Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_iTytGodCuVLbpqy85yVc-rcprg.roa
File:                     _iTytGodCuVLbpqy85yVc-rcprg.roa (raw, json)
Hash identifier:          rPVNFfqqaa9vYazqm5ag7xZmlapiD+kzrrIAfK9AiHY=
Subject key identifier:   FE:24:F2:B4:6A:1D:0A:E5:4B:6E:9A:B2:F3:9C:95:73:EA:DC:A6:B8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_iTytGodCuVLbpqy85yVc-rcprg.roa
Signing time:             Thu 15 Sep 2022 02:45:37 +0000
ROA not before:           Thu 15 Sep 2022 02:45:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.157.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FE24F2B46A1D0AE54B6E9AB2F39C9573EADCA6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:63:ba:47:04:8a:fb:62:9f:3f:08:5a:84:
                    e9:2e:1b:39:b7:68:41:11:76:af:f4:4d:27:47:8c:
                    76:2a:4c:4a:99:1a:64:ba:86:18:b6:f4:ea:78:86:
                    0c:d1:9a:67:d0:b5:bc:df:0d:b1:28:ea:c5:70:19:
                    5a:f6:86:a9:40:e2:a6:e8:58:3c:dc:b9:0a:ae:c1:
                    7a:bc:37:6d:91:09:65:59:2a:00:31:65:5c:62:39:
                    f5:58:31:2a:2a:a2:15:5c:98:4e:d9:22:75:c0:84:
                    5b:2b:a3:31:a7:a3:39:94:6e:8b:0e:55:95:7a:72:
                    cb:56:38:49:2c:1f:98:ae:f5:21:35:92:d4:de:a3:
                    e7:41:3d:56:8c:81:88:1e:3b:e4:aa:3c:f5:93:56:
                    03:8c:28:c6:8d:dd:53:82:81:17:93:00:79:ad:2d:
                    2c:0a:0c:0c:2f:9a:51:5a:3f:31:00:26:a0:1a:72:
                    a6:d1:62:70:a6:c4:39:e7:7f:c3:92:83:b6:02:c1:
                    53:df:01:2d:78:27:34:63:4a:1e:81:e2:10:24:ca:
                    85:ed:ab:b5:3a:85:29:17:8a:04:ac:b9:f2:03:ad:
                    80:9d:fe:f0:23:42:14:83:ce:4d:64:38:83:70:9f:
                    9b:94:51:70:07:ee:9f:09:3b:bc:bb:cd:79:2e:9d:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:24:F2:B4:6A:1D:0A:E5:4B:6E:9A:B2:F3:9C:95:73:EA:DC:A6:B8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_iTytGodCuVLbpqy85yVc-rcprg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:f7:00:2e:ca:f5:db:b7:8a:ec:d7:62:9a:64:9d:7a:18:ca:
         64:28:f3:6e:f5:18:ed:86:02:47:72:c5:ab:61:78:b0:9f:ab:
         51:65:e6:b4:17:27:bc:e9:2d:e1:18:b2:6a:cc:9b:9f:8f:a3:
         9f:da:36:d1:69:f5:8d:79:54:73:6d:f3:dc:d2:bd:27:55:e3:
         50:30:56:5c:05:56:68:24:7c:f6:b9:51:c0:fb:cd:24:7c:bf:
         99:ae:10:ac:43:0b:c0:2c:5e:af:de:8b:f8:e3:69:a9:66:1c:
         ea:35:1a:75:e5:b4:59:60:c2:f0:de:e4:1e:78:79:47:89:05:
         bd:13:d0:46:f9:9a:7d:d9:4e:af:a7:69:55:4b:6a:ee:93:e9:
         ac:70:38:45:bb:0e:81:50:37:46:57:6a:35:a3:56:9e:36:0f:
         70:19:92:28:31:de:a0:79:6c:8c:e4:1e:73:f7:18:43:58:0e:
         0d:cc:00:63:9c:12:0f:a1:39:73:57:fd:b7:2b:56:fe:e6:2d:
         f6:e4:d7:38:54:5d:f5:6c:78:36:1a:80:45:c5:cf:78:fe:37:
         6c:4c:29:32:79:0c:72:fa:c9:97:c5:f7:84:43:0d:f4:58:2a:
         13:86:fc:16:c2:f3:1d:ab:e4:b0:bc:68:da:28:f1:2b:be:c3:
         e9:12:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:13 2025 by rpki-client