Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8qrPRZ9fKACWJdgCBH93_VTwq0s.roa
File:                     8qrPRZ9fKACWJdgCBH93_VTwq0s.roa (raw, json)
Hash identifier:          qeChSWOA4eY8YbawLfreRrFadAAOSwm8uTtRfCaconQ=
Subject key identifier:   F2:AA:CF:45:9F:5F:28:00:96:25:D8:02:04:7F:77:FD:54:F0:AB:4B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C05
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8qrPRZ9fKACWJdgCBH93_VTwq0s.roa
Signing time:             Wed 29 Sep 2021 02:47:16 +0000
ROA not before:           Wed 29 Sep 2021 02:47:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7173 (0x1c05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F2AACF459F5F28009625D802047F77FD54F0AB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:a0:10:59:95:46:7b:04:09:53:0b:70:6d:
                    4a:df:11:82:8b:7f:33:9a:ad:14:cd:49:6b:47:85:
                    d9:97:ef:a1:fd:be:d9:55:d1:49:2c:b1:08:99:08:
                    92:de:b3:7f:dc:94:56:40:bd:ee:7d:a7:a4:46:90:
                    12:87:a3:a5:5a:60:f4:f5:b2:ed:2e:5d:d9:d4:d8:
                    90:f9:2c:94:fe:4c:b3:a7:e5:ce:0b:27:42:1c:3c:
                    bb:b3:e8:0d:b7:1e:0f:b9:02:70:2a:d3:f6:68:25:
                    24:94:3b:78:c6:b3:76:e2:4b:6b:78:5c:49:6c:e7:
                    92:3c:0e:8d:1b:e8:a5:50:0f:c6:13:c8:a6:d1:75:
                    02:04:6b:55:0e:27:bc:45:7e:14:b1:36:a7:53:d8:
                    38:62:da:81:ea:a6:f6:8a:90:53:02:d3:20:d9:e2:
                    d7:24:b4:aa:13:c5:11:20:81:61:d4:22:f0:ae:df:
                    b5:6a:f4:57:17:d3:ee:b6:0a:36:1a:07:e3:06:fd:
                    06:8e:ac:4e:90:f7:66:af:14:6c:ca:7b:d3:d1:21:
                    4b:00:fa:f6:a2:49:b1:73:78:f3:6f:65:fc:7f:8a:
                    df:3f:21:46:14:c9:f0:ae:fd:87:7c:70:ac:2a:3a:
                    30:d0:69:6d:8f:28:60:ad:82:91:b6:ad:e9:b8:87:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AA:CF:45:9F:5F:28:00:96:25:D8:02:04:7F:77:FD:54:F0:AB:4B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8qrPRZ9fKACWJdgCBH93_VTwq0s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:23:6c:f0:92:db:ae:4b:e8:8e:14:14:81:47:8c:60:e0:
         c0:9d:4c:29:8c:46:65:c8:36:f2:d3:0d:b7:50:44:c0:9b:1e:
         67:f9:aa:0e:54:b9:91:cf:ea:c8:48:2c:ee:f0:2d:b4:09:f8:
         c5:12:bd:6c:0d:d6:58:20:62:4f:bc:ec:de:2d:6e:ca:34:7e:
         7a:81:bd:d4:3b:8f:32:c1:cd:39:6e:4f:ab:1b:a7:a1:8a:d0:
         6e:91:5a:58:53:20:8d:1d:d7:5f:f5:99:a8:e5:a0:5e:df:b4:
         32:7d:e7:01:1a:13:c1:c6:8a:5a:6e:2d:f4:40:93:ad:13:c7:
         2c:05:4e:dd:8e:04:d0:b2:03:4d:8e:0e:3d:45:5d:4d:53:57:
         f2:1b:d2:6d:8c:ab:a0:42:f8:4e:ed:a5:e6:75:83:d8:fe:48:
         9d:e1:4a:5b:a1:e9:e7:7d:ee:b5:a6:da:b5:73:8f:43:3f:a4:
         74:7e:f4:01:6d:a0:3a:c1:99:20:01:67:8f:45:26:26:04:9a:
         0a:27:d9:8a:75:9d:03:11:12:d1:70:6a:9d:a2:71:16:9d:d5:
         28:f9:97:db:e6:d1:85:34:24:d8:d1:51:87:42:d7:d0:3a:76:
         43:02:cb:d6:a3:ac:19:f4:01:7a:79:ad:e3:d8:18:23:e2:e5:
         cf:92:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:24 2025 by rpki-client