Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aQXSA6j9EpQoOMNGshG57tiOxcU.roa
File:                     aQXSA6j9EpQoOMNGshG57tiOxcU.roa (raw, json)
Hash identifier:          PMFWXmx1XLG+fiThPH3dsMpa5Y1S2F4YBpLCdeoF0vI=
Subject key identifier:   69:05:D2:03:A8:FD:12:94:28:38:C3:46:B2:11:B9:EE:D8:8E:C5:C5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17D9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aQXSA6j9EpQoOMNGshG57tiOxcU.roa
Signing time:             Sun 07 Feb 2021 12:24:06 +0000
ROA not before:           Sun 07 Feb 2021 12:24:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.136.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6105 (0x17d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:24:06 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6905D203A8FD12942838C346B211B9EED88EC5C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:ce:f2:f8:1a:08:58:da:ce:71:54:03:7d:
                    69:ba:06:f5:ae:f1:9f:d0:55:d8:40:05:38:b4:c9:
                    4c:a3:35:69:85:12:89:e1:a9:65:39:48:5b:38:3b:
                    40:e6:02:f5:83:ce:d8:f9:4f:80:19:61:1c:c8:63:
                    0f:36:d7:3b:ca:b2:27:92:9c:38:74:99:a1:23:be:
                    52:8a:2c:f9:0c:29:70:b5:98:d3:4d:eb:57:42:08:
                    df:d2:d1:36:b2:a2:16:a4:fa:3b:90:e8:30:b8:88:
                    95:cb:bf:eb:85:a4:2e:42:75:e7:ab:94:43:88:67:
                    33:93:50:e1:d7:8b:82:e4:e7:58:0b:12:f6:fe:21:
                    56:c1:e9:08:14:18:c5:64:39:fb:c8:4e:e2:47:d8:
                    02:cc:7a:38:5d:03:1f:d5:2c:e9:98:10:91:f3:01:
                    2e:fe:6a:3a:2a:ca:bd:59:f7:5c:66:1c:84:81:da:
                    70:e5:51:01:4d:9c:f6:78:d2:3e:44:e1:05:ee:65:
                    77:e4:e7:47:8b:93:4d:61:bc:7a:bc:1f:96:26:6c:
                    95:cc:59:a0:68:c9:f0:73:3e:c7:82:35:e3:e5:81:
                    13:c1:58:cb:04:7d:8f:a5:3b:a9:be:3c:95:c3:73:
                    d0:aa:6e:37:08:20:6a:37:80:28:ad:e3:d7:c0:b4:
                    22:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:D2:03:A8:FD:12:94:28:38:C3:46:B2:11:B9:EE:D8:8E:C5:C5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aQXSA6j9EpQoOMNGshG57tiOxcU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:d2:63:bf:0b:fb:d9:68:83:30:4e:5d:17:de:bb:f7:3c:4a:
         d0:a7:90:ae:c0:bd:62:5e:62:06:a9:29:b9:fd:43:6c:26:4d:
         55:6a:17:cb:1d:96:14:42:65:e7:6a:5b:89:73:d5:c9:8e:d1:
         bc:55:97:d6:b5:80:9a:48:7e:53:31:7e:4b:68:d0:f6:e1:b7:
         e3:92:0c:35:36:cd:a2:42:dd:9f:39:d3:b2:4e:2f:05:d2:3c:
         07:19:18:30:79:18:51:18:9b:b1:1d:40:0a:54:1e:eb:fb:53:
         96:7a:41:e3:8b:51:2a:85:ff:f4:0c:13:1c:3a:c1:9b:13:d6:
         13:3c:83:06:b9:a9:51:ef:42:8f:c1:b7:4c:d2:4d:48:ed:fa:
         42:c9:de:14:d7:6c:c2:82:82:ff:a3:56:b3:77:26:89:3c:bc:
         19:e9:52:22:5d:ee:d4:4f:5c:e8:0a:d9:a7:c8:7e:32:b4:62:
         01:34:33:ae:1c:c6:b9:fc:8e:a4:a4:2b:53:11:c0:82:85:5f:
         2d:a3:2d:1e:20:1b:dd:85:2d:ab:62:e5:4d:c0:75:10:87:d1:
         90:cd:16:fd:f9:f2:d7:4e:c0:ae:0e:91:0b:79:c7:43:d3:24:
         7d:ea:20:9d:5c:34:28:ef:d0:ff:93:5e:7b:ac:cc:04:49:54:
         df:f1:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:36 2025 by rpki-client