Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SkSqIVTiIhCx9zx8ymg2cclkRbs.roa
File:                     SkSqIVTiIhCx9zx8ymg2cclkRbs.roa (raw, json)
Hash identifier:          fqDMUY9+IpZNnr71ODzbB0eWLETtJ54pagGob4+YuQU=
Subject key identifier:   4A:44:AA:21:54:E2:22:10:B1:F7:3C:7C:CA:68:36:71:C9:64:45:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BCC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SkSqIVTiIhCx9zx8ymg2cclkRbs.roa
Signing time:             Wed 29 Sep 2021 02:47:00 +0000
ROA not before:           Wed 29 Sep 2021 02:47:00 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.223.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7116 (0x1bcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:00 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4A44AA2154E22210B1F73C7CCA683671C96445BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:fb:75:59:81:fc:f4:c9:ef:fa:14:88:1f:
                    32:98:51:39:b9:28:85:8b:ad:ba:44:84:ee:72:00:
                    9b:82:25:30:af:9e:10:d5:7d:23:82:a3:f0:0d:b9:
                    1f:3b:ca:12:4e:f8:57:2f:72:07:3e:ed:3a:fc:de:
                    00:1c:c9:22:67:02:ca:18:98:5c:9c:6f:51:3a:0a:
                    34:51:17:d3:ec:a7:91:f5:b0:c3:97:65:04:d1:07:
                    08:b5:77:a6:a8:bd:3e:5e:8a:2c:df:aa:0a:52:37:
                    4f:b6:17:67:54:3b:1b:27:3b:07:76:8d:ec:f4:b3:
                    84:99:94:aa:19:7e:f0:30:77:47:d8:0c:c1:dd:ee:
                    e6:4a:32:de:f9:33:e0:51:0d:d2:51:19:da:cd:ff:
                    45:9a:da:92:1c:c4:cb:69:d5:b1:aa:1c:28:15:d2:
                    56:1c:51:e8:7e:a1:8e:3b:70:a6:fc:8b:45:3f:ee:
                    bd:b0:f9:31:52:16:c4:bd:c5:1c:c8:b7:3a:08:93:
                    a7:ef:68:1a:e6:98:4e:3b:a4:ce:d1:28:e7:40:44:
                    7c:55:28:9b:13:9c:b1:75:c0:e4:e0:3a:21:28:80:
                    22:58:5e:f2:26:72:d8:8f:c7:5b:89:20:e4:ef:2f:
                    bc:63:74:04:20:7a:08:f4:58:34:da:79:04:33:8d:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:44:AA:21:54:E2:22:10:B1:F7:3C:7C:CA:68:36:71:C9:64:45:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SkSqIVTiIhCx9zx8ymg2cclkRbs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:0d:04:f0:d0:94:bc:b9:1f:9e:78:52:79:73:46:09:a5:
         67:3b:f3:db:4b:1a:b0:3e:2e:ac:a7:54:0d:d2:38:1c:46:aa:
         92:da:d2:55:f6:5e:d2:18:bb:a3:46:5f:25:a4:cf:3a:e7:df:
         ac:a1:09:34:1e:52:ad:e2:ae:2f:c8:c4:6d:28:5f:58:1d:0c:
         90:4e:de:b1:be:2b:94:5f:21:8f:f2:77:08:d2:ef:46:91:04:
         95:73:47:06:ef:9e:ce:6b:7c:b4:2a:4a:68:eb:6f:c9:1b:a9:
         4e:08:6e:a7:77:7b:c9:26:63:eb:fb:1b:4e:f7:0c:c7:30:4a:
         76:b9:89:9b:f1:c3:6d:72:81:8e:d1:70:9a:63:65:3a:99:2e:
         97:a8:7d:64:a6:6c:a8:11:d7:b1:4e:a7:74:69:36:75:7c:73:
         a3:ee:8d:3f:25:e2:b8:ad:96:7a:74:29:82:cb:91:b8:c0:53:
         b0:77:84:d5:68:cc:1a:fc:ba:f3:f4:28:5a:f0:f3:45:ce:47:
         c0:dc:a8:b4:2e:3d:dc:14:41:bc:b0:1d:23:fe:fd:2f:9d:0f:
         2a:32:23:9d:bd:4e:18:bd:6a:c5:74:fd:79:a9:52:7e:84:f4:
         9b:a2:73:7f:83:4f:b6:06:0d:a0:ea:8b:a5:77:67:0c:e1:8e:
         11:64:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:17 2025 by rpki-client