Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bHV7eEwYFqlqmcaTdx8taqF3FHc.roa
File:                     bHV7eEwYFqlqmcaTdx8taqF3FHc.roa (raw, json)
Hash identifier:          t5D5RKDZqkJEgoVMs5MbrjMrOZ54mkuOyhjn+wUckKc=
Subject key identifier:   6C:75:7B:78:4C:18:16:A9:6A:99:C6:93:77:1F:2D:6A:A1:77:14:77
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EDA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bHV7eEwYFqlqmcaTdx8taqF3FHc.roa
Signing time:             Tue 29 Sep 2020 09:56:13 +0000
ROA not before:           Tue 29 Sep 2020 09:56:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.224.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3802 (0xeda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:13 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6C757B784C1816A96A99C693771F2D6AA1771477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:eb:f1:d6:ad:94:b1:1d:dd:ad:8c:88:0a:
                    4e:1e:9d:ed:0b:76:30:60:6c:82:fb:ff:1d:46:e3:
                    c5:e7:da:d2:a0:cd:1f:68:45:23:21:cd:fd:49:91:
                    ed:0a:e0:bc:e5:c3:ea:1c:0d:73:35:52:3b:8e:80:
                    79:37:2c:31:4f:f1:97:b8:f3:56:9d:40:e1:b7:19:
                    34:a5:59:33:06:1e:cb:20:bb:53:0d:93:80:15:20:
                    73:fd:b2:84:46:8d:25:3f:49:10:1f:82:49:8c:05:
                    39:15:03:b7:f6:34:ab:00:49:6f:79:8b:4f:13:eb:
                    cd:54:6d:99:a0:2c:e8:16:27:3f:92:1a:c4:e8:ae:
                    11:16:77:f4:e1:a0:28:3b:1f:79:7e:99:35:c4:4b:
                    49:a5:42:3e:e3:80:06:3d:c6:0d:24:b8:e1:83:61:
                    d6:77:f5:ee:a0:08:e6:7d:2f:d4:67:dd:85:03:dc:
                    b9:39:ba:74:f2:0f:0d:71:26:34:b1:41:8c:69:d1:
                    43:9f:65:30:d7:b1:45:04:8f:c5:db:76:31:06:39:
                    df:7b:d3:05:6f:aa:8e:7b:89:19:d9:7b:e1:76:94:
                    fa:82:b6:2f:6a:61:21:a0:e1:5e:84:f8:67:19:b2:
                    21:1d:ad:4c:13:dc:29:01:b9:aa:91:2a:0e:4d:04:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:75:7B:78:4C:18:16:A9:6A:99:C6:93:77:1F:2D:6A:A1:77:14:77
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bHV7eEwYFqlqmcaTdx8taqF3FHc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:cb:26:2f:cf:2c:0a:d4:c0:6d:c6:dd:74:bf:46:43:e2:
         88:06:73:e8:28:cf:10:97:be:18:b0:93:34:80:08:72:b9:95:
         e7:17:d9:26:6c:3a:2f:c7:91:a9:24:e1:9d:f5:19:98:54:4c:
         6a:37:0b:2f:e5:6c:a0:a7:b1:bc:9a:7a:2b:a1:e7:34:ee:99:
         d0:a0:65:e1:2c:d8:1d:68:db:97:1b:0c:43:56:1f:b8:91:05:
         fe:d1:1e:bf:07:7a:4e:29:89:78:b2:15:31:75:6d:24:58:fd:
         e2:49:43:bb:cf:e8:dd:36:64:99:38:a7:d0:70:16:53:87:c1:
         77:b2:f1:bf:85:35:65:e3:93:e3:86:f7:17:cb:8b:97:8e:c6:
         e7:b8:64:cd:13:6e:60:5e:0f:93:38:36:96:68:da:f0:b8:e7:
         af:40:61:59:61:8c:e5:d8:87:1d:16:f3:2f:e8:07:6a:7a:27:
         6e:6b:55:7d:71:7a:a3:4d:55:64:17:28:80:6e:d0:ca:27:e4:
         c3:07:0a:b7:b9:72:b0:f8:74:f0:c6:cc:1f:a4:a9:e5:8a:81:
         40:ae:62:0a:40:e4:33:9d:ab:f6:d4:bb:42:2b:b3:81:ae:39:
         c9:8f:8a:62:d3:61:ec:5b:21:be:11:90:1d:73:38:c6:3b:ab:
         5b:36:91:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZDNzU3Qjc4NEMxODE2
QTk2QTk5QzY5Mzc3MUYyRDZBQTE3NzE0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQCevx1q2UsR3drYyICk4ene0LdjBgbIL7/x1G48Xn2tKgzR9o
RSMhzf1Jke0K4Lzlw+ocDXM1UjuOgHk3LDFP8Ze481adQOG3GTSlWTMGHssgu1MN
k4AVIHP9soRGjSU/SRAfgkmMBTkVA7f2NKsASW95i08T681UbZmgLOgWJz+SGsTo
rhEWd/ThoCg7H3l+mTXES0mlQj7jgAY9xg0kuOGDYdZ39e6gCOZ9L9Rn3YUD3Lk5
unTyDw1xJjSxQYxp0UOfZTDXsUUEj8XbdjEGOd970wVvqo57iRnZe+F2lPqCti9q
YSGg4V6E+GcZsiEdrUwT3CkBuaqRKg5NBBV5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbHV7eEwYFqlqmcaTdx8taqF3FHcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JIVjdlRXdZRnFscW1jYVRk
eDh0YXFGM0ZIYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
AeAwDQYJKoZIhvcNAQELBQADggEBAF6EyyYvzywK1MBtxt10v0ZD4ogGc+gozxCX
vhiwkzSACHK5lecX2SZsOi/Hkakk4Z31GZhUTGo3Cy/lbKCnsbyaeiuh5zTumdCg
ZeEs2B1o25cbDENWH7iRBf7RHr8Hek4piXiyFTF1bSRY/eJJQ7vP6N02ZJk4p9Bw
FlOHwXey8b+FNWXjk+OG9xfLi5eOxue4ZM0TbmBeD5M4NpZo2vC4569AYVlhjOXY
hx0W8y/oB2p6J25rVX1xeqNNVWQXKIBu0Mon5MMHCre5crD4dPDGzB+kqeWKgUCu
YgpA5DOdq/bUu0Irs4GuOcmPimLTYexbIb4RkB1zOMY7q1s2kes=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:25 2025 by rpki-client