Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8o4sP8MbEYAm9uhgrANudM6x8IE.roa
File:                     8o4sP8MbEYAm9uhgrANudM6x8IE.roa (raw, json)
Hash identifier:          /9tKftLlL5MG+wWa38RvOm16gWkZh3xUZCJJdxoVe6Q=
Subject key identifier:   F2:8E:2C:3F:C3:1B:11:80:26:F6:E8:60:AC:03:6E:74:CE:B1:F0:81
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C77
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8o4sP8MbEYAm9uhgrANudM6x8IE.roa
Signing time:             Wed 29 Sep 2021 02:47:48 +0000
ROA not before:           Wed 29 Sep 2021 02:47:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.254.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7287 (0x1c77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:48 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F28E2C3FC31B118026F6E860AC036E74CEB1F081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:7a:65:ab:97:f4:d3:5c:1b:34:73:d2:90:
                    dc:41:45:90:86:50:a2:e5:0d:86:ac:1e:04:a9:91:
                    36:70:80:e7:9b:f7:2b:d5:d4:74:df:2b:c8:26:a7:
                    0d:74:63:55:ca:4a:c9:06:df:04:f4:c2:ce:23:c8:
                    45:0c:00:54:09:94:a7:6a:2e:54:ff:23:9a:7a:26:
                    9e:f6:6d:3b:01:82:57:a8:5b:2a:21:e9:c7:47:f0:
                    c2:bf:50:f2:5b:f2:53:7d:8d:55:50:5d:cf:c9:84:
                    d0:6d:fb:04:48:43:f6:26:35:41:62:75:1a:b1:96:
                    4f:96:d8:97:66:ef:fb:13:27:00:d6:5a:04:15:63:
                    4f:28:66:20:01:ae:95:b0:e2:1b:cc:47:f6:e5:25:
                    4f:18:c1:52:62:0b:f7:02:67:3a:7f:fd:6c:ac:c1:
                    1c:fa:5a:cf:0c:71:6e:ea:39:ff:81:f1:13:c3:01:
                    7b:c2:17:48:56:44:25:a0:e5:33:12:5f:51:5f:a4:
                    ca:42:59:4f:ba:19:73:9c:da:b9:ac:f7:e4:aa:6a:
                    5f:99:08:fb:68:6d:63:3e:f5:76:45:74:3c:70:4b:
                    cf:c6:48:ae:6f:bf:d7:fe:93:57:a2:1e:36:bb:b8:
                    34:cc:a7:37:83:b7:4f:e4:a1:e5:6f:b5:2c:47:84:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8E:2C:3F:C3:1B:11:80:26:F6:E8:60:AC:03:6E:74:CE:B1:F0:81
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8o4sP8MbEYAm9uhgrANudM6x8IE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:5d:e6:60:8a:ae:2b:17:25:14:4e:e9:14:ba:d5:60:46:f9:
         67:34:36:e1:a5:aa:f5:3d:65:71:0b:4c:49:2c:32:c3:ce:16:
         91:08:85:1d:7b:d4:00:4d:f0:42:b0:5d:eb:b1:ee:d4:f2:2f:
         e0:e7:35:16:39:cc:37:a3:01:ab:9c:e8:fa:37:13:ef:40:50:
         a8:7d:9e:bb:d4:dd:62:f3:09:09:88:db:79:18:36:0a:5c:3f:
         6f:1a:d6:f4:fe:88:fc:76:0e:49:1e:28:6c:ec:51:8f:61:1e:
         0f:90:34:2c:a8:62:59:31:70:90:4e:75:05:9a:ef:3b:d1:9c:
         7c:88:80:ac:b8:94:3b:36:98:0b:00:2f:2f:b9:ce:cf:13:7d:
         d6:d1:02:07:4d:3d:2d:a0:dc:44:98:01:c9:29:18:98:68:d2:
         01:1f:f6:d4:f1:02:a1:75:c7:8e:73:7c:e5:0a:40:57:88:0f:
         8a:d0:ee:7e:8c:7f:1f:12:a2:09:98:e8:38:27:93:f5:f1:b2:
         dd:91:82:80:05:a2:63:00:9c:ff:85:82:3e:b2:18:3e:dc:3f:
         aa:1f:a8:74:c7:5a:94:03:78:a3:e5:e8:92:d6:c0:8d:88:b7:
         56:3f:67:77:aa:25:8f:56:11:77:69:57:1c:e8:3a:82:3a:1e:
         d2:56:66:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:41 2025 by rpki-client