Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CP6PtCwlVbKY3JHRm-Rxqxj-rtQ.roa
File:                     CP6PtCwlVbKY3JHRm-Rxqxj-rtQ.roa (raw, json)
Hash identifier:          TM+GK5dV4jsawrNF/5Om4UIz0xEqr2nPGTEWT9WHQGI=
Subject key identifier:   08:FE:8F:B4:2C:25:55:B2:98:DC:91:D1:9B:E4:71:AB:18:FE:AE:D4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       27E6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CP6PtCwlVbKY3JHRm-Rxqxj-rtQ.roa
Signing time:             Fri 01 Sep 2023 10:04:42 +0000
ROA not before:           Fri 01 Sep 2023 10:04:42 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        180.177.56.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10214 (0x27e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:04:42 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=08FE8FB42C2555B298DC91D19BE471AB18FEAED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:b4:0b:c2:d7:5e:af:0e:ac:7e:d6:9b:7c:
                    59:d6:55:31:a5:d6:2e:26:db:04:00:87:5c:8a:36:
                    38:73:25:da:26:d6:ff:a3:48:d9:3b:69:79:78:ae:
                    ea:99:b2:24:2c:76:ec:00:e7:1c:f8:f8:7f:3c:8c:
                    c5:e0:be:02:1a:39:07:30:d9:ef:1b:86:9c:00:75:
                    98:6c:71:e6:f0:6e:4b:00:17:2c:25:6e:8c:a2:3e:
                    1c:25:01:8a:de:49:fc:78:ed:69:bf:d3:59:42:f6:
                    cc:be:ff:28:ae:dc:76:37:e3:db:e6:a8:df:24:87:
                    64:79:1b:52:fb:aa:f7:0f:62:39:aa:a8:01:0a:a2:
                    d7:81:b8:3c:a1:6d:06:db:c6:fd:1a:2b:ca:6f:16:
                    0d:87:80:45:07:67:9a:62:08:c6:20:6c:50:8d:fa:
                    68:6e:4d:85:73:fa:9a:bb:0e:73:8b:44:a8:82:ad:
                    67:68:f2:bb:e1:01:e2:7b:66:db:7c:db:8f:b3:0b:
                    9a:96:32:ee:40:f9:ce:ac:1f:c0:0c:2d:4a:d2:6a:
                    15:e4:ce:32:d6:fe:23:fa:e5:e1:c2:3a:2b:b3:98:
                    2f:95:f2:04:6f:ce:40:39:17:5b:aa:75:66:33:39:
                    44:94:09:78:42:c3:47:5c:9d:e5:1e:e6:01:7a:cf:
                    e8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FE:8F:B4:2C:25:55:B2:98:DC:91:D1:9B:E4:71:AB:18:FE:AE:D4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CP6PtCwlVbKY3JHRm-Rxqxj-rtQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:84:49:55:02:ad:63:3b:75:fc:61:22:62:59:81:62:32:3d:
         50:8c:be:1e:ef:4e:ca:53:f6:d6:72:ef:c8:2b:57:62:75:77:
         e6:db:5c:c4:49:49:56:78:14:fb:4e:fb:f1:52:b9:81:52:63:
         ac:1a:be:18:45:f7:65:eb:bf:61:2d:a7:b8:ae:ac:37:df:63:
         c3:b9:2c:7e:c1:23:76:65:0b:ad:2a:3e:7d:a6:f0:0b:f8:14:
         2b:5b:d8:8d:0c:73:75:1c:48:e9:da:db:60:30:e0:23:05:07:
         19:37:1c:58:33:bc:07:09:48:6a:a7:70:0f:c1:05:5e:60:3f:
         dc:82:3f:84:45:07:8e:3a:cf:77:a3:0d:60:70:fa:5d:80:88:
         22:d4:fa:14:ce:32:a9:02:d3:3d:fa:dc:ae:c1:37:32:08:9f:
         b0:08:bd:bf:2b:96:9d:b7:00:84:1d:2e:84:47:1c:da:1b:ff:
         aa:63:05:bc:4a:35:bb:31:d1:af:95:a2:25:5f:e0:d1:8e:4e:
         ae:39:5d:63:e5:5b:69:b3:a8:6f:52:6d:81:e0:b2:9c:6f:55:
         53:da:b6:ed:e8:c8:bc:05:a1:dc:fc:c0:a3:8e:6a:f1:99:08:
         c6:07:4e:6e:4e:5f:d2:64:e3:0e:34:f3:6a:dd:02:3c:4f:6f:
         39:6e:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:09 2025 by rpki-client