Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-5JnN3YSCRcvitengUOwQvYE-mE.roa
File:                     -5JnN3YSCRcvitengUOwQvYE-mE.roa (raw, json)
Hash identifier:          sszURz/Sm4/89XvSvhPHNu0+0/BHsCOn4CDEJZfrsJU=
Subject key identifier:   FB:92:67:37:76:12:09:17:2F:8A:D7:A7:81:43:B0:42:F6:04:FA:61
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-5JnN3YSCRcvitengUOwQvYE-mE.roa
Signing time:             Thu 15 Sep 2022 02:52:37 +0000
ROA not before:           Thu 15 Sep 2022 02:52:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        211.76.115.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FB926737761209172F8AD7A78143B042F604FA61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:a5:50:08:a2:bf:61:05:5b:11:98:bc:1d:
                    02:96:ca:db:4b:54:50:c7:8c:f1:11:f1:ac:47:85:
                    ad:4b:6d:61:78:8a:ac:76:6e:67:15:b9:a1:55:0b:
                    3f:90:37:f2:b8:90:cd:ce:cf:54:a0:3a:03:fb:3a:
                    d2:00:dd:c8:2c:1a:3a:4d:68:11:b1:b1:32:0a:aa:
                    8b:62:c9:7e:48:2f:6c:69:0c:f1:7a:22:ba:c5:4e:
                    a2:5f:c3:1d:ab:f1:7c:29:0e:7a:ee:cb:68:30:56:
                    00:49:ba:8f:eb:14:ff:f4:3c:44:21:f4:f5:14:23:
                    3c:57:d6:6d:a9:37:7e:e2:3a:e7:18:8d:dd:c2:fb:
                    b2:dd:cb:c3:d9:9d:76:b3:5e:7c:35:b3:73:19:b1:
                    ae:2a:b3:27:d4:72:89:6d:de:86:63:56:ef:98:3f:
                    6d:2d:fe:84:4a:46:d2:64:fa:b2:43:7f:71:b7:19:
                    6b:2b:1f:1e:45:7a:ae:73:3b:4a:52:5d:c1:80:79:
                    7f:f2:65:bc:13:2e:7c:98:c9:e9:9e:1b:8b:d3:35:
                    b7:7d:43:fc:51:8d:6c:f7:b9:d9:bb:2a:dd:ef:2a:
                    e0:53:51:59:83:07:b4:33:8d:88:b7:f8:a9:5f:9a:
                    f4:0d:73:8b:02:b6:c4:5a:ac:5e:a2:f2:d8:15:f9:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:92:67:37:76:12:09:17:2F:8A:D7:A7:81:43:B0:42:F6:04:FA:61
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-5JnN3YSCRcvitengUOwQvYE-mE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:cc:c7:1f:64:f5:4e:48:bb:09:b9:18:e0:d3:70:c2:c1:c8:
         8c:00:1e:ca:26:8b:b5:83:7a:84:0a:0f:34:00:c9:35:dc:71:
         90:6f:c0:9c:3b:3c:6a:81:a1:aa:35:e5:05:8d:9c:ef:02:0e:
         02:c6:06:c4:da:38:40:4f:9b:75:ce:cf:2f:01:3f:ad:1d:cf:
         7e:52:57:89:fd:24:9b:ef:6a:cb:37:3e:7f:66:90:c6:b4:8c:
         d1:03:b0:c9:bb:65:d9:69:ae:e5:d1:d1:cf:51:e4:50:a2:15:
         c3:33:9d:b4:04:01:e4:d3:1f:05:7c:10:67:65:63:c7:5b:35:
         e6:84:7b:45:2e:ef:6d:3e:fd:a7:73:9a:b1:38:1d:07:21:21:
         ea:e2:ac:3e:83:78:1d:97:d7:dd:05:3c:5c:8d:1d:e1:d9:0c:
         77:b5:6d:6b:77:0c:aa:14:b8:62:b8:2d:16:6b:9f:eb:d7:44:
         ed:56:c2:6a:9c:71:96:0a:81:d8:27:6c:7e:6f:e6:36:d1:5e:
         bf:b6:de:14:ca:4b:9b:bf:4a:b8:cc:c1:f3:22:93:3d:44:13:
         db:8a:a3:a3:37:82:3a:43:47:26:7c:54:6c:90:41:5b:ae:41:
         d1:98:77:ed:d1:a3:3c:64:94:f1:8a:ea:be:a7:9f:44:dd:d2:
         24:1f:8d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:43 2025 by rpki-client