Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G6A3TbXg6VT50BQKq5l3x-6Dt2A.roa
File:                     G6A3TbXg6VT50BQKq5l3x-6Dt2A.roa (raw, json)
Hash identifier:          Gzj37Sj/tk8BprR7I5axT89TIkqVi5Daf8f7BupVKH0=
Subject key identifier:   1B:A0:37:4D:B5:E0:E9:54:F9:D0:14:0A:AB:99:77:C7:EE:83:B7:60
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2B18
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G6A3TbXg6VT50BQKq5l3x-6Dt2A.roa
Signing time:             Fri 01 Sep 2023 10:09:51 +0000
ROA not before:           Fri 01 Sep 2023 10:09:51 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        118.233.48.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11032 (0x2b18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:09:51 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=1BA0374DB5E0E954F9D0140AAB9977C7EE83B760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:03:f4:1e:e7:d0:7e:df:7c:e2:9e:56:d6:
                    42:f0:82:ec:12:bd:00:54:d0:33:88:18:0b:0e:fe:
                    9e:2c:c8:27:f7:a8:5a:83:b8:c2:b6:9f:de:c0:01:
                    b0:74:5d:7e:0f:65:a8:fc:c9:c4:b1:71:a7:9c:61:
                    2a:4e:3e:73:a0:18:89:b0:17:c8:59:12:cf:6d:7b:
                    0b:75:f3:a9:e1:19:e5:56:4c:6b:eb:04:18:86:58:
                    17:02:30:9a:da:e6:69:11:0d:75:23:47:45:88:d6:
                    d2:28:44:a0:d2:33:0f:b6:e7:3a:58:2d:13:1b:cb:
                    81:28:ab:12:e6:1a:9a:4d:a8:fc:43:c0:a3:8b:e0:
                    18:d0:64:40:c9:3f:a2:31:42:91:c2:54:04:31:f5:
                    c5:b7:d8:cf:17:e9:c5:40:73:78:c2:29:ae:e4:fd:
                    f5:dc:a4:4d:2d:f3:75:e6:f9:7d:5f:6e:6a:82:41:
                    50:26:c5:4b:0b:45:52:db:e2:82:82:93:51:80:49:
                    5a:f5:9e:69:8d:77:67:05:11:6d:6c:53:4a:46:37:
                    29:05:a3:a7:45:a7:b5:b5:db:95:88:cb:89:6c:79:
                    55:8b:91:94:1d:02:da:08:18:77:1c:ff:99:f3:6d:
                    24:96:86:62:4c:1e:06:75:d0:b3:d5:fd:a7:83:2c:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A0:37:4D:B5:E0:E9:54:F9:D0:14:0A:AB:99:77:C7:EE:83:B7:60
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G6A3TbXg6VT50BQKq5l3x-6Dt2A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:3f:e3:b8:ab:f3:2e:d9:c9:73:07:59:44:b3:b2:25:3e:
         0e:72:be:49:7a:d8:4b:d6:de:25:9a:fb:e7:49:6e:30:ec:de:
         47:af:d4:30:36:40:a9:91:bd:a1:b5:c0:ce:79:ce:03:ca:ef:
         1f:ac:36:d9:46:ce:fd:66:21:ae:29:f3:03:67:86:1e:9d:20:
         33:2e:65:d9:9a:4f:52:8f:f7:46:88:22:5d:c4:78:73:c5:37:
         0f:41:e6:a1:e7:3d:4c:5d:7e:8b:9e:9c:94:1b:2a:4c:28:2a:
         25:cf:64:0f:3e:29:04:93:aa:2f:a6:68:ef:31:90:87:00:72:
         97:9d:2c:45:1d:69:44:50:ef:e2:19:29:91:84:13:37:ef:6c:
         14:a2:92:a0:9c:44:ab:df:87:7d:08:31:6d:85:8f:49:b0:7b:
         1e:f1:ac:51:f2:07:f2:db:e4:37:58:d8:5b:bf:1c:e0:d7:23:
         12:58:7d:a1:ef:63:05:09:33:be:10:6a:66:d1:c6:ad:c3:a6:
         2f:7b:1c:96:58:01:7e:16:1d:49:d4:34:33:ba:fc:c9:cd:02:
         93:09:db:07:75:83:a4:d0:16:dc:90:0c:fd:27:f9:8a:25:89:
         d1:87:ac:bf:7b:22:26:b8:f2:49:a4:ee:98:25:58:0c:eb:11:
         7d:af:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:43 2025 by rpki-client