Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8W0-KRELLVT2NjEwQV23gzNz8IY.roa
File:                     8W0-KRELLVT2NjEwQV23gzNz8IY.roa (raw, json)
Hash identifier:          kb3oQ4UzR5vQS4gBRVbGdy5DhCrqN+UajqOct1WxcxI=
Subject key identifier:   F1:6D:3E:29:11:0B:2D:54:F6:36:31:30:41:5D:B7:83:33:73:F0:86
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C1D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8W0-KRELLVT2NjEwQV23gzNz8IY.roa
Signing time:             Wed 29 Sep 2021 02:47:22 +0000
ROA not before:           Wed 29 Sep 2021 02:47:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.40.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7197 (0x1c1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F16D3E29110B2D54F6363130415DB7833373F086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:55:15:d9:d4:bb:5b:31:bf:88:77:c2:77:
                    99:a1:1d:5d:38:50:b7:0f:12:d3:d4:0e:f7:d9:6f:
                    dc:ae:b6:d5:de:f4:11:46:a2:e3:d4:9d:80:07:fc:
                    d0:67:70:5a:aa:f1:dd:c3:c0:17:3e:3f:03:3e:c7:
                    b1:ae:10:03:e0:6f:89:80:a7:8a:a3:2f:c4:60:6a:
                    9b:f2:23:7b:92:7f:67:1b:08:f2:19:02:24:66:22:
                    ee:a7:b4:92:bb:a2:fa:ca:bd:e8:66:5c:a2:64:97:
                    71:5b:f5:12:9d:6e:17:3b:d1:81:17:9c:cb:08:b4:
                    69:fc:0b:e2:5f:e9:dc:75:05:57:a8:7b:3a:54:08:
                    94:0c:96:99:85:b4:06:2e:51:db:b3:38:01:bc:54:
                    9e:1d:54:ff:da:2f:15:93:ef:b1:62:e8:e9:ab:12:
                    03:a8:0e:42:49:14:56:48:32:25:5f:8f:19:8c:f8:
                    7e:8c:63:3f:f8:36:a4:aa:11:ab:43:f4:cc:30:67:
                    d5:1c:dd:fa:6b:f6:ce:84:09:7e:27:57:a9:3b:e1:
                    35:36:6e:bc:52:62:ee:c6:3e:f8:5c:27:e9:e4:17:
                    d4:0b:1a:64:f3:9b:b5:be:df:80:cb:0f:3c:e6:06:
                    41:7c:17:d1:cc:b5:0e:49:37:fd:9b:95:c3:02:c7:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6D:3E:29:11:0B:2D:54:F6:36:31:30:41:5D:B7:83:33:73:F0:86
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8W0-KRELLVT2NjEwQV23gzNz8IY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:0a:24:fb:de:fa:38:9c:97:ad:49:d9:1f:6d:8e:fc:c8:81:
         88:7e:15:84:59:f0:7b:d7:12:dc:55:5c:c3:b8:cc:a7:a0:2b:
         b0:9f:0b:3d:eb:0b:cb:f2:18:fa:65:fa:03:14:fc:49:e4:dc:
         45:c7:22:1d:90:ac:c4:7c:b9:b2:53:12:9f:1d:26:b0:80:cb:
         2c:3e:62:f1:60:25:22:b1:d8:fd:aa:fc:1e:03:b7:61:a4:9b:
         4f:2f:1f:5d:7f:32:62:b2:78:00:e6:00:f4:a2:e3:af:86:3b:
         d4:9b:7d:e0:bb:c7:24:80:7b:41:3b:31:f2:85:16:bb:26:b1:
         08:92:c8:b1:7c:01:e9:b7:bc:4e:dd:40:85:b1:51:f4:39:f1:
         cb:b4:bf:f4:ba:6d:6e:d4:bc:29:83:ce:09:71:e9:11:fe:ee:
         e4:e2:7a:ef:ee:7b:3a:18:c7:c9:4b:fc:9f:bf:5d:22:54:f2:
         7f:0f:cf:24:03:ac:b3:fa:f9:1f:cc:b1:6d:83:33:74:da:fb:
         b4:98:4a:97:d5:83:bf:c3:6b:bc:7a:19:4d:12:5c:63:51:eb:
         6e:89:a2:64:09:04:77:e3:eb:ab:e9:9f:5c:ef:d4:37:8c:51:
         ac:96:3f:89:d6:55:65:f8:a1:58:f0:e9:36:25:0f:88:ca:9b:
         90:50:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:18 2025 by rpki-client