Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TGM/ZyeUlamp_doUlY6MFLeFghflyTg.roa
File:                     ZyeUlamp_doUlY6MFLeFghflyTg.roa (raw, json)
Hash identifier:          XxzPAsiPGC+0hQ6ewuva3X9VWs2sqx8rKApZxAqqlso=
Subject key identifier:   67:27:94:95:A9:A9:FD:DA:14:95:8E:8C:14:B7:85:82:17:E5:C9:38
Certificate issuer:       /CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
Certificate serial:       03
Authority key identifier: 9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/ZyeUlamp_doUlY6MFLeFghflyTg.roa
Signing time:             Fri 28 Jan 2022 03:51:21 +0000
ROA not before:           Fri 28 Jan 2022 03:51:21 +0000
ROA not after:            Sat 28 Jan 2023 03:36:51 +0000
asID:                     131642
IP address blocks:        103.180.20.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B60696D68773AE2E532F0CD5D10FDC0C8273EA5
        Validity
            Not Before: Jan 28 03:51:21 2022 GMT
            Not After : Jan 28 03:36:51 2023 GMT
        Subject: CN=67279495A9A9FDDA14958E8C14B7858217E5C938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b2:65:f6:35:1d:b0:e7:a4:93:0f:9a:93:cd:
                    72:ed:36:19:97:f9:64:48:ba:85:b1:8e:5a:1c:e6:
                    fc:78:f6:43:bd:e6:8d:5a:62:fa:41:c2:03:7d:f5:
                    cb:c9:6b:da:01:18:34:cd:43:bd:c2:a7:d2:da:d9:
                    54:e3:2d:90:88:f6:06:3d:bc:25:d8:b1:96:fd:3e:
                    76:c4:a6:f7:59:70:b6:bc:b9:ba:33:06:c2:33:44:
                    52:76:d0:1f:76:74:67:ff:89:51:07:b0:bb:d2:51:
                    7d:93:e7:d8:9f:76:72:73:28:e7:67:bb:15:73:15:
                    4f:27:e2:51:02:15:83:0d:4f:48:63:79:cd:25:76:
                    f3:fe:ca:9c:fa:17:fd:af:04:78:32:13:93:05:79:
                    2f:55:04:76:a6:04:36:ab:30:67:bb:a4:ef:b4:d9:
                    ea:64:b2:7f:fe:b1:11:e4:88:67:31:4d:40:2c:ba:
                    f3:9a:d2:ad:df:94:bf:ad:64:f6:99:56:20:11:40:
                    52:38:4d:71:c0:9a:e1:fa:75:08:cb:b8:f4:ad:84:
                    f4:6f:13:5c:34:14:2e:a8:a1:fc:db:3e:75:ec:59:
                    b0:1e:12:96:ea:3a:39:08:6f:7d:dd:09:6c:9e:8e:
                    80:f0:ff:77:03:68:ba:63:ea:00:5f:f0:51:73:cc:
                    61:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:27:94:95:A9:A9:FD:DA:14:95:8E:8C:14:B7:85:82:17:E5:C9:38
            X509v3 Authority Key Identifier:
                keyid:9B:60:69:6D:68:77:3A:E2:E5:32:F0:CD:5D:10:FD:C0:C8:27:3E:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/m2BpbWh3OuLlMvDNXRD9wMgnPqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m2BpbWh3OuLlMvDNXRD9wMgnPqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TGM/ZyeUlamp_doUlY6MFLeFghflyTg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:8a:4d:9d:ba:4d:04:f6:74:44:80:0e:c5:3f:a7:1e:9e:3c:
         04:57:5a:bb:0d:39:2b:e1:42:44:2c:89:bd:f2:81:af:f6:e3:
         4a:ee:50:f1:04:d9:8e:6c:df:f0:ce:66:21:09:0b:89:b1:fe:
         db:18:00:0f:94:ba:23:4d:65:8f:ca:5d:11:6c:ef:53:b8:4a:
         70:37:53:3d:a3:f0:08:46:7b:87:b7:fe:7c:14:84:3f:99:86:
         f0:ad:f7:b5:d1:8b:d4:56:9d:3d:ba:5a:5f:7c:a4:73:7f:d2:
         f9:fb:b1:08:49:d1:e9:15:9c:85:d4:c1:4a:7c:83:5b:34:e7:
         7b:2d:fd:4d:0f:27:db:b6:ff:7e:af:68:48:c3:b9:a2:a3:42:
         50:b3:7f:95:25:2d:f9:5c:02:dd:08:53:c9:8d:df:31:02:72:
         95:6e:4c:3f:5a:2d:6d:88:fa:7d:36:d6:31:5d:eb:ba:40:b2:
         fe:e0:d4:76:94:b8:01:8d:c4:3b:aa:49:85:81:f1:91:20:7a:
         f7:ea:2c:88:06:c7:b2:e3:95:60:b8:0e:d8:d5:1e:3a:8b:9a:
         a7:4f:a9:20:70:99:35:3f:32:4f:f0:28:6d:12:b5:6a:fb:c2:
         0d:c4:b4:01:56:4d:a3:96:36:89:7b:90:67:95:17:d3:12:be:
         07:43:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:44 2025 by rpki-client