Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T71mxywsFWEZc_6O6EHSkb2-Stg.roa
File:                     T71mxywsFWEZc_6O6EHSkb2-Stg.roa (raw, json)
Hash identifier:          RFOFS3RhlOJW3zQN0vVCLCC7PvKSvU3XuBESEuL08xU=
Subject key identifier:   4F:BD:66:C7:2C:2C:15:61:19:73:FE:8E:E8:41:D2:91:BD:BE:4A:D8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E98
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T71mxywsFWEZc_6O6EHSkb2-Stg.roa
Signing time:             Tue 29 Sep 2020 09:55:55 +0000
ROA not before:           Tue 29 Sep 2020 09:55:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.172.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3736 (0xe98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4FBD66C72C2C15611973FE8EE841D291BDBE4AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:cb:1a:88:c4:3d:61:53:bc:8d:f6:84:a2:
                    69:42:52:b3:6e:6d:38:25:78:d0:f2:d8:f8:b8:1a:
                    b6:fa:b5:5c:f8:17:3b:7d:72:68:0d:ab:d7:9c:65:
                    d1:b2:be:22:46:3f:8a:aa:93:da:9a:e9:27:f5:bb:
                    e5:8b:ff:68:36:a8:58:9d:7f:49:73:fa:4f:fb:fe:
                    14:b0:21:60:80:14:05:69:af:a6:b1:e3:b1:db:f4:
                    05:24:66:4d:df:56:33:71:ab:ed:3a:6e:fe:79:58:
                    c3:22:c3:0c:4a:7f:3d:5d:94:4a:f0:6b:90:cb:93:
                    b6:f1:c4:d6:df:33:39:5c:63:07:6f:b2:8e:13:b5:
                    4f:13:48:74:49:fd:be:47:00:59:7f:91:61:da:c3:
                    7d:b2:59:7a:1f:4a:d4:04:91:30:2b:ec:ce:26:f7:
                    d2:37:05:c9:45:16:82:d0:23:01:5e:78:3b:2f:0b:
                    25:78:eb:09:7c:06:72:9b:16:be:c7:42:24:82:05:
                    fc:9e:93:f5:83:90:93:7e:63:a0:a5:88:fb:61:55:
                    17:14:59:43:72:b0:85:bd:d8:42:ad:98:f3:cc:86:
                    26:c5:7b:c8:e1:2d:0e:cb:8d:0b:a0:01:ff:57:16:
                    e5:35:29:5a:b9:03:18:15:8e:03:c2:d4:2b:d7:93:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BD:66:C7:2C:2C:15:61:19:73:FE:8E:E8:41:D2:91:BD:BE:4A:D8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T71mxywsFWEZc_6O6EHSkb2-Stg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:d8:bd:76:04:26:d3:13:c7:6e:53:22:80:16:43:9f:c0:
         bc:41:cc:24:9a:2d:3b:91:7e:bd:09:15:99:66:20:11:32:3c:
         f1:97:fb:a7:98:b2:dd:f6:a3:22:7b:77:31:8e:91:98:f5:49:
         2b:7f:49:43:be:e8:ce:de:b0:55:a7:03:f7:38:8c:ff:3a:4c:
         d4:b2:61:e4:a4:82:38:8c:a0:c4:a6:44:89:f2:29:96:b0:f4:
         0c:4c:9d:94:1d:8e:dc:ab:91:7b:8c:1b:1c:fc:40:2c:d7:98:
         99:8c:f9:80:0e:ab:9d:64:b5:52:43:40:d0:8d:ab:8b:49:06:
         8c:fc:f1:be:73:d2:ee:2c:89:36:6f:46:1d:67:bd:89:8d:3a:
         3a:15:69:d5:7c:b0:a3:ce:82:51:46:48:4d:5f:7d:a6:26:05:
         57:ca:90:34:b3:4e:01:44:8a:f0:32:a8:84:a2:d3:b7:6a:36:
         35:0a:2a:f2:b4:0c:ad:30:20:32:4d:68:34:c2:1b:ee:30:84:
         f5:c0:2d:63:f9:d9:c3:42:16:e4:a4:85:a1:23:73:8d:a0:b2:
         e7:4d:5c:1c:f4:76:3d:c6:ec:ee:c0:cb:eb:05:db:20:da:b6:
         e7:04:9b:b4:f1:2c:15:39:76:99:a5:b2:4f:a1:9e:1c:ba:fa:
         a8:25:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:37 2025 by rpki-client