Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Uiiff-Cz03knpF_ETcyUo2sJKSg.roa
File:                     Uiiff-Cz03knpF_ETcyUo2sJKSg.roa (raw, json)
Hash identifier:          MTy6cNL5uJjawksiSt1J09jY0gdL0no1BOz/mYNAaUQ=
Subject key identifier:   52:28:9F:7F:E0:B3:D3:79:27:A4:5F:C4:4D:CC:94:A3:6B:09:29:28
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Uiiff-Cz03knpF_ETcyUo2sJKSg.roa
Signing time:             Thu 15 Sep 2022 02:52:52 +0000
ROA not before:           Thu 15 Sep 2022 02:52:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.68.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=52289F7FE0B3D37927A45FC44DCC94A36B092928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:50:d0:1f:eb:7f:c3:b2:7a:26:14:f6:ae:b7:
                    12:29:a7:2b:0e:92:27:12:74:ed:c9:9b:03:3b:04:
                    d5:f1:24:9b:4b:03:f9:e7:82:ec:7a:b4:eb:ce:4d:
                    00:86:71:a2:5d:8f:e1:71:06:89:f7:51:6a:31:b1:
                    06:26:95:bf:4b:9b:46:c5:53:ef:44:0a:ca:c3:3d:
                    ab:82:8e:04:e1:1e:6e:10:e0:00:f1:d3:d2:2e:da:
                    18:c6:b5:d4:2e:8b:c9:8c:05:fa:f3:8e:cd:b2:0c:
                    b5:3e:a9:cb:52:e0:e1:6f:8c:4e:65:6f:82:90:f4:
                    73:b6:59:24:30:6a:e5:a6:7f:86:35:4e:77:b6:23:
                    1c:73:87:ad:83:38:30:9b:b1:d0:19:f7:72:73:85:
                    db:35:ea:07:ac:84:74:bb:e3:40:af:59:da:d4:74:
                    3a:37:c4:b8:c3:3b:7b:39:10:4a:36:60:6a:bf:10:
                    3e:ab:14:38:de:17:19:bc:fe:0b:e1:17:9a:82:fc:
                    98:89:44:47:6d:64:71:84:9c:2e:ca:38:ae:2d:6a:
                    5e:f9:78:63:38:7d:dd:dd:6e:07:55:fd:95:07:b0:
                    d1:7a:14:72:91:51:77:1a:4a:5d:b4:4a:f0:5a:d3:
                    90:62:11:f8:c5:dd:6a:82:9c:ed:69:fd:6f:da:cd:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:28:9F:7F:E0:B3:D3:79:27:A4:5F:C4:4D:CC:94:A3:6B:09:29:28
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Uiiff-Cz03knpF_ETcyUo2sJKSg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:df:eb:04:06:9e:be:a7:a9:89:d7:18:f9:93:26:d4:2f:43:
         0a:d4:ae:9b:51:bc:07:9a:8d:ba:9f:b6:3b:44:60:ea:74:ac:
         fb:98:79:6b:10:c7:fe:4f:e2:17:ad:0d:3b:5e:a9:df:d4:db:
         51:a2:62:c7:41:07:92:f3:ab:8c:e7:25:ac:8c:72:3a:4d:33:
         da:75:f9:a9:59:df:65:bc:16:48:b1:bb:87:57:5e:ba:71:6b:
         0e:1f:03:d0:fc:fb:ac:23:bd:92:36:a8:e4:bb:50:b6:6b:3f:
         69:dd:28:a7:df:76:15:bb:2e:2a:be:76:d2:a0:7e:1a:28:51:
         39:4a:15:6b:67:de:9e:da:e2:47:ac:dc:26:78:be:5b:e0:ec:
         cc:a3:aa:27:11:d7:01:18:76:b4:71:4d:ae:6b:31:77:21:f0:
         3a:78:8f:79:e6:0e:db:d8:12:29:3e:62:c5:22:c0:96:c1:0a:
         52:5c:96:88:2b:3f:fd:53:e0:7e:a0:10:51:2e:29:7f:66:f6:
         72:dc:02:f6:43:35:6e:97:67:3c:14:d1:60:88:71:3c:e8:c1:
         b1:13:ab:10:73:8a:62:77:90:20:67:7a:81:4d:1d:be:bf:9d:
         9e:2e:8e:35:0c:f2:b3:e0:2b:e4:12:b5:32:61:ee:a1:7f:ae:
         c9:b8:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:05 2025 by rpki-client