Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VmNTLGRXV9ffU2yBZ3_RQp5KRLs.roa
File:                     VmNTLGRXV9ffU2yBZ3_RQp5KRLs.roa (raw, json)
Hash identifier:          6yo8ucX+/4/5c+gyuKIBSWN9ZfVWMLtwiXulJYRNUkg=
Subject key identifier:   56:63:53:2C:64:57:57:D7:DF:53:6C:81:67:7F:D1:42:9E:4A:44:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VmNTLGRXV9ffU2yBZ3_RQp5KRLs.roa
Signing time:             Wed 29 Sep 2021 02:45:55 +0000
ROA not before:           Wed 29 Sep 2021 02:45:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        211.76.115.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6893 (0x1aed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5663532C645757D7DF536C81677FD1429E4A44BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:37:86:07:65:d0:d5:58:70:83:6e:7f:dc:
                    d1:aa:5f:10:59:b1:b0:2a:aa:a8:e5:e4:63:15:92:
                    89:9f:ed:86:e9:1d:e0:2d:69:06:e9:24:2c:15:5a:
                    b9:9a:f8:db:b5:e7:c0:d0:86:35:ec:29:da:3a:f6:
                    31:31:2d:68:75:60:ee:7f:fb:69:92:ae:12:8a:b0:
                    91:d8:3d:1b:dc:b1:3e:94:7a:4a:b5:55:80:d2:b5:
                    30:1f:7c:e0:5f:66:07:a6:0e:1e:7b:95:d8:61:3a:
                    f6:07:0a:fc:5c:f3:a3:4d:5a:44:33:1e:da:cd:21:
                    1b:ff:15:24:34:0e:d7:b0:21:cd:1a:ec:ba:19:77:
                    06:e4:9d:bf:8d:ff:6f:96:99:1f:5a:a2:44:4b:1c:
                    76:f6:0e:a2:08:bf:f6:85:3d:4d:7f:12:6e:e1:2b:
                    2b:11:b3:f7:07:18:19:40:35:77:f5:46:a7:4a:b1:
                    98:9b:26:b0:c6:ed:a5:56:cd:5c:1a:2a:3c:57:21:
                    ee:cf:97:bc:d2:37:cb:fb:98:b7:ee:9b:01:21:88:
                    29:71:c4:6d:5f:91:a9:11:d1:18:4a:e1:f2:20:ad:
                    28:53:00:a0:f7:da:37:24:53:f1:e9:cb:6a:44:60:
                    72:60:a0:a5:75:86:37:1a:42:dc:40:d8:9e:37:e5:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:63:53:2C:64:57:57:D7:DF:53:6C:81:67:7F:D1:42:9E:4A:44:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VmNTLGRXV9ffU2yBZ3_RQp5KRLs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:66:12:f2:ec:97:e0:04:78:58:ec:b6:05:aa:f0:25:d2:0e:
         de:eb:37:55:29:2b:24:aa:f6:75:d1:fb:9a:03:06:a5:b9:6d:
         b3:fc:eb:ff:b7:9b:86:15:fe:91:ee:5f:8f:d0:13:3f:e0:45:
         79:85:06:d7:64:fa:28:7b:d5:dd:0a:8a:bd:6b:51:67:f2:80:
         bb:3f:4f:42:14:44:a7:08:be:82:82:57:1f:4d:00:a6:c5:36:
         28:95:f0:f3:a5:f5:2f:83:1f:1a:63:4e:ce:fd:0a:a0:7b:d7:
         48:87:52:2e:c0:fc:ba:94:21:ef:bf:51:94:c2:b0:2a:2d:06:
         e7:67:1d:ba:a0:3e:12:ac:ce:46:3a:0b:05:3c:4e:f5:c0:8a:
         24:93:65:c2:a7:9a:9e:0c:25:a6:d1:c3:cd:7c:92:4e:3b:bb:
         bb:44:29:42:89:36:a4:5b:13:47:c9:5d:aa:86:09:bd:cb:83:
         e4:b3:e0:80:af:10:4c:7d:e0:19:4f:48:fe:13:ec:5a:bf:87:
         e1:ee:40:1a:27:b4:96:4b:e6:9b:ed:c4:88:7e:2f:8e:07:a7:
         46:1d:42:eb:94:50:28:3a:31:62:21:24:10:2a:d1:55:8b:57:
         25:1b:74:27:a1:61:ef:4d:64:d8:36:57:7e:7d:a7:37:08:07:
         54:88:af:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:21 2025 by rpki-client