Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUGDkruNrtIwkJwZD-1yG1Cpnwc.roa
File:                     KUGDkruNrtIwkJwZD-1yG1Cpnwc.roa (raw, json)
Hash identifier:          wdpJnXISSjUb2T5BbwbYcjftSk29KzgfAYZOxb3eMpk=
Subject key identifier:   29:41:83:92:BB:8D:AE:D2:30:90:9C:19:0F:ED:72:1B:50:A9:9F:07
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DA5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUGDkruNrtIwkJwZD-1yG1Cpnwc.roa
Signing time:             Tue 29 Sep 2020 09:54:47 +0000
ROA not before:           Tue 29 Sep 2020 09:54:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.246.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3493 (0xda5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=29418392BB8DAED230909C190FED721B50A99F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:47:71:c6:32:77:dc:04:85:d8:ae:1f:b3:
                    31:cb:39:9d:38:73:2e:87:3e:d2:bd:49:fc:5a:f8:
                    3f:e8:49:fa:81:5c:94:b0:72:fd:16:e5:f0:0f:18:
                    93:8f:5b:ba:44:0b:af:b2:c3:13:70:50:2e:68:05:
                    ce:17:37:b1:93:0d:74:b5:ea:70:2e:cb:70:a8:45:
                    e6:73:f4:33:2d:c9:63:fd:21:06:5e:1c:20:7b:39:
                    b0:ee:d8:92:2d:ef:f5:22:cf:e2:38:11:09:5e:fa:
                    0d:af:8e:6d:e0:7d:d1:36:ff:5a:6a:e2:50:23:bf:
                    6d:94:46:dc:ac:aa:a8:3c:58:d0:56:a3:de:5c:73:
                    1c:2c:e4:2e:f3:7b:25:94:9c:c9:6c:a9:2b:76:8b:
                    12:54:a8:c4:b3:25:57:90:ea:f2:77:4f:91:7f:08:
                    73:68:e3:d1:98:98:93:90:69:98:d6:7e:db:06:b3:
                    fd:0a:78:ce:2c:f0:66:78:af:e2:2d:29:1e:f9:8b:
                    39:dc:ce:88:cd:4b:82:9f:c2:95:2a:56:9c:7b:47:
                    b4:61:a6:38:30:b5:2c:46:de:46:5a:5c:25:bb:2c:
                    05:9d:40:6d:88:32:4c:c9:03:be:a4:35:c1:db:9f:
                    bc:4d:27:5f:b0:4a:88:88:c5:1a:f3:36:0a:c3:ed:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:41:83:92:BB:8D:AE:D2:30:90:9C:19:0F:ED:72:1B:50:A9:9F:07
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KUGDkruNrtIwkJwZD-1yG1Cpnwc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:7d:0a:31:4b:ff:0b:f1:bf:71:95:60:8a:89:c8:4f:9e:1d:
         e8:07:19:65:c6:cf:fd:93:bf:82:ec:12:ff:7e:47:c7:50:a1:
         9f:cb:cd:18:16:ee:c9:95:0b:3c:f3:b9:24:d3:1a:61:59:2a:
         08:59:a3:05:2e:a5:45:e1:38:38:85:6c:6f:4e:7c:7b:87:e8:
         31:7b:d5:e7:47:8e:30:83:24:9e:66:30:2b:ef:48:28:e3:7d:
         51:05:97:01:d6:99:e2:b5:fb:2e:e9:bc:da:27:6b:ea:c8:48:
         66:c1:9c:83:4a:ba:65:f0:38:5a:03:1a:a2:ce:64:d3:50:f0:
         fa:55:2d:a9:0c:c1:00:20:cf:5a:cf:a1:b5:3b:fa:a0:28:5b:
         8c:7a:23:75:a1:b8:d9:f5:17:15:11:ed:32:ca:28:95:a2:c0:
         04:1a:a6:97:e4:c0:95:4c:38:dd:85:58:b9:13:c0:0e:fe:f8:
         2b:f4:87:ca:3a:33:b4:1a:6e:f9:03:0d:85:2a:cc:a7:bb:94:
         c5:72:0c:34:8d:18:9b:37:e3:fc:bc:02:ab:66:f5:d5:15:fb:
         86:8f:c6:cc:b4:89:9a:79:28:48:8d:a8:cb:d0:d2:5d:cb:9c:
         40:ba:29:c9:2d:fa:b7:00:a3:2d:ed:eb:ab:de:0b:d8:78:f7:
         a8:ec:66:8e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI5NDE4MzkyQkI4REFF
RDIzMDkwOUMxOTBGRUQ3MjFCNTBBOTlGMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi5kdxxjJ33ASF2K4fszHLOZ04cy6HPtK9Sfxa+D/oSfqBXJSw
cv0W5fAPGJOPW7pEC6+ywxNwUC5oBc4XN7GTDXS16nAuy3CoReZz9DMtyWP9IQZe
HCB7ObDu2JIt7/Uiz+I4EQle+g2vjm3gfdE2/1pq4lAjv22URtysqqg8WNBWo95c
cxws5C7zeyWUnMlsqSt2ixJUqMSzJVeQ6vJ3T5F/CHNo49GYmJOQaZjWftsGs/0K
eM4s8GZ4r+ItKR75iznczojNS4KfwpUqVpx7R7RhpjgwtSxG3kZaXCW7LAWdQG2I
MkzJA76kNcHbn7xNJ1+wSoiIxRrzNgrD7fnpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKUGDkruNrtIwkJwZD+1yG1CpnwcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0tVR0RrcnVOcnRJd2tKd1pE
LTF5RzFDcG53Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w/YwDQYJKoZIhvcNAQELBQADggEBAHV9CjFL/wvxv3GVYIqJyE+eHegHGWXGz/2T
v4LsEv9+R8dQoZ/LzRgW7smVCzzzuSTTGmFZKghZowUupUXhODiFbG9OfHuH6DF7
1edHjjCDJJ5mMCvvSCjjfVEFlwHWmeK1+y7pvNona+rISGbBnINKumXwOFoDGqLO
ZNNQ8PpVLakMwQAgz1rPobU7+qAoW4x6I3WhuNn1FxUR7TLKKJWiwAQappfkwJVM
ON2FWLkTwA7++Cv0h8o6M7QabvkDDYUqzKe7lMVyDDSNGJs34/y8Aqtm9dUV+4aP
xsy0iZp5KEiNqMvQ0l3LnEC6Kckt+rcAoy3t66veC9h496jsZo4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:48 2025 by rpki-client