Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N_77GzSSOqWYoIaTnl9Lw6INS5s.roa
File:                     N_77GzSSOqWYoIaTnl9Lw6INS5s.roa (raw, json)
Hash identifier:          MRsQXuqhY5xEQHo4uO6S/7SuDfQy532C9zxb69qxyWM=
Subject key identifier:   37:FE:FB:1B:34:92:3A:A5:98:A0:86:93:9E:5F:4B:C3:A2:0D:4B:9B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N_77GzSSOqWYoIaTnl9Lw6INS5s.roa
Signing time:             Thu 15 Sep 2022 02:45:49 +0000
ROA not before:           Thu 15 Sep 2022 02:45:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.205.64/26 maxlen: 26
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=37FEFB1B34923AA598A086939E5F4BC3A20D4B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:d6:34:d4:c7:4c:50:d2:fe:81:bc:2e:26:
                    b6:c4:1f:bd:35:7f:b0:c4:af:78:7e:6e:eb:62:ae:
                    c1:b3:82:50:f9:a7:d1:69:a7:bb:39:02:9c:2f:7e:
                    f0:09:59:f9:df:14:41:66:8e:f9:2f:91:0c:17:70:
                    fb:ca:8c:e5:42:12:8d:85:f9:69:02:60:01:14:3e:
                    75:ec:44:e2:42:18:36:0e:be:a2:95:9d:fc:a5:0f:
                    c5:26:ef:83:ca:6b:a6:a4:0e:4c:31:34:31:cc:9d:
                    e8:cd:a8:19:17:f9:f2:ba:aa:2d:8d:c7:a0:64:b6:
                    21:a7:e8:dd:b5:2e:ef:e3:e4:fb:ff:25:1a:fa:e2:
                    9d:54:7c:8a:99:d8:2f:39:8f:69:ad:91:8d:f2:62:
                    10:6a:d5:f1:e6:b7:c7:c1:a9:bd:2c:0e:a7:99:28:
                    27:2c:2d:38:0b:a7:a5:ce:eb:08:2d:20:c0:54:f7:
                    61:18:bd:a4:d6:e3:23:10:3d:2e:47:ef:8c:db:08:
                    97:74:38:69:8f:87:72:ea:01:15:39:bc:06:35:fa:
                    f8:12:48:64:a8:3d:1b:be:eb:a2:1e:7f:47:2b:ac:
                    5b:09:a0:21:a1:f6:f1:2e:64:03:63:4c:47:91:6a:
                    5c:fc:7e:ff:74:29:4f:92:59:05:f1:65:78:90:1b:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FE:FB:1B:34:92:3A:A5:98:A0:86:93:9E:5F:4B:C3:A2:0D:4B:9B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/N_77GzSSOqWYoIaTnl9Lw6INS5s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.64/26

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:65:c9:3a:e9:ed:ca:4b:29:38:04:9e:17:33:1e:5d:c3:
         af:c3:29:63:8d:f1:55:3b:55:b5:11:f5:9a:c1:3d:f7:1c:ce:
         70:f8:79:a6:0d:28:43:7b:38:c2:66:16:1b:5b:90:b2:f3:e2:
         fb:6b:eb:0b:d8:43:bb:54:d4:78:06:06:5d:46:fb:da:6b:dc:
         d9:43:72:8a:51:1d:65:ff:cb:cc:e0:e3:f1:81:47:8a:bf:33:
         5a:33:61:99:12:c0:11:a1:fd:1f:65:e1:04:f4:30:ed:fb:9b:
         81:56:71:22:11:60:e4:37:0e:36:c0:fd:57:1e:17:b1:f6:45:
         db:2f:82:6d:31:87:53:35:b2:7d:fc:a9:37:15:30:05:c5:ff:
         08:4a:53:2b:df:8e:dd:b0:c4:b4:b3:f9:25:9f:7a:14:54:e2:
         41:04:c2:fe:40:f2:ae:75:a5:ad:36:df:31:0c:cf:45:17:8b:
         c4:cb:e8:e3:f6:2c:d1:08:b4:2a:b4:37:c4:ec:a8:11:d2:fa:
         ae:9f:e9:a2:f3:cc:ad:1c:d0:c5:30:9c:13:ba:24:a8:cf:c0:
         46:07:27:55:ee:4c:dd:2c:49:a7:82:2e:f4:2a:8b:53:ec:de:
         bc:ba:95:03:b2:eb:43:62:5f:16:9b:00:26:4d:96:d7:06:3c:
         75:9b:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:33 2025 by rpki-client