Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VmjpnAWA7IDazpxYW7C8Mw4AHwk.roa
File:                     VmjpnAWA7IDazpxYW7C8Mw4AHwk.roa (raw, json)
Hash identifier:          V5YdXwKYnWLLKq2UVdKv7zAYSyR9jYWjThF8wqkcPas=
Subject key identifier:   56:68:E9:9C:05:80:EC:80:DA:CE:9C:58:5B:B0:BC:33:0E:00:1F:09
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       284E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VmjpnAWA7IDazpxYW7C8Mw4AHwk.roa
Signing time:             Fri 01 Sep 2023 10:05:11 +0000
ROA not before:           Fri 01 Sep 2023 10:05:11 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38841
IP address blocks:        106.1.99.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10318 (0x284e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  1 10:05:11 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=5668E99C0580EC80DACE9C585BB0BC330E001F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:19:82:bc:9a:8e:9a:02:9d:69:e1:bd:7c:
                    24:ca:d8:b1:cf:e5:6e:b4:94:ff:04:4c:c9:02:5a:
                    48:4e:3f:bb:20:c0:ae:f3:4a:81:ce:e7:9b:36:d7:
                    5d:8e:ec:78:d6:07:0a:9e:d7:75:6d:35:4f:56:d4:
                    4c:00:74:d5:5f:64:03:f5:78:3c:cc:87:64:e4:24:
                    35:07:3b:87:fb:9a:ab:a1:6c:02:7e:1d:ba:65:92:
                    99:a7:75:ce:d8:89:05:02:9c:c5:fa:98:83:0e:f0:
                    27:87:42:65:71:bc:1f:10:75:64:2c:68:ae:d6:ae:
                    0d:15:c6:99:86:26:08:a6:65:50:a2:b1:1a:b8:2b:
                    10:34:60:c8:b0:d2:15:08:99:7c:0a:5a:06:88:49:
                    4c:f2:78:e1:4c:6f:31:66:67:8f:eb:b5:b4:ec:03:
                    81:b2:bc:67:67:66:92:2f:14:38:6b:9b:01:d1:3a:
                    d9:28:d7:75:73:41:5e:75:f3:cf:65:cc:08:1b:67:
                    fe:2d:1a:0d:d3:4d:dd:0d:53:67:8b:b6:7d:84:fc:
                    f8:c6:fd:e5:a6:f8:58:1a:0b:43:dc:61:df:77:b4:
                    e1:6f:54:b3:8b:ce:48:89:df:02:cb:1f:6e:96:0b:
                    1e:ae:58:1a:49:7a:7e:d6:02:01:aa:4f:44:81:00:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:68:E9:9C:05:80:EC:80:DA:CE:9C:58:5B:B0:BC:33:0E:00:1F:09
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VmjpnAWA7IDazpxYW7C8Mw4AHwk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:31:8d:a4:f3:2a:3e:9c:26:ba:e0:38:5d:7b:c1:c9:4e:0f:
         7a:52:95:20:29:d5:6e:a6:88:c3:c9:cd:0f:13:d1:e9:b9:0d:
         3a:4b:5d:17:08:92:28:6e:1d:89:a3:56:65:aa:85:39:41:41:
         30:81:1d:d7:35:49:7a:5d:49:88:c0:d0:64:29:dd:ae:f1:5c:
         ad:9d:92:15:02:0e:18:d2:a6:ac:a3:2d:d6:0c:2e:33:4f:f7:
         75:3c:fc:87:41:86:0b:e0:4f:03:77:9f:a2:b2:44:b5:08:67:
         0b:52:6c:09:a0:a0:74:59:ed:ae:cb:b3:fa:93:c9:22:a2:81:
         3a:b6:2c:ea:b8:0b:06:37:6e:54:77:df:25:80:51:ce:93:88:
         19:be:ec:f6:ec:eb:5f:54:9d:6c:a7:7e:b8:cc:e7:25:2d:b7:
         34:39:5d:05:33:7b:b2:d2:16:86:3f:15:ce:ff:14:e4:c1:9f:
         13:2b:56:ca:7f:4d:ab:19:44:7f:d0:e5:11:e9:02:68:62:e1:
         e0:c9:de:fc:76:41:a8:8a:b1:f8:29:85:92:44:4a:08:bb:4f:
         fc:e7:21:c5:ce:da:32:a0:e9:5e:b6:17:5a:86:9c:d3:5b:cc:
         3b:fe:f3:d7:f8:f4:b3:c1:77:d2:06:81:b4:a9:04:a1:76:79:
         5c:b0:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:20 2025 by rpki-client