Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X1VQMzqP4uEFm9yjdKhY6tU25OI.roa
File:                     X1VQMzqP4uEFm9yjdKhY6tU25OI.roa (raw, json)
Hash identifier:          GtqRMr2rDwhWz7OLE74oemO0jkcpg58Jj8TljeMEeRg=
Subject key identifier:   5F:55:50:33:3A:8F:E2:E1:05:9B:DC:A3:74:A8:58:EA:D5:36:E4:E2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D55
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X1VQMzqP4uEFm9yjdKhY6tU25OI.roa
Signing time:             Wed 29 Sep 2021 02:48:52 +0000
ROA not before:           Wed 29 Sep 2021 02:48:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        180.177.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7509 (0x1d55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5F5550333A8FE2E1059BDCA374A858EAD536E4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:aa:07:51:35:3e:f9:7c:b9:ca:75:c4:89:aa:
                    c6:a0:31:c5:4e:60:e7:8b:59:9d:33:d3:cc:64:26:
                    7d:b1:52:ee:59:e3:3d:30:41:c5:47:51:8e:b7:f0:
                    74:81:84:0b:9e:ab:8f:83:ad:db:3f:1b:5b:ee:80:
                    d3:ba:66:31:cf:62:74:38:33:57:39:cf:7a:05:b9:
                    1d:f4:c9:0e:b6:8e:9d:4e:6e:e9:27:d5:6f:ce:24:
                    46:de:9c:07:cf:ed:51:0d:e8:db:c3:7b:36:b0:c5:
                    18:7d:6c:c0:cb:d6:28:62:0e:a2:fd:0e:d2:18:22:
                    f7:45:79:05:88:32:e1:68:23:62:4c:6b:95:fe:9b:
                    54:74:c4:5c:3e:f3:77:23:34:b3:d9:d4:9a:45:a9:
                    b0:a0:a3:b2:54:da:7a:3d:02:5d:27:76:3a:4c:bf:
                    3e:9d:ad:a3:63:67:87:4e:87:01:73:3f:9a:80:84:
                    f7:c9:44:51:71:73:c9:66:8d:76:ad:2b:db:c5:14:
                    29:d5:35:9c:02:2f:c3:ec:72:aa:f0:c0:08:7f:a6:
                    a5:87:3f:4f:cb:76:4b:93:b6:4c:27:6c:27:a5:87:
                    6d:02:7c:0c:8f:ca:b5:6d:fe:e2:22:53:b1:4a:43:
                    4c:5a:4c:f7:f6:35:3c:c5:96:c4:0b:60:fd:94:e7:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:55:50:33:3A:8F:E2:E1:05:9B:DC:A3:74:A8:58:EA:D5:36:E4:E2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X1VQMzqP4uEFm9yjdKhY6tU25OI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:ba:93:ac:81:5a:4f:60:92:80:2f:0d:cc:48:db:a4:41:02:
         05:77:f5:a2:1a:d3:79:62:f3:c4:f0:7a:8b:ff:48:d8:30:f7:
         95:a2:a4:d3:08:ca:7d:79:3e:84:f1:48:a1:63:43:16:72:d7:
         ff:8e:1d:c2:3b:12:7f:33:38:97:b4:4e:6e:64:08:b9:07:b3:
         b7:7f:1b:5d:53:b3:f1:5f:3d:40:b5:eb:63:ad:b9:f9:bf:7a:
         73:f7:d3:82:53:c3:22:97:b7:b7:85:3b:8a:0c:9d:30:2c:2e:
         87:49:67:29:42:d9:55:fb:17:57:12:18:61:55:3c:f9:93:25:
         41:6c:54:8d:20:23:e4:16:01:f3:e5:af:e4:63:f3:c7:22:dc:
         2f:15:61:80:9e:6e:35:83:db:8f:71:c7:e9:3f:95:80:aa:2c:
         75:d3:18:7d:0f:91:4c:34:9d:a9:83:ff:6f:5d:18:0f:5d:a2:
         e4:f2:59:06:37:50:8b:94:e1:c5:a1:5c:a3:2f:48:83:f8:ef:
         90:8c:65:03:ea:d8:ce:2e:11:5c:43:3a:82:66:97:c4:b5:f2:
         43:a2:00:9f:4b:5e:0f:01:94:a8:91:4f:40:d1:a0:b3:90:db:
         e9:8d:31:5b:e3:39:a3:f7:2c:2f:f8:29:fc:ff:8f:e7:09:b8:
         05:1a:13:7a
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICHVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4NTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDVGNTU1MDMzM0E4RkUy
RTEwNTlCRENBMzc0QTg1OEVBRDUzNkU0RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSqgdRNT75fLnKdcSJqsagMcVOYOeLWZ0z08xkJn2xUu5Z4z0w
QcVHUY638HSBhAueq4+Drds/G1vugNO6ZjHPYnQ4M1c5z3oFuR30yQ62jp1Obukn
1W/OJEbenAfP7VEN6NvDezawxRh9bMDL1ihiDqL9DtIYIvdFeQWIMuFoI2JMa5X+
m1R0xFw+83cjNLPZ1JpFqbCgo7JU2no9Al0ndjpMvz6draNjZ4dOhwFzP5qAhPfJ
RFFxc8lmjXatK9vFFCnVNZwCL8PscqrwwAh/pqWHP0/LdkuTtkwnbCelh20CfAyP
yrVt/uIiU7FKQ0xaTPf2NTzFlsQLYP2U5+UNAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUX1VQMzqP4uEFm9yjdKhY6tU25OIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1gxVlFNenFQNHVFRm05eWpk
S2hZNnRVMjVPSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC0
sTANBgkqhkiG9w0BAQsFAAOCAQEARLqTrIFaT2CSgC8NzEjbpEECBXf1ohrTeWLz
xPB6i/9I2DD3laKk0wjKfXk+hPFIoWNDFnLX/44dwjsSfzM4l7RObmQIuQezt38b
XVOz8V89QLXrY625+b96c/fTglPDIpe3t4U7igydMCwuh0lnKULZVfsXVxIYYVU8
+ZMlQWxUjSAj5BYB8+Wv5GPzxyLcLxVhgJ5uNYPbj3HH6T+VgKosddMYfQ+RTDSd
qYP/b10YD12i5PJZBjdQi5ThxaFcoy9Ig/jvkIxlA+rYzi4RXEM6gmaXxLXyQ6IA
n0teDwGUqJFPQNGgs5Db6Y0xW+M5o/csL/gp/P+P5wm4BRoTeg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:07 2025 by rpki-client