Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7Xdq031XJQBZWfd-dmdwo0qVtM.roa
File:                     E7Xdq031XJQBZWfd-dmdwo0qVtM.roa (raw, json)
Hash identifier:          H34fy/aduRCq8eno30M5vabk0RMt7415lA4UQh2YmgA=
Subject key identifier:   13:B5:DD:AB:4D:F5:5C:94:01:65:67:DD:F9:D9:9D:C2:8D:2A:56:D3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D28
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7Xdq031XJQBZWfd-dmdwo0qVtM.roa
Signing time:             Wed 29 Sep 2021 02:48:41 +0000
ROA not before:           Wed 29 Sep 2021 02:48:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.193.0.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7464 (0x1d28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=13B5DDAB4DF55C94016567DDF9D99DC28D2A56D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:cc:84:e6:a8:6d:24:08:fc:56:f5:1c:93:
                    35:20:fa:51:1a:49:d9:fa:be:7b:f3:f8:37:29:f9:
                    9c:a3:2a:51:d7:29:7b:7b:72:19:82:51:e3:3c:28:
                    58:5c:d5:f7:1b:3b:ee:a8:5b:3f:5d:b8:b8:3d:6d:
                    f8:e0:ea:fa:53:d9:83:75:9f:3f:46:9c:4d:bb:2e:
                    90:76:22:2c:ac:62:ba:c2:a1:7f:9f:e6:5b:f4:77:
                    91:d8:eb:fc:36:8b:27:47:1d:d6:41:9e:9d:34:e9:
                    ad:ef:56:94:20:20:51:c2:0c:97:f1:00:7d:d1:68:
                    4a:8c:34:3b:92:b3:6d:7a:9d:85:5b:f2:99:e6:67:
                    6a:07:e7:87:01:69:33:62:ea:72:91:e0:9b:6a:c7:
                    42:24:52:ef:21:80:19:de:ba:a8:ee:42:1f:1c:25:
                    34:67:d0:20:fe:3c:a5:9f:00:56:88:4a:ef:e4:af:
                    0a:27:1b:06:3c:7c:f7:eb:75:8c:98:82:cb:f5:7e:
                    a7:fe:1f:0c:a8:ad:a6:ea:e8:15:45:78:03:6b:68:
                    74:fc:d6:45:5e:4d:66:c9:b9:6d:89:cc:1d:59:4a:
                    d6:2d:17:e0:9e:fb:50:8a:70:5c:b1:7c:b8:ef:bf:
                    a4:51:6d:34:e8:0d:73:d4:91:1f:31:c5:ce:ad:83:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B5:DD:AB:4D:F5:5C:94:01:65:67:DD:F9:D9:9D:C2:8D:2A:56:D3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7Xdq031XJQBZWfd-dmdwo0qVtM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:8d:ed:71:47:1b:88:7e:ef:0e:ac:cb:fd:96:d8:31:2f:
         31:1f:3b:2d:94:ee:c8:9f:3a:ab:1d:ae:85:b7:cc:ee:f0:35:
         41:02:c3:12:dc:68:f1:34:0d:65:ee:ed:85:ad:68:54:3e:da:
         af:d3:47:e1:9e:ec:23:5a:fd:70:65:43:8a:34:8e:ff:d3:b8:
         48:c9:c6:2a:45:8a:a9:d6:21:06:b1:63:c6:87:f6:99:ff:a8:
         31:66:ee:a3:d9:c2:57:e3:5c:9e:af:f3:be:58:73:49:36:f6:
         a1:bd:c3:95:67:c3:16:81:7c:54:05:7c:a9:d6:5a:cb:71:7e:
         b8:29:c9:a2:ad:52:e7:b4:e5:3e:1c:65:d4:18:94:6c:b3:07:
         b2:28:77:4c:be:5b:1e:3a:59:50:0a:ae:7d:74:06:78:18:05:
         35:eb:05:68:f3:a4:38:08:4c:0d:f2:3d:65:ed:60:dc:11:37:
         30:09:c7:28:b2:d3:f5:fe:98:d4:1b:ea:14:6f:62:44:80:00:
         c5:56:9b:89:d5:7a:db:25:f9:3e:0d:97:ab:29:0a:ca:16:c8:
         d3:8d:aa:84:9e:59:6f:f6:f8:58:9d:ec:93:8a:92:f4:06:21:
         94:b9:20:48:8e:b0:38:70:64:6b:5c:e5:1b:b0:2e:ad:f9:a7:
         76:76:a1:db
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHSgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4NDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDEzQjVEREFCNERGNTVD
OTQwMTY1NjdEREY5RDk5REMyOEQyQTU2RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA38yE5qhtJAj8VvUckzUg+lEaSdn6vnvz+Dcp+ZyjKlHXKXt7
chmCUeM8KFhc1fcbO+6oWz9duLg9bfjg6vpT2YN1nz9GnE27LpB2IiysYrrCoX+f
5lv0d5HY6/w2iydHHdZBnp006a3vVpQgIFHCDJfxAH3RaEqMNDuSs216nYVb8pnm
Z2oH54cBaTNi6nKR4Jtqx0IkUu8hgBneuqjuQh8cJTRn0CD+PKWfAFaISu/krwon
GwY8fPfrdYyYgsv1fqf+Hwyorabq6BVFeANraHT81kVeTWbJuW2JzB1ZStYtF+Ce
+1CKcFyxfLjvv6RRbTToDXPUkR8xxc6tg6DVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUE7Xdq031XJQBZWfd+dmdwo0qVtMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0U3WGRxMDMxWEpRQlpXZmQt
ZG1kd28wcVZ0TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
wQAwDQYJKoZIhvcNAQELBQADggEBAFIdje1xRxuIfu8OrMv9ltgxLzEfOy2U7sif
OqsdroW3zO7wNUECwxLcaPE0DWXu7YWtaFQ+2q/TR+Ge7CNa/XBlQ4o0jv/TuEjJ
xipFiqnWIQaxY8aH9pn/qDFm7qPZwlfjXJ6v875Yc0k29qG9w5VnwxaBfFQFfKnW
WstxfrgpyaKtUue05T4cZdQYlGyzB7Iod0y+Wx46WVAKrn10BngYBTXrBWjzpDgI
TA3yPWXtYNwRNzAJxyiy0/X+mNQb6hRvYkSAAMVWm4nVetsl+T4Nl6spCsoWyNON
qoSeWW/2+Fid7JOKkvQGIZS5IEiOsDhwZGtc5RuwLq35p3Z2ods=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:38 2025 by rpki-client