Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xf_vdwPWFETl7CQMeywK0pC-xVk.roa
File:                     Xf_vdwPWFETl7CQMeywK0pC-xVk.roa (raw, json)
Hash identifier:          UrCBVgNl0iBEH3evIjRiCFaGZomHAC2Y/SNJ58usjxA=
Subject key identifier:   5D:FF:EF:77:03:D6:14:44:E5:EC:24:0C:7B:2C:0A:D2:90:BE:C5:59
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2226
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xf_vdwPWFETl7CQMeywK0pC-xVk.roa
Signing time:             Fri 25 Nov 2022 04:40:49 +0000
ROA not before:           Fri 25 Nov 2022 04:40:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.40.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8742 (0x2226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5DFFEF7703D61444E5EC240C7B2C0AD290BEC559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:15:98:5d:98:36:21:5f:14:de:7a:1d:d2:
                    7c:00:88:59:2e:7f:3e:ca:99:d6:ce:c7:a1:33:38:
                    a3:2d:38:d6:b1:4d:77:b3:0d:0e:c8:50:d8:45:63:
                    33:42:fb:a8:55:22:ca:4b:23:c2:4e:eb:52:cd:eb:
                    76:01:94:cb:38:df:38:b0:5a:2f:76:51:79:09:8e:
                    fa:bb:43:6f:ee:80:a0:e6:f8:82:ce:4e:49:8c:53:
                    97:3c:fd:7f:9a:6b:c5:8d:cf:88:9c:49:8c:e3:a9:
                    9c:37:7f:4c:eb:d0:22:f3:97:eb:aa:03:b8:32:d4:
                    65:33:1d:ef:40:c9:41:1b:44:1c:33:4c:c5:dd:97:
                    70:9e:be:3d:94:04:28:99:99:90:d2:c3:c9:2d:b2:
                    e3:cc:66:6f:a1:80:72:2a:2b:64:c2:a8:c3:78:5e:
                    e9:52:d4:9b:c4:cb:59:3b:d0:18:b9:2f:02:d4:86:
                    df:96:c7:51:5b:8b:54:23:3b:f7:79:07:e5:7c:40:
                    0f:93:04:37:d2:95:6f:db:3a:79:a8:7b:4e:13:5c:
                    08:8b:62:eb:fc:db:46:03:95:e0:dd:6f:64:23:6d:
                    f8:cd:6a:62:12:06:83:f8:67:2c:86:d6:79:3a:e3:
                    5d:6f:60:5a:c1:d3:b4:d5:4b:08:cd:32:3f:d4:a3:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FF:EF:77:03:D6:14:44:E5:EC:24:0C:7B:2C:0A:D2:90:BE:C5:59
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xf_vdwPWFETl7CQMeywK0pC-xVk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:7f:b8:91:08:13:74:b8:5b:14:d1:9f:b0:49:fc:4c:07:
         c7:38:3d:00:64:8a:a4:5e:ea:28:1a:6b:74:84:bb:41:fa:27:
         c6:0f:37:3e:92:86:6a:79:c5:90:74:9f:7a:c8:df:43:56:b0:
         d2:0b:c6:e6:4b:52:86:80:45:84:1f:fe:c7:45:7f:b4:c3:4d:
         fc:85:29:b7:01:eb:6e:41:49:30:d1:f6:74:b3:72:e2:78:97:
         c4:46:15:4d:2f:30:8f:22:61:3b:a2:80:dc:d0:7e:ae:f1:0e:
         22:5a:50:f3:e6:90:ee:09:d2:8d:f7:42:39:d2:29:09:f4:c6:
         de:d7:cc:98:6b:e8:17:72:fc:7d:1f:78:f3:b4:7c:db:6e:c8:
         c5:cf:19:6f:d4:27:76:d7:5c:ab:e9:96:a6:20:e1:70:af:65:
         eb:4c:15:a9:c6:c1:ef:90:bd:82:8f:4c:e1:75:f3:0e:e5:2a:
         f7:6e:06:bf:56:47:5a:9b:29:ea:38:25:18:cf:eb:40:5a:68:
         1a:1e:4e:ad:db:ab:df:65:d2:a3:f6:ff:f4:da:c8:63:28:1a:
         04:45:27:73:7a:28:03:9f:66:9a:d2:a3:4a:ea:6d:3f:fe:6d:
         1a:26:2e:eb:99:96:20:ca:e4:7e:2c:42:97:ca:29:e7:6f:70:
         68:64:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:59 2025 by rpki-client