Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N-bli-9QTU-Ogs9_B9QvDIBSBck.roa
File:                     N-bli-9QTU-Ogs9_B9QvDIBSBck.roa (raw, json)
Hash identifier:          T8Oxw47wyPz0DApLAoVbvf/XK4e34Lq2kLMwAwH6IG8=
Subject key identifier:   37:E6:E5:8B:EF:50:4D:4F:8E:82:CF:7F:07:D4:2F:0C:80:52:05:C9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       212E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N-bli-9QTU-Ogs9_B9QvDIBSBck.roa
Signing time:             Fri 25 Nov 2022 04:39:36 +0000
ROA not before:           Fri 25 Nov 2022 04:39:36 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.200.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8494 (0x212e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:36 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=37E6E58BEF504D4F8E82CF7F07D42F0C805205C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:39:1a:49:b8:34:cb:84:a5:57:25:97:8f:
                    1c:89:c7:30:0b:f8:50:4a:6b:9f:8b:75:5a:24:ee:
                    5f:ac:75:f9:5a:75:d5:c5:24:78:1d:1a:e9:f0:0d:
                    47:d3:51:8b:f5:50:72:87:ec:df:b1:dc:a0:47:91:
                    4a:46:68:91:be:d7:6a:98:5f:23:b1:07:b1:2e:a1:
                    a2:f2:3f:cd:99:30:c9:3d:a4:f2:6c:ee:23:f0:4a:
                    5a:f6:4f:fd:2b:72:9a:c3:c8:7e:05:60:63:b5:e6:
                    74:ca:93:72:93:d4:51:18:f6:d5:3d:b4:c5:5b:58:
                    54:8c:7e:27:c6:82:1f:a5:1c:c6:45:05:65:26:87:
                    b1:9c:48:3b:e4:d3:09:f5:8f:69:2d:d1:17:5c:0d:
                    8d:84:28:29:9c:8e:5f:18:4d:cc:7a:02:8a:63:89:
                    be:43:09:ea:21:5f:86:52:ab:83:45:6c:74:4e:ef:
                    d4:a3:9d:de:62:f1:d5:73:7b:d7:8e:47:11:d9:67:
                    f3:7e:d2:32:e6:4f:71:34:74:8e:d7:c8:b7:72:bb:
                    be:c9:23:e4:44:8c:aa:24:2c:6f:a2:f5:0e:96:0a:
                    d0:ac:9e:9e:86:eb:28:6b:65:a5:40:29:88:9b:0f:
                    6d:07:49:de:5b:5e:17:a4:ff:0d:6f:54:3c:e5:84:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E6:E5:8B:EF:50:4D:4F:8E:82:CF:7F:07:D4:2F:0C:80:52:05:C9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N-bli-9QTU-Ogs9_B9QvDIBSBck.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:bf:cc:3d:b2:c4:fc:d9:fb:d3:30:1c:ad:ca:09:dc:9e:c6:
         5a:22:40:c6:ef:c8:28:20:bb:3a:fc:ab:f5:e8:e0:e4:78:b7:
         35:39:7b:36:a8:a3:dd:d1:94:6d:06:5d:87:d6:68:d2:3e:4c:
         a1:26:10:ec:29:6e:df:cb:af:05:27:09:83:72:99:7a:51:a0:
         32:17:af:f8:b9:29:0f:91:1e:6e:1c:23:17:cc:e5:9c:4b:70:
         50:00:28:ce:1f:6a:8f:5d:97:52:45:33:59:ae:fb:b4:0b:65:
         03:25:04:71:ce:35:f9:c7:87:93:a0:67:ff:92:08:b6:f1:4c:
         a0:d4:bd:01:9c:dc:21:ea:c1:64:f4:0b:03:ba:17:7a:55:63:
         cd:bc:f3:2c:f5:8f:7e:6d:99:d3:1a:50:1e:da:31:28:17:b8:
         b7:1b:3a:4c:f6:d8:23:5c:22:3d:ff:af:25:7e:47:fd:f5:5c:
         86:a1:d0:28:70:4d:93:e8:26:d6:04:4d:23:ad:26:12:4b:00:
         68:df:b7:9f:9d:72:20:6f:c9:ba:6a:cf:48:9e:97:d3:09:fc:
         2d:f7:32:93:68:0a:24:95:1d:40:a0:bc:1b:65:3b:cb:b5:d9:
         3b:76:95:9d:e1:3a:35:4b:d0:f4:76:b2:2c:24:31:11:19:cc:
         06:17:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:22 2025 by rpki-client