Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a-Y7igmy2WhcYLzgvBx-lsL0-MI.roa
File:                     a-Y7igmy2WhcYLzgvBx-lsL0-MI.roa (raw, json)
Hash identifier:          WhQjOoKG1P+sUObeccowFk11d8zY32hCF8L6NzXdfj8=
Subject key identifier:   6B:E6:3B:8A:09:B2:D9:68:5C:60:BC:E0:BC:1C:7E:96:C2:F4:F8:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EBF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a-Y7igmy2WhcYLzgvBx-lsL0-MI.roa
Signing time:             Tue 29 Sep 2020 09:56:06 +0000
ROA not before:           Tue 29 Sep 2020 09:56:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.60.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3775 (0xebf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6BE63B8A09B2D9685C60BCE0BC1C7E96C2F4F8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:50:b4:2e:b9:e1:2c:ef:44:e5:c1:51:e5:
                    55:ab:d5:d9:77:c1:65:5f:fa:5e:b9:9f:e8:d7:ee:
                    8a:1d:2a:8c:3d:d9:fa:80:c0:ea:2e:e6:f7:64:9e:
                    bb:87:39:44:27:ea:1b:a4:26:1a:1f:66:12:69:83:
                    02:59:92:ba:a6:35:71:95:41:6e:04:17:80:a0:81:
                    87:fe:2a:a3:5e:3a:6c:93:46:eb:60:dc:7c:b2:5c:
                    31:9d:cc:16:ca:fa:8c:71:cc:58:5d:c7:bc:fc:ee:
                    f1:5d:83:93:80:e2:fd:bd:73:7b:14:a7:d8:fc:cd:
                    65:69:2a:2c:df:a5:7c:69:09:fc:a0:2c:dc:cb:50:
                    4f:9c:d7:41:72:d5:a6:6a:89:96:75:a5:07:57:34:
                    97:e9:05:6b:e5:60:d7:f7:39:a8:34:4b:10:b7:50:
                    dd:1f:fc:6b:98:b3:3c:d9:02:d3:cb:90:c4:49:70:
                    56:3c:26:fc:01:55:06:85:30:3a:69:ed:7f:b4:98:
                    44:27:17:dc:82:be:e8:a4:61:fc:a2:24:f0:3f:c9:
                    16:c0:d0:87:5c:9a:de:db:0c:08:e7:1b:27:98:75:
                    77:80:7f:50:93:ff:ee:f2:2e:12:9f:4c:b1:11:6e:
                    a5:2f:76:28:c7:c7:3d:63:9e:b3:23:42:e9:49:e1:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E6:3B:8A:09:B2:D9:68:5C:60:BC:E0:BC:1C:7E:96:C2:F4:F8:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a-Y7igmy2WhcYLzgvBx-lsL0-MI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:a1:96:b5:94:5f:02:2e:39:51:cc:99:56:6c:82:35:a2:3f:
         2b:c4:a8:72:17:bb:36:8b:07:f8:a4:8c:e0:4b:eb:4a:a8:68:
         0e:2c:77:66:10:22:eb:42:bd:fd:be:56:e1:93:dc:5e:ad:52:
         38:74:d8:8c:fd:ad:bb:6f:e5:ab:ee:95:93:d7:58:0c:54:34:
         de:4a:84:a5:86:58:12:be:8d:c1:33:81:87:18:fb:71:04:a3:
         c9:64:eb:98:6c:46:27:f1:75:33:9d:85:5a:f1:6e:38:7b:78:
         15:df:d6:9b:bc:67:ba:a8:fa:84:59:2e:4c:57:d4:2d:af:24:
         6a:c3:ca:61:8f:c6:b6:f2:bb:dd:9e:08:25:13:84:c1:5e:77:
         93:16:c2:e0:83:5f:65:67:e9:50:58:85:ce:bd:5f:37:a7:71:
         1d:e3:21:ee:ed:3b:bc:d5:b6:01:d8:9c:c0:68:9f:b1:1d:ab:
         ff:0f:b6:20:fd:06:49:d2:62:f3:27:30:16:e7:60:ac:88:70:
         1b:8f:c9:5e:d0:0a:30:17:67:3b:3c:eb:6a:5c:d2:80:36:c1:
         b8:ca:cc:5b:08:75:bf:c5:27:2e:d0:af:fe:2f:04:18:39:1d:
         7a:5a:07:c0:96:c3:3f:bd:4b:9b:15:a2:06:ed:8a:8e:af:0b:
         5a:eb:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:23 2025 by rpki-client