Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TB8JLQ7LkB9VRMxod7iUE9EmLjY.roa
File:                     TB8JLQ7LkB9VRMxod7iUE9EmLjY.roa (raw, json)
Hash identifier:          KSj3EI0BOI9mNeM/RUFtCJVXZVIJrglOGZ+pGEY1swQ=
Subject key identifier:   4C:1F:09:2D:0E:CB:90:1F:55:44:CC:68:77:B8:94:13:D1:26:2E:36
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TB8JLQ7LkB9VRMxod7iUE9EmLjY.roa
Signing time:             Thu 15 Sep 2022 02:53:46 +0000
ROA not before:           Thu 15 Sep 2022 02:53:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.88.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4C1F092D0ECB901F5544CC6877B89413D1262E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:e4:0d:a6:c4:68:f4:bf:39:d4:f9:49:fd:
                    cd:7f:ef:04:5b:65:b9:dd:1f:d2:d3:9d:ed:ee:e2:
                    55:c1:1b:24:d6:7b:f8:78:6e:c9:80:53:82:a6:c6:
                    7d:24:ff:56:85:92:6d:a8:f9:d6:bb:a4:dd:48:b3:
                    03:45:5f:6e:90:4c:62:3c:46:09:e1:a3:df:a0:29:
                    b5:3e:0f:2f:ee:8a:4b:c3:10:77:a5:df:4e:78:d5:
                    1c:7b:a1:59:b0:4e:62:ea:94:bf:b1:5c:f7:04:c1:
                    41:32:23:08:ff:2d:03:4e:42:51:49:51:f1:f0:f7:
                    74:6e:90:ce:9d:7d:f7:45:e0:43:e0:a7:09:ef:9f:
                    92:3f:19:db:02:89:82:6f:fe:01:20:cf:bb:b7:40:
                    fc:6e:5f:87:95:6f:8b:48:30:c8:75:94:a4:22:f3:
                    23:5f:88:16:2c:7e:a3:72:ab:cf:92:28:24:4b:7c:
                    85:69:9d:12:10:39:7d:eb:ac:5c:ba:98:9d:22:be:
                    c3:6f:bd:8c:a7:81:02:6e:0b:c4:3c:95:e0:49:76:
                    1e:bf:a5:a2:ad:b2:8c:ef:7a:76:95:0e:9f:f8:49:
                    19:ed:63:d0:c3:d9:be:e8:69:d6:43:fe:a2:ed:9b:
                    e9:77:da:3c:69:b7:cb:fe:0a:e1:d7:69:62:7e:8b:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:09:2D:0E:CB:90:1F:55:44:CC:68:77:B8:94:13:D1:26:2E:36
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TB8JLQ7LkB9VRMxod7iUE9EmLjY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:e8:d0:72:67:cd:46:20:93:11:e4:c2:2b:86:7f:d4:76:9b:
         21:8b:07:81:bb:ab:66:fe:7e:a5:ba:c3:2b:ae:fb:01:60:f5:
         d8:20:73:28:20:a7:a4:e5:dd:47:b3:08:6d:8c:75:72:82:40:
         62:5a:d6:28:40:7b:88:4c:ee:8c:18:29:ee:13:c0:6f:01:11:
         46:4b:b4:22:53:83:cf:a8:0f:41:89:bd:71:a5:4c:8e:40:de:
         be:cb:a0:27:4e:a9:70:ff:b9:d5:f1:ec:a2:1d:c4:97:3a:f8:
         cd:78:43:9e:b0:e1:15:51:10:5a:10:6a:87:8b:c7:58:9b:57:
         ff:90:e5:40:31:1c:a7:59:39:15:2b:31:fb:f7:a0:a4:58:dd:
         78:e9:46:ad:74:64:86:ab:bc:5b:80:27:26:28:61:26:72:ae:
         0b:88:08:03:34:5f:72:f8:40:c9:76:ea:fe:b1:62:89:69:8e:
         c7:0a:06:6e:d0:cc:cd:bb:d4:5a:7f:79:1e:04:80:86:1c:53:
         a8:0d:5a:ce:5d:6a:85:ed:44:c6:f2:ad:42:28:20:46:8e:2c:
         67:7f:e9:1e:a5:e2:3a:16:b3:5a:93:94:61:59:fb:9e:f2:cd:
         a1:1a:d5:25:06:a7:7e:9f:f4:0f:fb:6a:2c:13:3b:f0:a0:cc:
         f1:7d:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:37 2025 by rpki-client