Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UFFZafwQsOUS4AKRlFH9zDRbKjw.roa
File:                     UFFZafwQsOUS4AKRlFH9zDRbKjw.roa (raw, json)
Hash identifier:          04kMQeUzlabSPnz8VVLgl3g/g4tAIc9st2wru/h/UWA=
Subject key identifier:   50:51:59:69:FC:10:B0:E5:12:E0:02:91:94:51:FD:CC:34:5B:2A:3C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F47
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UFFZafwQsOUS4AKRlFH9zDRbKjw.roa
Signing time:             Tue 29 Sep 2020 09:56:44 +0000
ROA not before:           Tue 29 Sep 2020 09:56:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.115.0/25 maxlen: 25
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3911 (0xf47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=50515969FC10B0E512E002919451FDCC345B2A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:3e:65:48:49:96:6e:82:7a:eb:96:d6:1b:
                    6a:f8:74:42:46:fd:70:ab:7a:0d:e8:e4:c4:95:74:
                    86:4a:82:99:1f:b9:59:5e:91:f1:64:9a:bd:60:b7:
                    7a:04:73:34:d5:33:eb:20:36:59:cf:46:b4:ab:00:
                    9d:7c:7b:53:6b:a7:6d:17:ac:a5:a2:b2:58:97:c8:
                    cd:f8:66:20:d5:08:fb:46:78:6c:83:57:72:52:16:
                    95:08:60:04:99:70:ba:36:a0:fd:10:e2:37:4a:64:
                    87:2a:db:b9:8f:cc:27:80:1a:a4:f2:e3:50:0f:09:
                    6a:6f:c0:b6:35:ce:41:3e:2e:2c:25:b2:1a:75:b4:
                    ad:22:4c:71:69:72:cc:cc:c8:84:5c:b0:98:fb:b2:
                    b8:00:1a:73:e3:27:39:88:f1:9b:34:7f:76:7f:ea:
                    2b:e7:8f:35:0e:02:d2:b9:6f:ec:b8:fe:65:69:a4:
                    29:f0:6c:7e:3b:23:d1:3a:dc:25:1c:6f:f6:a5:49:
                    e4:97:d4:09:5b:55:56:57:59:6a:ba:db:80:60:13:
                    2e:1a:9e:51:12:72:5b:19:6e:dd:8e:74:28:0d:1c:
                    fd:13:57:ec:75:90:58:66:c2:2b:40:39:fc:10:ff:
                    78:40:a3:bf:7a:14:80:ba:20:0f:2d:ad:6d:97:87:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:59:69:FC:10:B0:E5:12:E0:02:91:94:51:FD:CC:34:5B:2A:3C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UFFZafwQsOUS4AKRlFH9zDRbKjw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.0/25

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:ad:36:06:22:08:ce:f3:51:7f:8b:b8:c4:00:c0:a7:3e:
         ba:07:5c:2f:ac:70:33:39:c2:cd:7e:8b:87:16:81:85:ce:1c:
         5e:85:75:23:dd:a0:9d:b1:8e:09:98:2c:46:43:22:30:7c:21:
         58:77:af:e8:0e:40:0d:f0:d5:2a:87:dc:47:dc:a9:f5:bc:d2:
         05:7c:fb:20:b3:d4:a8:52:11:bf:9f:79:7f:52:59:55:0d:80:
         a4:2f:fa:8c:0b:71:81:cf:b4:11:a4:5d:cc:04:9e:45:bb:1f:
         b3:d1:2b:83:7b:0f:00:8f:79:56:11:ec:72:62:8f:dc:c5:4c:
         51:98:b3:e0:f5:fd:07:f4:67:0e:c9:fc:aa:53:18:1d:21:14:
         ba:fa:6c:35:8c:ff:55:e2:d8:dc:b5:23:5f:4c:a5:fe:77:99:
         b5:7a:dc:89:9b:bd:0e:db:4c:2c:df:75:39:ca:7b:f8:44:ad:
         aa:0d:e7:7e:96:f3:38:82:25:1f:41:52:93:02:aa:a8:fb:44:
         33:34:84:d3:20:97:78:d4:29:7a:f9:72:89:37:38:a3:6d:f1:
         d3:b1:da:1b:d1:f4:bb:c9:7a:94:63:53:75:4b:96:9b:c4:36:
         d1:9e:86:da:6d:92:1c:64:bc:bb:8a:88:c2:56:d7:22:43:57:
         6e:f1:63:81
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICD0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDUwNTE1OTY5RkMxMEIw
RTUxMkUwMDI5MTk0NTFGRENDMzQ1QjJBM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/Rj5lSEmWboJ665bWG2r4dEJG/XCreg3o5MSVdIZKgpkfuVle
kfFkmr1gt3oEczTVM+sgNlnPRrSrAJ18e1Nrp20XrKWisliXyM34ZiDVCPtGeGyD
V3JSFpUIYASZcLo2oP0Q4jdKZIcq27mPzCeAGqTy41APCWpvwLY1zkE+Liwlshp1
tK0iTHFpcszMyIRcsJj7srgAGnPjJzmI8Zs0f3Z/6ivnjzUOAtK5b+y4/mVppCnw
bH47I9E63CUcb/alSeSX1AlbVVZXWWq624BgEy4anlESclsZbt2OdCgNHP0TV+x1
kFhmwitAOfwQ/3hAo796FIC6IA8trW2Xh6RXAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUUFFZafwQsOUS4AKRlFH9zDRbKjwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VGRlphZndRc09VUzRBS1Js
Rkg5ekRSYktqdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THMAMA0GCSqGSIb3DQEBCwUAA4IBAQA6zq02BiIIzvNRf4u4xADApz66B1wvrHAz
OcLNfouHFoGFzhxehXUj3aCdsY4JmCxGQyIwfCFYd6/oDkAN8NUqh9xH3Kn1vNIF
fPsgs9SoUhG/n3l/UllVDYCkL/qMC3GBz7QRpF3MBJ5Fux+z0SuDew8Aj3lWEexy
Yo/cxUxRmLPg9f0H9GcOyfyqUxgdIRS6+mw1jP9V4tjctSNfTKX+d5m1etyJm70O
20ws33U5ynv4RK2qDed+lvM4giUfQVKTAqqo+0QzNITTIJd41Cl6+XKJNzijbfHT
sdob0fS7yXqUY1N1S5abxDbRnobabZIcZLy7iojCVtciQ1du8WOB
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:31 2025 by rpki-client