Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BIw2_sYp3H2WPGp2W3T4msqXPkE.roa
File:                     BIw2_sYp3H2WPGp2W3T4msqXPkE.roa (raw, json)
Hash identifier:          RDOCMHl7x8oJoZrYwtp/Ki89VOrkcGS1sOPhZbuzDI8=
Subject key identifier:   04:8C:36:FE:C6:29:DC:7D:96:3C:6A:76:5B:74:F8:9A:CA:97:3E:41
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BIw2_sYp3H2WPGp2W3T4msqXPkE.roa
Signing time:             Thu 15 Sep 2022 02:46:28 +0000
ROA not before:           Thu 15 Sep 2022 02:46:28 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        118.233.128.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:28 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=048C36FEC629DC7D963C6A765B74F89ACA973E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:e0:e6:41:1c:c6:a2:43:5c:83:28:ee:9e:
                    21:73:e5:51:2e:ad:6a:2e:ca:f6:84:8e:8f:9e:37:
                    d6:ac:b7:cd:a2:ae:9e:d2:0c:09:d1:02:81:fd:ed:
                    d2:ff:83:5c:06:6b:70:d9:77:1c:6f:48:f2:46:50:
                    2d:81:7f:f3:50:2d:de:d4:1c:9d:16:69:3d:5c:33:
                    15:f0:55:4c:17:92:76:93:8b:99:48:5d:fe:25:4b:
                    9f:9c:de:28:9e:4a:f5:a6:3b:b9:3b:d3:15:6c:76:
                    a6:e5:d1:8b:f0:fd:f5:df:02:a0:b3:a9:95:a8:e9:
                    77:10:5e:2a:37:a0:c6:0f:c9:1c:cd:2c:f0:31:91:
                    37:2d:8c:be:dc:b6:a8:25:4f:24:66:8c:6b:94:a8:
                    ef:60:87:b9:14:34:3f:84:91:43:56:02:9d:4d:fb:
                    aa:eb:af:57:50:a8:cd:18:15:00:b6:45:11:cb:2a:
                    17:81:67:fd:0f:84:b9:9a:a9:94:dd:f6:c1:8d:e8:
                    9c:3f:41:20:6f:59:d6:83:32:3f:0b:04:bc:b4:97:
                    5a:61:b7:e9:0f:e3:04:d8:26:69:3e:43:bd:9d:3a:
                    8f:90:e6:b4:99:8f:2d:91:be:46:75:ab:88:87:b2:
                    13:ca:6d:17:c8:9e:55:1d:0f:fa:99:85:ae:35:5c:
                    04:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8C:36:FE:C6:29:DC:7D:96:3C:6A:76:5B:74:F8:9A:CA:97:3E:41
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BIw2_sYp3H2WPGp2W3T4msqXPkE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ac:94:77:f7:67:83:36:9b:6a:b6:97:cf:86:40:a1:e8:ff:9f:
         9a:8d:8c:f4:57:a5:75:84:51:de:7d:b8:cd:fa:fd:51:0a:2e:
         ec:e1:12:65:51:ae:5c:9e:96:93:c1:ca:c8:7c:65:79:1a:8d:
         98:c9:43:50:e3:4a:00:c4:e3:90:44:24:fe:81:d7:15:25:d0:
         72:0c:55:65:35:62:db:e4:3e:5f:99:84:6c:3f:a8:3f:5d:e8:
         7e:c5:72:35:7c:52:1b:3e:2e:2a:93:01:e0:bf:cc:7a:e5:a9:
         4b:07:18:65:fc:55:4c:b3:3a:10:41:ee:74:39:85:55:6b:ac:
         0d:0f:d2:29:29:4d:ab:9c:ec:e7:3c:3b:46:28:5e:59:6c:c0:
         66:13:59:57:91:f0:ae:4b:f2:34:05:59:6e:61:2f:f0:00:1a:
         34:83:09:54:92:82:f2:73:b9:99:e6:29:69:c3:19:81:63:92:
         47:9e:50:7a:7d:d8:48:17:1d:5f:d9:b6:eb:70:67:41:47:3a:
         2b:e0:8b:eb:eb:5d:01:4a:6c:87:75:33:6a:72:45:69:9a:4f:
         c5:e2:f0:b2:80:f9:62:41:17:c6:4a:bf:75:e5:e7:c1:d8:d4:
         7e:d6:22:b6:a1:e4:76:d9:0c:a9:7c:47:b4:cc:b8:af:7b:c5:
         8e:5c:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:51 2025 by rpki-client