Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FU_ArR5p1cBEKc0iII8e_ORZrzo.roa
File:                     FU_ArR5p1cBEKc0iII8e_ORZrzo.roa (raw, json)
Hash identifier:          xqTqdWRnCjAqh8ef59ieKRcGrM9D7hJYwr63tmZKURA=
Subject key identifier:   15:4F:C0:AD:1E:69:D5:C0:44:29:CD:22:20:8F:1E:FC:E4:59:AF:3A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E4F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FU_ArR5p1cBEKc0iII8e_ORZrzo.roa
Signing time:             Tue 29 Sep 2020 09:55:35 +0000
ROA not before:           Tue 29 Sep 2020 09:55:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.12.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3663 (0xe4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=154FC0AD1E69D5C04429CD22208F1EFCE459AF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:1f:a1:e1:58:c4:14:5c:7b:f4:e4:1b:ae:
                    00:b1:a8:8c:f0:38:c5:65:94:78:a9:2d:2c:aa:d0:
                    a3:f1:03:68:ac:24:97:19:c6:8e:c0:2b:50:b9:92:
                    d9:17:9d:2f:f1:36:51:d8:cb:1d:04:44:6f:5d:39:
                    b3:60:db:9c:80:33:52:b9:7a:9e:da:30:22:47:6a:
                    c4:25:f5:70:89:1a:87:df:2d:d7:f6:ed:d4:ed:3b:
                    19:13:d1:f8:1c:02:07:4c:2d:57:3a:52:ab:c7:14:
                    7d:ff:5a:21:22:8f:0e:e3:f5:e9:fa:7e:d4:4c:50:
                    89:66:3a:82:59:14:ae:6f:8b:7a:c2:e3:9b:04:34:
                    5e:a1:4a:f8:7c:64:52:1e:07:ff:9f:49:80:8f:1d:
                    19:fb:32:d6:d0:71:3b:99:0c:b2:fe:8a:44:1d:91:
                    50:f5:7c:26:67:de:b0:4b:ae:0d:b0:9d:58:e7:f9:
                    5f:e2:4b:67:2e:d6:bc:02:c1:e4:63:15:69:83:ed:
                    d0:05:db:fc:b2:11:40:7f:9e:e0:96:29:a0:9e:17:
                    de:2d:05:ca:42:e5:9f:ee:21:8e:40:44:f6:4b:a1:
                    f0:07:07:f6:d3:3d:a9:46:82:9d:32:fe:06:1d:75:
                    da:3f:99:c1:f4:2b:09:76:9f:f3:9a:28:6e:37:70:
                    25:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:C0:AD:1E:69:D5:C0:44:29:CD:22:20:8F:1E:FC:E4:59:AF:3A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FU_ArR5p1cBEKc0iII8e_ORZrzo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:44:9f:55:e8:64:6f:32:06:f9:46:cd:f6:5e:d3:1f:7d:7c:
         a4:48:0f:3a:61:d5:97:ec:d7:c7:16:da:ab:8e:17:ec:dc:b9:
         d5:a5:99:82:da:08:36:12:e6:4e:b6:e8:30:68:b4:88:36:82:
         e3:21:50:31:0e:16:a2:0e:9c:f0:47:62:af:88:c2:74:ef:4e:
         63:b8:9c:b2:3f:d8:e6:c0:44:61:7e:f2:7f:30:4f:69:bc:fd:
         c2:f2:8f:ce:59:b2:33:36:53:ec:fc:c4:cc:a6:0e:bd:1e:d0:
         11:50:a8:66:ba:7a:be:ef:a6:a8:60:ae:3c:55:31:0e:30:7d:
         af:ec:77:e9:ad:ab:39:0c:24:fd:94:90:97:d5:b6:5e:c9:1c:
         31:1f:ca:1d:62:d8:dc:f4:e0:a7:3f:d3:fb:08:80:50:38:01:
         4f:79:f4:16:ef:47:96:48:b2:5a:43:7c:cc:9c:8f:a0:08:62:
         31:6a:c5:98:39:95:ed:c8:bd:b8:c5:18:c1:2a:18:af:c5:38:
         ee:35:20:5b:7d:3f:c2:09:01:87:bb:b3:41:db:e9:d9:17:ca:
         ce:3f:a2:da:a5:44:ac:b5:1f:6e:22:c2:75:52:13:ac:db:21:
         6a:25:ba:fc:cd:57:37:53:dc:53:e8:d0:49:e3:f5:b5:45:bd:
         e1:62:c3:f1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MzVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE1NEZDMEFEMUU2OUQ1
QzA0NDI5Q0QyMjIwOEYxRUZDRTQ1OUFGM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+Ox+h4VjEFFx79OQbrgCxqIzwOMVllHipLSyq0KPxA2isJJcZ
xo7AK1C5ktkXnS/xNlHYyx0ERG9dObNg25yAM1K5ep7aMCJHasQl9XCJGoffLdf2
7dTtOxkT0fgcAgdMLVc6UqvHFH3/WiEijw7j9en6ftRMUIlmOoJZFK5vi3rC45sE
NF6hSvh8ZFIeB/+fSYCPHRn7MtbQcTuZDLL+ikQdkVD1fCZn3rBLrg2wnVjn+V/i
S2cu1rwCweRjFWmD7dAF2/yyEUB/nuCWKaCeF94tBcpC5Z/uIY5ARPZLofAHB/bT
PalGgp0y/gYdddo/mcH0Kwl2n/OaKG43cCXXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFU/ArR5p1cBEKc0iII8e/ORZrzowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZVX0FyUjVwMWNCRUtjMGlJ
SThlX09SWnJ6by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AQwwDQYJKoZIhvcNAQELBQADggEBABpEn1XoZG8yBvlGzfZe0x99fKRIDzph1Zfs
18cW2quOF+zcudWlmYLaCDYS5k626DBotIg2guMhUDEOFqIOnPBHYq+IwnTvTmO4
nLI/2ObARGF+8n8wT2m8/cLyj85ZsjM2U+z8xMymDr0e0BFQqGa6er7vpqhgrjxV
MQ4wfa/sd+mtqzkMJP2UkJfVtl7JHDEfyh1i2Nz04Kc/0/sIgFA4AU959BbvR5ZI
slpDfMycj6AIYjFqxZg5le3IvbjFGMEqGK/FOO41IFt9P8IJAYe7s0Hb6dkXys4/
otqlRKy1H24iwnVSE6zbIWoluvzNVzdT3FPo0Enj9bVFveFiw/E=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:53 2025 by rpki-client