Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/31_OL0X6FrGNyzr-VmIrbLiTltU.roa
File:                     31_OL0X6FrGNyzr-VmIrbLiTltU.roa (raw, json)
Hash identifier:          QHcHjhwd0mz9jfc+NW3Nnx/kdAX9isryY5cLF3KzX/w=
Subject key identifier:   DF:5F:CE:2F:45:FA:16:B1:8D:CB:3A:FE:56:62:2B:6C:B8:93:96:D5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CA3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/31_OL0X6FrGNyzr-VmIrbLiTltU.roa
Signing time:             Wed 29 Sep 2021 02:48:00 +0000
ROA not before:           Wed 29 Sep 2021 02:48:00 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.137.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7331 (0x1ca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:00 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DF5FCE2F45FA16B18DCB3AFE56622B6CB89396D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:6a:a4:60:3a:4e:e1:f2:38:9f:7e:c6:00:
                    65:dd:3a:74:87:a3:d5:04:6b:a8:9f:8d:bb:0c:e0:
                    3a:7c:6b:d6:01:9d:f2:1a:4d:fc:46:c4:90:13:58:
                    38:28:28:67:85:14:7d:15:d6:b5:e2:5a:c5:e1:f1:
                    36:72:11:14:f9:fd:19:cb:57:bc:73:32:7d:c0:ae:
                    71:6f:62:4a:29:1d:ff:9c:64:e2:61:d6:25:24:ac:
                    b6:dd:30:26:10:93:44:6e:2e:0e:ea:28:bf:cc:6a:
                    53:9c:63:7c:80:8d:54:65:75:13:71:39:21:96:ae:
                    63:2f:f8:ea:ae:df:9e:1a:54:98:5e:9a:4e:c1:57:
                    a8:da:7d:fc:82:4c:e0:e1:2f:7a:97:5b:01:9a:d6:
                    d3:17:66:c7:59:bb:f2:bf:b9:af:fa:aa:b8:95:99:
                    b8:7c:31:6f:88:fa:2a:ab:9c:93:44:c3:ed:39:9e:
                    2e:04:05:51:51:43:0d:33:b7:be:56:5d:d1:93:ee:
                    4f:98:8f:5d:01:1a:1e:07:2b:ce:dd:cd:36:d0:9a:
                    4f:88:e3:77:bd:ce:e4:2b:2f:9a:db:75:46:d1:13:
                    6a:6c:71:fb:89:73:1d:5c:6b:6a:55:27:29:d2:75:
                    b1:d9:53:6f:46:14:11:93:b9:8f:18:07:42:8c:6e:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5F:CE:2F:45:FA:16:B1:8D:CB:3A:FE:56:62:2B:6C:B8:93:96:D5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/31_OL0X6FrGNyzr-VmIrbLiTltU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:90:e4:5e:d6:b1:cb:65:56:21:08:c5:fe:47:97:3d:8e:ef:
         13:4b:c2:e3:6f:1c:63:48:aa:ea:ca:1f:d8:31:a1:12:20:7c:
         58:c1:90:ff:5d:df:1f:3e:e8:b8:45:45:61:13:1e:2d:f6:f4:
         98:0e:7a:c1:08:08:9e:c5:3e:7e:11:6c:42:7e:6e:b0:8f:4a:
         50:0b:c9:02:1a:76:be:b7:19:f5:d3:01:bc:ad:5c:3c:1a:7d:
         ce:57:3d:5f:ae:53:fc:5b:be:c2:23:b7:98:87:a5:d4:ed:5d:
         4b:00:94:9e:c5:db:6a:3b:70:98:97:cc:2b:71:6b:08:9e:3c:
         6a:40:90:92:45:2e:92:2c:5b:05:28:4a:ce:fe:f1:bc:b8:f8:
         81:13:e5:28:a0:7e:4c:a8:11:f4:a5:86:c0:fc:b5:db:95:2e:
         93:bb:4e:3f:a0:61:59:27:7a:02:3a:c3:30:aa:56:c8:65:ec:
         9a:05:d3:9f:65:88:e8:2d:5c:07:79:86:4b:e4:e5:24:9e:42:
         c8:ea:1a:50:6c:a5:ff:5e:a2:fa:7d:b6:9d:87:d7:00:42:8a:
         ee:af:b0:e1:15:84:53:f3:67:87:51:09:e8:65:50:24:01:f3:
         d0:25:35:2e:5b:1d:bc:85:22:fd:bf:d2:d4:b5:c8:35:c0:bd:
         8c:e5:15:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:45 2025 by rpki-client