Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BFtS1-zDqqkQ19lWnofkvICilZA.roa
File:                     BFtS1-zDqqkQ19lWnofkvICilZA.roa (raw, json)
Hash identifier:          ayK2K9RrUJpxWHf4TOSLC4FAOoREQLAiNJjxfzJFNH4=
Subject key identifier:   04:5B:52:D7:EC:C3:AA:A9:10:D7:D9:56:9E:87:E4:BC:80:A2:95:90
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F19
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BFtS1-zDqqkQ19lWnofkvICilZA.roa
Signing time:             Tue 29 Sep 2020 09:56:29 +0000
ROA not before:           Tue 29 Sep 2020 09:56:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.204.96/29 maxlen: 29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3865 (0xf19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=045B52D7ECC3AAA910D7D9569E87E4BC80A29590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5e:2b:46:8a:e7:55:95:b5:37:f5:3d:51:3c:
                    bb:eb:e2:86:1e:a3:16:7e:5b:d3:98:03:aa:7a:69:
                    35:c6:69:f7:37:35:e8:e7:6d:de:f5:03:c1:75:d5:
                    d0:80:60:d2:63:2b:c9:40:6d:77:4b:9f:e8:f8:bb:
                    61:50:2e:73:d0:72:fd:a5:0e:93:6a:8f:e6:95:a1:
                    d4:37:3d:76:b5:ff:a0:44:12:62:76:c7:f4:f9:f1:
                    37:91:9a:e0:e1:e4:d3:c2:a1:ef:e4:1c:5f:94:21:
                    cb:2f:95:ef:ce:ff:6c:1f:a0:e7:4a:a6:8e:12:0a:
                    b4:f7:79:43:99:6b:cc:de:b4:68:a5:84:3b:cc:fb:
                    82:3a:fd:f3:99:ff:4a:86:cd:d2:b5:70:c8:f9:02:
                    47:87:23:a6:4d:12:6a:76:80:d5:ed:5e:15:43:75:
                    ac:6a:2c:c1:99:17:e2:8a:03:8f:33:8f:f2:47:8d:
                    cc:2a:9c:1b:7e:1b:ec:0e:a5:f3:65:85:ec:a9:cb:
                    47:66:8f:ff:71:80:c1:c8:e8:12:37:28:4d:31:8c:
                    27:ee:29:a0:8a:1c:b4:21:5e:ee:ab:16:de:a7:50:
                    69:5d:dd:23:0c:fa:16:75:e6:0e:26:2b:70:cd:64:
                    81:df:57:ee:6e:9f:50:7a:7b:92:05:41:bd:66:92:
                    04:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:52:D7:EC:C3:AA:A9:10:D7:D9:56:9E:87:E4:BC:80:A2:95:90
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BFtS1-zDqqkQ19lWnofkvICilZA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.204.96/29

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:7e:a6:4b:cd:3a:0d:82:05:d7:8d:dc:02:76:e9:7f:20:
         69:88:0a:f5:34:4e:75:54:c3:77:61:db:67:ab:e0:fd:e6:c3:
         24:a7:2b:93:c2:38:f4:f7:8b:42:f9:28:79:c4:62:57:72:48:
         80:93:ee:d3:38:1c:ae:43:c5:b6:c0:84:b2:00:84:8f:6d:50:
         dd:39:93:20:02:ce:d3:5a:63:7d:59:bc:f9:ef:a9:7c:da:67:
         1f:e2:3a:80:79:c9:a1:39:5c:2a:ea:6e:e6:84:a4:92:18:4b:
         fa:07:87:f3:6a:ae:61:8b:9e:43:21:79:b1:4c:20:66:97:d0:
         0d:f8:69:1e:40:14:8e:a4:63:fe:5d:a2:39:ed:e7:e9:53:ae:
         ea:23:86:59:ea:f3:6d:f2:93:ba:08:34:8e:3d:64:80:a4:f7:
         08:1d:27:21:48:b3:a3:26:9c:60:c1:c7:ab:be:af:9c:ab:3f:
         01:40:7f:c0:31:f1:f4:40:c5:98:71:88:3d:dc:24:8f:03:d4:
         c2:6f:9c:6b:2f:1a:92:90:a9:02:53:34:bb:06:18:ba:75:89:
         40:1d:24:f6:24:cb:c3:ce:73:09:c8:f3:3f:06:6b:c1:bc:fe:
         20:b4:1b:64:ef:3b:90:5f:2b:c0:6d:93:72:fb:0a:2d:f1:7d:
         3d:4d:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:32 2025 by rpki-client