Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OJWo6YHbaPqe4EaOb6sXGPzItm8.roa
File:                     OJWo6YHbaPqe4EaOb6sXGPzItm8.roa (raw, json)
Hash identifier:          VPbo2UpuyycKBH56Z8eCSV8g3+60awShU4Mmu6AsBi0=
Subject key identifier:   38:95:A8:E9:81:DB:68:FA:9E:E0:46:8E:6F:AB:17:18:FC:C8:B6:6F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DC9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OJWo6YHbaPqe4EaOb6sXGPzItm8.roa
Signing time:             Tue 29 Sep 2020 09:54:59 +0000
ROA not before:           Tue 29 Sep 2020 09:54:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        211.76.121.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3529 (0xdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3895A8E981DB68FA9EE0468E6FAB1718FCC8B66F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:59:a3:e7:04:68:ec:d5:f6:ae:0f:78:e0:
                    af:26:ae:eb:5c:9a:b3:2d:96:81:36:be:a4:4d:0e:
                    c5:87:36:0e:11:02:5f:4d:8b:32:60:82:70:71:a3:
                    f1:b6:85:dd:29:52:3f:16:41:81:24:91:9d:d4:7d:
                    f3:2f:de:3e:8b:49:fc:11:f7:d0:e6:ae:85:14:70:
                    9d:7b:8a:14:a8:58:d1:3b:56:df:73:05:1e:6b:ba:
                    53:44:14:c3:31:e6:2b:f1:cc:0a:4b:29:fb:aa:fb:
                    4a:e6:c8:b5:3c:3e:8b:4e:bb:53:86:c4:86:48:37:
                    a2:86:72:e4:60:5f:0d:a1:f6:77:66:aa:cf:77:df:
                    40:46:df:fe:ac:94:2c:5c:b2:09:2a:31:7e:18:ff:
                    0f:de:9e:83:79:a0:99:fa:3a:d9:d9:28:9b:f8:85:
                    f8:41:71:b8:3e:ce:0c:2d:fb:4d:be:ef:0a:36:ff:
                    a9:36:d4:ac:a3:ec:4b:72:b7:77:25:7b:90:92:f3:
                    4e:df:52:45:28:06:6a:a2:15:c7:50:9d:8a:cb:87:
                    2a:6f:7a:a4:8d:c8:80:04:c5:29:ab:ce:f2:5a:44:
                    e0:d2:f8:ec:3b:29:b9:1e:d2:1b:67:53:3d:20:5e:
                    eb:f7:01:24:b6:5b:fa:df:37:3f:bf:cb:d0:13:30:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:95:A8:E9:81:DB:68:FA:9E:E0:46:8E:6F:AB:17:18:FC:C8:B6:6F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OJWo6YHbaPqe4EaOb6sXGPzItm8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d8:52:67:63:15:91:8b:f1:a1:e8:04:1d:6c:9b:63:9c:10:
         a0:6d:ed:61:49:df:06:08:54:ae:7f:d7:6a:ac:12:ef:eb:3e:
         1a:6d:f2:99:1f:cb:bf:78:d1:2a:44:96:a1:f2:d3:30:49:42:
         4e:b2:fe:2e:87:dd:7c:a9:07:41:49:a2:6b:84:a3:8e:a9:de:
         6e:0d:64:c1:09:7b:38:d3:77:a0:fc:14:ff:3e:9b:0d:6c:01:
         3f:37:e7:d0:32:0c:a5:aa:6f:a5:a2:54:ce:bc:b7:3b:a1:b1:
         99:f4:78:ff:49:db:18:3f:06:ef:07:fc:47:13:65:c2:e6:43:
         ea:57:11:ca:1e:52:78:74:f0:6e:61:28:fd:af:19:16:64:1e:
         a6:cc:21:bc:bc:de:65:99:28:ff:3e:74:e8:7e:ad:28:5e:8b:
         f2:a6:fb:d7:94:45:52:63:da:51:32:08:fd:19:df:5b:1a:2c:
         56:9e:c0:aa:ff:9a:1a:45:61:d6:ae:5e:ea:56:a9:35:7d:b6:
         b7:ab:66:29:72:cc:02:2d:73:6e:22:54:01:7d:70:f7:13:a9:
         5e:c9:ed:d3:0b:5e:a3:e9:e7:e7:ee:3d:2e:63:47:13:70:13:
         14:95:fb:32:81:7d:dd:33:57:09:b3:51:16:57:01:c5:f4:72:
         39:5a:90:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:47 2025 by rpki-client