Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0YFh5d_1p0dSQdPFWWPSMsn1y3c.roa
File:                     0YFh5d_1p0dSQdPFWWPSMsn1y3c.roa (raw, json)
Hash identifier:          bOeV6Tw11w2h5dsKTtG/sTrJ8tPS7+GYNqYTCmjaoSc=
Subject key identifier:   D1:81:61:E5:DF:F5:A7:47:52:41:D3:C5:59:63:D2:32:C9:F5:CB:77
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0YFh5d_1p0dSQdPFWWPSMsn1y3c.roa
Signing time:             Thu 15 Sep 2022 02:53:47 +0000
ROA not before:           Thu 15 Sep 2022 02:53:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        211.76.125.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D18161E5DFF5A7475241D3C55963D232C9F5CB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:a7:d5:b9:9f:cd:ca:09:14:bd:33:e7:31:
                    8f:a9:f4:1d:eb:be:bd:5c:8b:d3:2a:b1:87:79:62:
                    a0:dd:10:ab:bd:70:ea:44:5a:e9:13:21:8c:1e:be:
                    f8:6d:43:b1:85:cf:1b:80:ba:df:08:cc:10:75:eb:
                    a5:31:91:2a:e9:de:00:a6:0e:fd:16:b8:d4:f7:f8:
                    ae:d7:87:ca:cf:2d:25:11:7f:2a:dd:f1:50:87:27:
                    81:cb:7b:96:e3:9c:2a:1e:b7:b9:25:68:1a:75:29:
                    ef:58:54:12:4a:4e:c4:88:d8:2a:c2:69:02:e9:ac:
                    3e:5d:e2:f3:4b:c4:95:e8:53:9b:ab:3d:b7:99:c3:
                    76:b5:25:90:72:3b:88:03:0c:d0:dd:f9:80:d1:b7:
                    1a:71:a9:cc:13:d8:7e:5b:ca:63:55:62:92:94:e2:
                    91:3d:17:e0:11:ed:43:8f:2b:cc:50:77:ab:27:91:
                    87:c7:3d:c4:e1:b4:30:cb:34:4b:fd:57:4b:df:23:
                    05:37:74:66:29:b0:20:14:cc:13:50:80:6b:b0:22:
                    7a:54:f3:fd:b4:34:ec:9d:eb:39:4e:88:fb:aa:f0:
                    ba:cc:5c:46:4f:17:48:a4:2d:9b:26:4a:7d:ab:ba:
                    ad:c7:c2:31:73:ac:93:76:37:b1:2c:04:d2:81:ff:
                    58:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:61:E5:DF:F5:A7:47:52:41:D3:C5:59:63:D2:32:C9:F5:CB:77
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0YFh5d_1p0dSQdPFWWPSMsn1y3c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:c2:e9:a3:55:6d:1b:17:4c:88:1c:b6:78:8c:18:8e:d6:
         5d:0d:df:c9:e0:ac:5a:ea:0a:c7:99:97:78:01:75:11:c0:d6:
         2a:1e:ad:99:e9:56:bc:b7:1a:ad:4d:ce:75:12:c2:f0:e0:6f:
         9c:d5:05:b2:02:b6:5b:34:6c:39:67:75:6f:f4:8f:24:7b:56:
         ce:f3:c1:8a:51:7c:a1:e6:c4:5f:f6:36:6b:39:07:dd:6e:ac:
         78:7f:90:a8:de:45:f8:0a:e4:13:45:81:6f:0b:04:82:90:71:
         44:cc:57:f9:df:9d:70:11:29:35:57:6b:0a:67:d4:18:11:db:
         a1:e8:36:ec:94:4a:6e:31:f5:a4:21:22:46:14:60:25:5a:e7:
         44:7d:4f:08:de:03:6e:69:51:5e:db:6f:8b:15:6f:a9:d3:2c:
         05:7d:d3:65:09:cb:b0:be:65:89:5e:6b:cf:4e:ac:df:ab:ea:
         cd:64:d6:e3:7c:0d:6a:1f:e5:65:61:08:b8:29:6f:35:f2:61:
         6b:5e:fe:06:b9:1f:a5:01:3b:01:ec:0b:3a:b1:64:8c:47:8a:
         18:c3:a7:71:bf:55:6d:cc:b1:4a:c0:af:90:0c:c1:a2:85:25:
         89:8a:d8:24:28:a6:78:15:73:f3:a3:e2:bd:8c:a7:72:a2:53:
         7b:25:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:00 2025 by rpki-client