Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IT1lG1vKABb7fLqChCy75TBUpQc.roa
File:                     IT1lG1vKABb7fLqChCy75TBUpQc.roa (raw, json)
Hash identifier:          E5BQdPYt5SWgJEU88u/xmF6bcB23YYkcFyP+MHdXLEw=
Subject key identifier:   21:3D:65:1B:5B:CA:00:16:FB:7C:BA:82:84:2C:BB:E5:30:54:A5:07
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2011
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IT1lG1vKABb7fLqChCy75TBUpQc.roa
Signing time:             Fri 25 Nov 2022 04:38:17 +0000
ROA not before:           Fri 25 Nov 2022 04:38:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.216.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8209 (0x2011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=213D651B5BCA0016FB7CBA82842CBBE53054A507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:81:5b:61:3e:95:93:27:d8:43:b9:7d:9f:
                    60:eb:cd:2f:3a:3b:dc:39:0d:8e:2e:2a:b6:2f:4c:
                    3f:59:e0:f7:2c:c5:19:ba:21:26:20:df:0d:12:49:
                    84:82:84:9c:0c:fd:22:b5:90:47:bc:9b:6a:74:b0:
                    cd:7a:06:a5:47:cc:fb:73:d1:d9:50:d1:9f:c4:10:
                    e6:37:20:20:60:7f:fc:10:0b:93:3f:36:c5:00:a4:
                    49:07:37:09:f1:7c:b3:41:6c:73:28:c6:50:b3:a9:
                    57:5f:8c:5a:1d:f1:14:16:d7:1d:3a:32:cc:3f:0f:
                    2e:d6:5f:78:92:c1:61:13:50:61:14:6f:87:39:cb:
                    d3:af:29:f8:87:ca:82:32:1d:d8:85:bd:9a:7c:d5:
                    b3:d2:fe:78:ad:92:1e:20:ab:bc:2d:40:a7:f4:e8:
                    09:1f:8b:b2:71:5e:af:16:8b:a0:6b:03:83:c9:8a:
                    32:87:8e:e8:76:b2:e0:4a:5a:6a:ef:32:9a:2f:78:
                    2c:20:2e:73:ef:53:7a:3f:fa:92:c7:92:ad:15:8b:
                    f8:3d:f7:95:b8:51:b0:f3:ba:9c:dd:18:c1:3f:59:
                    96:83:43:c2:4f:86:8f:d9:3f:3c:7f:51:88:2c:96:
                    88:12:11:f7:c9:2c:d9:da:27:aa:5a:98:6f:30:70:
                    4a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:65:1B:5B:CA:00:16:FB:7C:BA:82:84:2C:BB:E5:30:54:A5:07
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IT1lG1vKABb7fLqChCy75TBUpQc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:22:26:85:28:67:88:cf:bf:cc:bd:07:e4:44:b9:39:b0:56:
         fa:d6:8f:5b:34:f8:72:49:d4:f1:a8:74:5d:e9:e8:52:03:c7:
         77:a2:4a:27:9e:f2:46:2e:2a:67:cf:e7:8b:39:ae:0c:47:6d:
         04:ac:72:85:a7:28:86:64:35:d0:0f:1f:50:4c:24:69:5f:97:
         ae:d9:7d:13:d0:8c:47:c8:0f:27:27:49:68:0e:ea:80:7c:05:
         ac:6a:6d:52:a8:a6:4d:b7:91:41:70:d2:68:6b:13:ba:14:c2:
         da:8f:5c:cb:74:05:34:fa:d8:5a:18:14:21:ae:5f:4a:2c:a9:
         6d:d2:4d:c4:aa:00:a5:d3:99:47:76:31:41:66:b5:1d:6f:dd:
         53:96:5f:34:31:77:ae:52:91:79:2f:b8:72:0c:8e:4a:f2:d0:
         eb:3f:9e:54:64:c6:f2:81:ca:ca:53:f2:5d:c9:4b:79:9f:eb:
         41:c4:eb:3b:4f:a3:a6:2e:cf:e5:81:1b:12:42:ab:97:e8:14:
         ab:94:4e:57:4b:e0:9f:e6:66:dd:4f:71:e9:19:43:b9:9b:03:
         b2:e8:f4:5d:d9:d5:d9:6f:5a:83:6b:62:6f:66:ad:80:7f:e7:
         6c:32:55:be:95:ce:e1:8f:ab:9c:63:f2:1f:c1:4a:0e:c6:4b:
         6f:15:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:46 2025 by rpki-client