:1e:b8:2e:74:
                    84:62:86:57:3e:cc:d9:82:08:e9:e7:8e:e8:2a:b5:
                    87:f7:96:86:dd:01:c9:0f:06:84:a1:c6:a8:da:a6:
                    b2:10:3d:a0:2d:11:1d:58:d4:5e:3b:84:05:8f:19:
                    65:eb:7c:74:d5:fd:20:05:b8:47:1d:59:16:b1:9a:
                    9f:94:ff:3a:67:23:b7:e3:15:50:0b:fc:a1:c3:44:
                    91:32:e7:8c:90:ca:90:f1:03:b1:c1:60:e0:51:ac:
                    ff:fa:cd:cd:c4:ed:bd:6d:a3:6a:f3:b4:17:09:7e:
                    ea:49:e6:15:a9:f8:ab:8e:f7:cd:ad:9c:dd:fb:27:
                    10:98:97:ee:6f:f9:9c:ed:ae:61:aa:a2:6d:00:8d:
                    53:4e:e0:f5:1a:fc:c4:57:37:9c:db:36:ee:23:df:
                    78:f3:4f:ac:c3:cb:1f:1a:ba:97:f6:df:8a:40:91:
                    3f:bc:8e:22:8c:45:5e:36:d1:9f:d1:c9:16:96:6d:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:75:1E:FE:C1:42:CA:54:D4:0F:6C:1A:21:B1:91:11:9B:06:32:9E
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/anUe_sFCylTUD2waIbGREZsGMp4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         85:85:1f:88:7d:23:74:06:70:e0:5a:ee:07:1e:f6:56:35:cc:
         27:44:5d:8d:f6:48:35:c4:0d:a1:89:df:44:8d:89:d0:cb:0e:
         af:60:eb:2b:34:e3:aa:45:a5:28:3d:07:29:bf:94:a7:6c:4b:
         6d:ae:bf:8f:41:23:58:7e:87:28:a8:bb:6a:0e:6a:25:b4:71:
         2f:f6:38:1f:81:63:3f:97:28:bd:14:de:ec:47:9a:c1:82:f1:
         13:99:e4:59:9d:43:36:3b:b8:46:12:66:67:63:4e:2f:2f:11:
         05:fe:5e:e3:5b:16:70:d3:06:2b:53:a4:84:bc:17:67:fb:04:
         ba:96:12:d0:88:8e:0b:cd:5c:7f:b9:9b:d3:4b:1c:a1:49:69:
         f3:cb:5f:6c:e3:e5:9c:21:9d:39:e8:f5:fc:ff:df:7f:ee:f7:
         fe:a8:f2:5b:7e:f5:d2:1e:49:3c:0c:8e:2d:32:01:8f:9c:e8:
         06:90:6d:f7:d5:3e:90:5b:70:c4:64:a8:ad:7f:65:6e:0f:1e:
         ea:6b:a6:6b:22:0c:da:48:5e:b3:b2:a2:1e:e3:50:ff:27:49:
         b4:10:ba:3e:b5:28:2c:e8:c4:17:a0:49:38:f6:3e:99:6a:33:
         e9:d4:82:4c:4c:19:70:65:d5:01:b2:6f:74:ad:05:91:c8:c1:
         92:08:6e:31
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yMDA5Mjkw
OTU5NTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZBNzUxRUZFQzE0MkNB
NTRENDBGNkMxQTIxQjE5MTExOUIwNjMyOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgsIbh4OEtC8Fq49R0YJfIsoYFM8hJiNlWQAF9YuvJ/tlK9lWt
ht5ro9Uo4Y9FkodndU1Qb27DV1FsH0ZMXaokr0rUX99dHrgudIRihlc+zNmCCOnn
jugqtYf3lobdAckPBoShxqjaprIQPaAtER1Y1F47hAWPGWXrfHTV/SAFuEcdWRax
mp+U/zpnI7fjFVAL/KHDRJEy54yQypDxA7HBYOBRrP/6zc3E7b1to2rztBcJfupJ
5hWp+KuO982tnN37JxCYl+5v+ZztrmGqom0AjVNO4PUa/MRXN5zbNu4j33jzT6zD
yx8aupf234pAkT+8jiKMRV420Z/RyRaWbZAPAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUanUe/sFCylTUD2waIbGREZsGMp4wHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9hblVlX3NGQ3lsVFVEMndhSWJH
UkVac0dNcDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGewDA
MA0GCSqGSIb3DQEBCwUAA4IBAQCFhR+IfSN0BnDgWu4HHvZWNcwnRF2N9kg1xA2h
id9EjYnQyw6vYOsrNOOqRaUoPQcpv5SnbEttrr+PQSNYfocoqLtqDmoltHEv9jgf
gWM/lyi9FN7sR5rBgvETmeRZnUM2O7hGEmZnY04vLxEF/l7jWxZw0wYrU6SEvBdn
+wS6lhLQiI4LzVx/uZvTSxyhSWnzy19s4+WcIZ056PX8/99/7vf+qPJbfvXSHkk8
DI4tMgGPnOgGkG331T6QW3DEZKitf2VuDx7qa6ZrIgzaSF6zsqIe41D/J0m0ELo+
tSgs6MQXoEk49j6ZajPp1IJMTBlwZdUBsm90rQWRyMGSCG4x
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:38 2025 by rpki-client