Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8u2alJt03zRcHeTc1WFxprZhwkE.roa
File:                     8u2alJt03zRcHeTc1WFxprZhwkE.roa (raw, json)
Hash identifier:          bAuoqQfw3gwo/ThDKmIefLf/fROvqN/VJlwJxrqiXeI=
Subject key identifier:   F2:ED:9A:94:9B:74:DF:34:5C:1D:E4:DC:D5:61:71:A6:B6:61:C2:41
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20AF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8u2alJt03zRcHeTc1WFxprZhwkE.roa
Signing time:             Fri 25 Nov 2022 04:38:59 +0000
ROA not before:           Fri 25 Nov 2022 04:38:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.193.160.0/20 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8367 (0x20af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F2ED9A949B74DF345C1DE4DCD56171A6B661C241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:46:98:eb:8d:6e:d4:23:4f:43:a1:6d:3e:
                    da:49:37:73:fc:26:a9:2c:5b:63:ad:cd:9a:58:cf:
                    06:8b:6f:32:1a:f2:9e:29:c0:99:74:5d:34:a1:16:
                    92:8b:8e:7b:91:1c:32:ee:02:52:8c:12:f0:f7:52:
                    a2:a5:ab:c8:81:9f:fa:82:85:36:f9:8e:54:7a:9e:
                    28:8c:23:b1:75:29:c0:08:f5:35:c2:50:33:31:40:
                    3f:88:cd:30:27:17:f0:e5:e0:f3:8a:18:a7:c0:97:
                    03:37:ce:80:42:0b:6b:17:bd:28:0f:02:94:ac:70:
                    85:74:a5:b2:ee:3a:2a:f7:e9:94:54:40:bd:ae:6c:
                    e3:1f:70:2f:d2:48:00:f5:cc:1b:60:0d:e3:e1:ea:
                    81:5c:0c:4c:54:71:f4:60:28:d4:c6:cd:57:e4:e5:
                    43:7a:01:9a:7b:29:f8:c0:d7:48:f8:07:ce:e7:c3:
                    4f:be:66:f7:8f:08:67:a8:76:fe:4f:de:e2:4d:87:
                    7a:64:35:f5:60:36:8a:56:35:40:59:e3:d8:f0:97:
                    e6:e7:4f:ad:f4:48:fb:5e:03:9e:0f:4b:9b:45:bc:
                    ff:3b:68:7c:11:c4:a1:ca:ce:9b:ff:98:27:f4:92:
                    1b:2f:35:73:ae:4a:63:25:46:fa:a1:3d:cf:19:c5:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:9A:94:9B:74:DF:34:5C:1D:E4:DC:D5:61:71:A6:B6:61:C2:41
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8u2alJt03zRcHeTc1WFxprZhwkE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:f7:b0:f9:39:f2:84:37:6c:42:35:39:46:6c:0f:27:89:
         a3:0c:31:72:8c:1e:85:c9:44:72:4d:19:e6:d8:1e:9e:e8:c6:
         33:e3:cb:ef:5b:6b:10:99:e6:5f:91:ff:34:46:c7:72:34:b4:
         89:9a:99:87:3d:39:f5:49:17:9b:f3:0f:d5:5b:a2:98:98:76:
         53:21:d0:a1:73:b7:cd:a4:7c:74:d7:a9:77:45:87:05:39:97:
         50:75:e1:37:43:06:40:6b:e7:2c:ef:97:b7:45:1d:a8:02:cc:
         77:c2:94:ab:85:dd:93:e0:ce:8b:85:71:4a:0e:e3:15:20:a5:
         9d:de:6c:be:62:c0:d7:5a:8e:6c:97:06:6a:42:08:c2:be:3d:
         74:86:16:ae:e4:c0:78:1a:8b:21:a3:8d:2e:a2:62:fa:8b:15:
         af:f3:4f:a8:3c:9e:1d:58:20:e8:c2:17:60:ef:e1:90:af:13:
         16:79:db:ba:3e:b4:57:55:d1:be:ac:3c:72:67:3b:0a:28:8a:
         dd:41:b9:6c:f3:cd:a8:8a:26:e0:09:35:a6:27:88:6c:37:5f:
         ab:77:e8:dd:4c:57:37:a0:43:55:84:09:c7:6f:96:68:e2:72:
         84:0e:fe:88:8e:09:b7:58:33:e7:a2:3b:10:94:36:a8:ff:25:
         62:c2:ea:59
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYyRUQ5QTk0OUI3NERG
MzQ1QzFERTREQ0Q1NjE3MUE2QjY2MUMyNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8b0aY641u1CNPQ6FtPtpJN3P8JqksW2OtzZpYzwaLbzIa8p4p
wJl0XTShFpKLjnuRHDLuAlKMEvD3UqKlq8iBn/qChTb5jlR6niiMI7F1KcAI9TXC
UDMxQD+IzTAnF/Dl4POKGKfAlwM3zoBCC2sXvSgPApSscIV0pbLuOir36ZRUQL2u
bOMfcC/SSAD1zBtgDePh6oFcDExUcfRgKNTGzVfk5UN6AZp7KfjA10j4B87nw0++
ZvePCGeodv5P3uJNh3pkNfVgNopWNUBZ49jwl+bnT630SPteA54PS5tFvP87aHwR
xKHKzpv/mCf0khsvNXOuSmMlRvqhPc8ZxfgZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8u2alJt03zRcHeTc1WFxprZhwkEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzh1MmFsSnQwM3pSY0hlVGMx
V0Z4cHJaaHdrRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
waAwDQYJKoZIhvcNAQELBQADggEBAE3b97D5OfKEN2xCNTlGbA8niaMMMXKMHoXJ
RHJNGebYHp7oxjPjy+9baxCZ5l+R/zRGx3I0tImamYc9OfVJF5vzD9VbopiYdlMh
0KFzt82kfHTXqXdFhwU5l1B14TdDBkBr5yzvl7dFHagCzHfClKuF3ZPgzouFcUoO
4xUgpZ3ebL5iwNdajmyXBmpCCMK+PXSGFq7kwHgaiyGjjS6iYvqLFa/zT6g8nh1Y
IOjCF2Dv4ZCvExZ527o+tFdV0b6sPHJnOwooit1BuWzzzaiKJuAJNaYniGw3X6t3
6N1MVzegQ1WECcdvlmjicoQO/oiOCbdYM+eiOxCUNqj/JWLC6lk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:13 2025 by rpki-client