Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WZM-lw3E5MmVL5lXfvTi0Ig6KSs.roa
File:                     WZM-lw3E5MmVL5lXfvTi0Ig6KSs.roa (raw, json)
Hash identifier:          dxmsH3jhyYoRRsttExAX2fiuzLIFcwQigmjL83dGIjw=
Subject key identifier:   59:93:3E:97:0D:C4:E4:C9:95:2F:99:57:7E:F4:E2:D0:88:3A:29:2B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16A9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WZM-lw3E5MmVL5lXfvTi0Ig6KSs.roa
Signing time:             Sun 07 Feb 2021 12:13:29 +0000
ROA not before:           Sun 07 Feb 2021 12:13:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.216.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5801 (0x16a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:13:29 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=59933E970DC4E4C9952F99577EF4E2D0883A292B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:fd:07:7b:33:74:47:56:f9:8b:8d:04:ff:
                    93:e9:86:64:ab:f7:2f:1a:e3:0f:06:ca:f4:e7:18:
                    58:c4:13:51:e4:c3:6a:9d:4d:98:18:05:9b:27:4b:
                    9d:ce:c3:ea:6b:bc:4b:88:c7:0c:a3:05:05:5d:69:
                    88:44:83:f2:19:39:8e:ff:ef:ac:9d:c2:7f:e6:93:
                    62:d8:29:18:c5:a5:dd:0b:cb:b6:22:b3:e3:3f:5c:
                    05:be:c5:ad:c8:8f:d0:24:4f:05:04:51:0f:ba:29:
                    97:86:c7:72:d2:e3:31:af:5f:c9:e7:8e:07:be:00:
                    f1:78:83:62:c8:17:f7:e5:e5:cd:6a:f6:92:b0:84:
                    a4:00:6c:63:41:21:9e:40:d9:3f:65:d8:92:e0:18:
                    da:18:29:99:02:ac:5b:78:53:8a:7b:03:c6:02:be:
                    b6:a9:6d:01:90:2f:83:d9:a8:73:3f:40:b0:71:43:
                    99:a3:ca:13:05:2c:3e:86:4d:0e:7a:5f:8a:23:59:
                    9a:ba:ab:c9:6f:dd:fc:23:9f:5e:17:11:07:47:44:
                    ed:ac:94:87:65:bc:c0:df:cb:c2:f0:21:e7:3c:83:
                    35:b2:8b:a1:39:55:b4:f0:fb:ff:97:62:35:f7:76:
                    70:b6:81:7d:cf:cc:cb:da:55:ba:2a:2e:27:9b:ad:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:93:3E:97:0D:C4:E4:C9:95:2F:99:57:7E:F4:E2:D0:88:3A:29:2B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WZM-lw3E5MmVL5lXfvTi0Ig6KSs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:a7:d0:34:6a:97:90:93:f4:da:ba:2a:ff:e5:61:9d:c1:
         da:14:11:a0:2a:c2:70:2c:e8:33:73:99:b9:87:01:98:c7:91:
         c3:f1:e2:74:65:8a:8a:fa:b8:b0:0a:7a:ad:b6:0a:e1:7a:be:
         4d:5a:8f:f9:a2:50:fc:96:34:93:6b:9e:f8:b1:40:67:cc:dc:
         5b:0c:31:07:57:8f:eb:2c:ad:4b:f6:7c:4d:96:27:f4:49:fa:
         a9:59:52:d3:23:7d:46:71:0b:1d:5b:9f:e6:15:94:37:dd:0c:
         66:06:98:03:fb:9c:55:5b:e9:6e:da:ab:b3:82:10:6b:a6:22:
         cf:0a:5c:1d:52:56:27:9d:92:00:95:65:44:e1:de:c0:96:16:
         4e:e5:01:b7:3d:98:cd:22:85:83:07:15:ec:ea:dd:76:28:0a:
         ee:34:70:63:9d:10:57:26:3b:3c:72:4c:87:d1:bd:2d:91:18:
         bc:82:36:15:2c:c2:1d:50:65:97:f3:96:c6:6c:8d:d0:64:a2:
         1c:db:88:40:7c:e0:4c:c6:20:f3:0e:61:29:1a:ef:1c:c5:e2:
         6b:e0:b2:eb:62:d2:eb:58:7f:9e:9c:3d:4e:62:6c:39:e8:55:
         d8:71:3a:a0:e9:fa:b6:32:dc:4d:98:03:c6:b8:6f:7f:59:13:
         e9:69:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:35 2025 by rpki-client