Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5NPicToozX9JuI36AxsQSImUBSc.roa
File:                     5NPicToozX9JuI36AxsQSImUBSc.roa (raw, json)
Hash identifier:          Ts5O5/jU1pqcGO7Qq+hVx7YiNDWaKRJCkS/a1ezPT80=
Subject key identifier:   E4:D3:E2:71:3A:28:CD:7F:49:B8:8D:FA:03:1B:10:48:89:94:05:27
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B4C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5NPicToozX9JuI36AxsQSImUBSc.roa
Signing time:             Wed 29 Sep 2021 02:46:25 +0000
ROA not before:           Wed 29 Sep 2021 02:46:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.126.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6988 (0x1b4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E4D3E2713A28CD7F49B88DFA031B104889940527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:e5:24:58:d3:b4:39:48:d2:b5:bf:ac:1d:
                    0f:10:29:86:00:75:5e:2b:b7:b3:8a:a7:c5:80:24:
                    30:49:85:4a:27:77:f5:82:2b:8e:46:94:b7:57:a7:
                    fd:60:fc:eb:7f:98:ef:9a:c5:bd:ee:99:8a:1c:7f:
                    ca:98:92:b0:5e:99:43:65:1f:15:90:e8:b2:9d:57:
                    1b:c9:2c:15:5a:1f:00:52:09:da:ca:9c:f6:e2:be:
                    b0:1a:07:23:f3:1e:c5:dc:1b:f2:ff:f7:9b:e5:4b:
                    31:03:b7:47:d6:9c:2e:83:c1:8f:0c:04:10:86:a6:
                    a7:a4:45:92:20:62:57:ef:fe:01:ac:45:78:67:ed:
                    cb:d0:1b:6f:b3:ab:8c:98:ce:f7:a6:6e:9d:d0:d3:
                    2d:f8:ac:b0:9c:ce:be:60:69:4d:05:59:76:57:31:
                    73:2a:f4:5e:f3:ce:e6:96:b1:51:31:66:45:4b:f4:
                    24:fc:cf:74:82:b1:8b:79:80:45:64:80:09:d2:76:
                    17:2f:dc:bb:a1:31:a9:14:b1:1f:0f:7c:14:e2:89:
                    b0:c6:56:26:3e:80:b6:34:2b:01:cd:12:6c:29:df:
                    86:7f:f1:fc:be:1d:0a:0f:a9:18:51:1e:1e:c3:a8:
                    48:d7:f5:97:66:56:66:f5:a0:58:91:e1:73:58:0d:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D3:E2:71:3A:28:CD:7F:49:B8:8D:FA:03:1B:10:48:89:94:05:27
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5NPicToozX9JuI36AxsQSImUBSc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:0a:48:c1:2d:99:a5:b9:98:ab:40:6d:61:77:11:5d:cd:
         cc:32:0b:f2:c1:f1:65:3f:49:bb:c4:8c:19:95:5e:60:e0:d4:
         8b:6d:15:88:2e:46:24:fa:30:0a:b2:e1:4c:49:af:d2:9a:18:
         08:01:54:fb:e0:ef:3a:df:e9:d6:c5:77:13:f3:2f:8a:d3:e8:
         d4:0c:6b:e8:ee:c0:aa:92:27:43:25:e6:c0:01:3e:b0:97:84:
         d7:d9:d5:e4:d1:3f:cd:0d:97:d0:da:f2:39:b9:8a:18:23:b0:
         54:1e:92:2b:9a:82:f5:8e:7a:f0:a1:97:1b:25:c5:07:f6:a7:
         d1:37:46:d9:3e:09:ad:db:c8:ff:7a:6e:e4:bc:01:b7:5b:12:
         87:c0:ad:75:03:9b:29:f5:95:09:e5:a8:17:bc:d4:8b:df:44:
         34:65:7d:0d:5a:d8:4b:39:61:b2:c0:47:cd:49:2d:a9:ad:39:
         78:10:30:c3:90:84:7d:3a:a2:11:73:f4:aa:82:50:62:3b:62:
         b1:3a:b0:4e:d3:3e:35:52:f4:8d:07:0d:40:e8:d2:9a:40:1d:
         26:13:f7:42:97:c9:da:8b:18:a5:4c:52:78:ad:2b:ed:10:19:
         0e:6e:2c:9f:c3:e4:7c:62:4a:c1:6a:0e:c5:67:45:f8:29:cb:
         53:34:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:06 2025 by rpki-client