Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/e2q7a_AwQFfVzvKinfV29_VUICw.roa
File:                     e2q7a_AwQFfVzvKinfV29_VUICw.roa (raw, json)
Hash identifier:          oTubdoQmAe4+qk7JGhQSmpoYaXY+x+ksHWOWgTHwJdA=
Subject key identifier:   7B:6A:BB:6B:F0:30:40:57:D5:CE:F2:A2:9D:F5:76:F7:F5:54:20:2C
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       099B
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/e2q7a_AwQFfVzvKinfV29_VUICw.roa
Signing time:             Wed 29 Sep 2021 02:53:19 +0000
ROA not before:           Wed 29 Sep 2021 02:53:19 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18049
IP address blocks:        58.99.0.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459 (0x99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 29 02:53:19 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7B6ABB6BF0304057D5CEF2A29DF576F7F554202C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:f7:24:1c:d0:fe:86:6e:d4:14:55:92:13:
                    ee:ed:67:aa:ae:dd:c7:d9:69:c3:84:d2:7d:13:3e:
                    1d:8b:a6:c2:fa:e4:d4:31:23:38:41:44:d5:d4:24:
                    00:78:de:e8:4c:3d:c0:cd:3b:a0:a6:ca:53:e4:64:
                    f8:99:fc:4c:8b:30:f2:64:d0:dd:20:ab:3e:5b:40:
                    f9:88:a4:4b:ac:ea:8b:2c:cc:e0:ca:d9:6e:31:0f:
                    30:e8:4f:4b:b8:4d:66:ae:66:75:c6:9b:8a:19:ff:
                    e4:92:18:87:6f:34:b7:6b:a5:2e:dc:55:d8:13:db:
                    0d:1b:a7:6c:3b:77:67:f1:88:41:01:f0:26:ab:51:
                    2d:7c:10:0c:47:d2:df:bd:45:f3:12:e0:14:09:4e:
                    5c:67:09:6f:11:0b:de:0c:fe:b9:4f:f7:b6:2c:75:
                    e2:80:a8:0c:86:ed:80:c0:aa:69:75:34:06:36:61:
                    e2:7a:ff:a2:ee:f0:97:fe:c9:7e:f5:6f:c8:64:9b:
                    e9:57:b3:5b:ba:df:6d:17:ea:e3:5d:07:9c:f7:97:
                    c1:9b:0d:d9:7d:aa:c8:11:de:e4:8d:fc:5a:ac:d7:
                    e1:bb:1e:19:78:1e:a9:8c:2f:55:6d:f8:2c:99:ec:
                    00:9f:d4:ce:2f:68:fd:f4:4d:a6:37:10:c7:ce:b9:
                    fa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6A:BB:6B:F0:30:40:57:D5:CE:F2:A2:9D:F5:76:F7:F5:54:20:2C
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/e2q7a_AwQFfVzvKinfV29_VUICw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.99.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:b5:ec:08:84:27:3d:e9:25:cc:9d:7b:1a:14:2a:68:22:
         93:a6:b4:37:d7:41:50:0f:63:83:24:d9:e1:ac:39:c3:13:7a:
         13:9e:02:56:5a:02:db:d8:1f:b4:26:f7:e7:db:14:26:9b:bc:
         cb:70:7c:e2:56:c0:f6:8c:f3:d0:93:87:0b:36:7c:91:bf:93:
         00:61:18:54:06:0a:5a:80:a6:09:52:a7:e5:3b:67:39:2d:e5:
         b8:6a:ef:13:eb:d8:9e:56:82:47:5d:33:ef:fe:df:7d:85:1c:
         63:5b:ae:1a:ba:ac:40:9f:4c:fd:8a:52:9c:f8:1f:64:a5:b2:
         12:90:1c:bc:75:c9:04:04:e1:e1:e1:42:48:bb:61:02:0e:5f:
         5b:a6:8c:58:18:e7:f8:a3:fb:c2:36:34:f9:09:23:ab:89:88:
         ca:7e:cd:d2:b7:cb:39:44:92:02:67:03:45:81:da:aa:b7:d3:
         c3:5f:c5:43:c0:75:ea:d3:93:21:f4:53:a7:0e:ea:88:a5:f8:
         fb:64:e8:07:9d:9f:b0:9b:c3:21:ea:aa:c7:5c:37:64:33:15:
         e7:ce:e7:14:67:49:70:4d:96:fa:32:5a:34:a4:57:97:0c:ed:
         f1:c0:13:b9:84:a0:3d:63:81:bc:1d:36:05:4f:fb:9a:fe:2a:
         d0:5e:d3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:48 2025 by rpki-client