Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DT7Se74aaKE_qLW9VPTN1vx6l54.roa
File:                     DT7Se74aaKE_qLW9VPTN1vx6l54.roa (raw, json)
Hash identifier:          6/lOU17idK6/Bn2Qvi37o3UWirAuCd+bYFkjFLDRnAE=
Subject key identifier:   0D:3E:D2:7B:BE:1A:68:A1:3F:A8:B5:BD:54:F4:CD:D6:FC:7A:97:9E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       213D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DT7Se74aaKE_qLW9VPTN1vx6l54.roa
Signing time:             Fri 25 Nov 2022 04:39:41 +0000
ROA not before:           Fri 25 Nov 2022 04:39:41 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.192.144.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8509 (0x213d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:41 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0D3ED27BBE1A68A13FA8B5BD54F4CDD6FC7A979E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1d:90:d1:e6:86:64:0d:31:0f:76:ee:51:f0:
                    db:72:33:d7:b4:c6:4a:8a:4d:cc:a7:f5:a9:06:07:
                    dc:de:c9:7d:4c:6e:07:65:90:b7:57:d1:2f:c5:12:
                    79:6b:05:d9:34:10:46:58:85:c0:03:c1:9c:8a:68:
                    61:dd:53:01:b5:a1:84:dd:36:08:ce:2d:ed:0f:71:
                    45:94:bf:47:97:88:5d:33:12:29:42:92:0b:4b:08:
                    32:74:20:28:e6:04:db:bd:2d:27:8a:3a:d8:9e:f7:
                    1f:0e:32:29:96:8a:aa:0d:0c:dd:cb:07:f8:6e:07:
                    3e:8a:21:fd:af:ed:07:0c:87:87:73:61:5e:11:34:
                    71:5a:8d:30:de:97:14:67:dc:9a:8a:8a:27:8a:d3:
                    0a:60:10:f6:db:14:11:ad:b2:b9:a1:87:65:bf:f3:
                    fd:dd:88:eb:ce:e2:5c:e0:bb:d5:c3:0a:ff:63:3c:
                    c3:0d:d5:b8:ec:ae:ab:73:a0:30:70:0e:c2:c4:12:
                    83:63:e8:df:b7:66:88:57:e5:ff:8a:85:bd:ed:2f:
                    a4:d0:88:35:94:4c:e2:56:a3:5c:6f:9f:52:82:91:
                    71:15:93:56:ad:85:d0:73:47:47:6e:fe:c5:a1:67:
                    48:8f:ef:f5:49:21:28:76:a4:4a:46:a5:5d:e4:73:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3E:D2:7B:BE:1A:68:A1:3F:A8:B5:BD:54:F4:CD:D6:FC:7A:97:9E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DT7Se74aaKE_qLW9VPTN1vx6l54.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:86:df:7a:41:80:2d:23:8e:af:a3:ce:59:e8:75:f1:ef:57:
         44:79:3d:5e:11:8d:64:a0:85:62:6a:3b:b6:a6:7c:34:30:c9:
         f5:74:15:02:3d:83:c5:ef:7b:ad:45:e2:03:16:0b:53:eb:f0:
         6f:2e:a0:de:45:9f:4a:0c:0e:ce:4f:99:9a:f2:4a:e8:c1:04:
         52:b9:db:27:d8:c8:50:c6:56:d5:ab:f1:7f:1d:aa:cb:21:85:
         ec:d2:88:58:7e:eb:f6:52:74:d2:98:10:6f:c1:b6:57:dc:a2:
         58:78:53:96:e5:9f:05:6e:78:a7:c0:93:84:8e:78:65:d9:fd:
         50:39:a2:ce:59:44:bc:bb:08:20:28:37:3c:95:a8:a1:34:48:
         fa:ad:9f:4b:2b:a3:b3:c8:31:db:08:b6:0d:f5:a4:60:b6:91:
         57:b7:82:8a:ca:5c:b3:5a:a7:7b:88:ca:c4:c3:ac:9d:60:61:
         45:49:2e:0d:f7:97:d7:90:cc:4e:24:ce:28:15:a2:93:e0:07:
         5f:2c:62:98:a5:c2:05:dc:ee:b9:74:ce:7f:2d:a4:25:f0:cd:
         05:42:62:a6:57:25:d6:4e:29:0b:5f:85:2d:26:b4:4d:07:32:
         c8:47:9b:b5:45:83:e9:48:ca:d0:ab:20:bd:9d:5d:b2:37:a0:
         e0:d7:c7:da
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDBEM0VEMjdCQkUxQTY4
QTEzRkE4QjVCRDU0RjRDREQ2RkM3QTk3OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxHZDR5oZkDTEPdu5R8NtyM9e0xkqKTcyn9akGB9zeyX1Mbgdl
kLdX0S/FEnlrBdk0EEZYhcADwZyKaGHdUwG1oYTdNgjOLe0PcUWUv0eXiF0zEilC
kgtLCDJ0ICjmBNu9LSeKOtie9x8OMimWiqoNDN3LB/huBz6KIf2v7QcMh4dzYV4R
NHFajTDelxRn3JqKiieK0wpgEPbbFBGtsrmhh2W/8/3diOvO4lzgu9XDCv9jPMMN
1bjsrqtzoDBwDsLEEoNj6N+3ZohX5f+Khb3tL6TQiDWUTOJWo1xvn1KCkXEVk1at
hdBzR0du/sWhZ0iP7/VJISh2pEpGpV3kc0pzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDT7Se74aaKE/qLW9VPTN1vx6l54wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RUN1NlNzRhYUtFX3FMVzlW
UFROMXZ4Nmw1NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wJAwDQYJKoZIhvcNAQELBQADggEBAFWG33pBgC0jjq+jzlnodfHvV0R5PV4RjWSg
hWJqO7amfDQwyfV0FQI9g8Xve61F4gMWC1Pr8G8uoN5Fn0oMDs5PmZrySujBBFK5
2yfYyFDGVtWr8X8dqsshhezSiFh+6/ZSdNKYEG/Btlfcolh4U5blnwVueKfAk4SO
eGXZ/VA5os5ZRLy7CCAoNzyVqKE0SPqtn0sro7PIMdsItg31pGC2kVe3gorKXLNa
p3uIysTDrJ1gYUVJLg33l9eQzE4kzigVopPgB18sYpilwgXc7rl0zn8tpCXwzQVC
YqZXJdZOKQtfhS0mtE0HMshHm7VFg+lIytCrIL2dXbI3oODXx9o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:32 2025 by rpki-client