Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eOC2otDHoF93TvvglZQxsDjEAxk.roa
File:                     eOC2otDHoF93TvvglZQxsDjEAxk.roa (raw, json)
Hash identifier:          8jWBCc8EyNIkd6dl+Kiz22194pwS5oxQIzIi2kiUZsI=
Subject key identifier:   78:E0:B6:A2:D0:C7:A0:5F:77:4E:FB:E0:95:94:31:B0:38:C4:03:19
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D3A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eOC2otDHoF93TvvglZQxsDjEAxk.roa
Signing time:             Wed 29 Sep 2021 02:48:46 +0000
ROA not before:           Wed 29 Sep 2021 02:48:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.194.160.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7482 (0x1d3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=78E0B6A2D0C7A05F774EFBE0959431B038C40319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:c6:ba:f3:6f:69:a8:04:9c:c7:aa:28:2f:
                    69:3f:b3:17:2a:39:49:2e:38:77:7b:52:fe:e1:74:
                    65:4c:40:d3:a8:cd:2c:ba:af:21:4c:ff:a5:b5:b9:
                    a1:cf:95:39:46:51:cb:c9:39:80:61:33:79:6b:54:
                    c6:3f:bd:cd:d9:70:7e:5f:2e:79:a3:f9:f3:8c:be:
                    d5:6f:af:7e:b9:35:3a:c1:88:75:32:33:2a:ad:23:
                    16:34:90:7a:c2:26:5d:e8:d6:c0:5e:43:76:4c:10:
                    a6:b6:a9:f5:53:14:dd:66:5d:8d:57:2c:2b:68:0d:
                    b9:c2:10:12:8f:73:d7:76:5b:e3:d0:ad:3e:d5:2e:
                    32:9b:f6:6d:e8:c4:e2:fd:51:24:1e:e4:db:8a:e2:
                    4b:78:b5:46:41:32:9f:4c:0a:3b:e0:70:e5:3a:b4:
                    e7:e4:d0:59:3f:57:d4:a2:0e:e9:9e:bb:71:e3:3b:
                    ca:b5:4e:4b:7f:c4:da:5a:74:84:e5:13:f5:76:2a:
                    90:f7:32:80:f2:b2:01:1c:f9:e1:0b:09:db:fb:f0:
                    fb:c5:97:e9:f4:11:af:07:fa:f9:7c:2a:d0:c9:7e:
                    7e:6e:2d:7f:82:3e:0d:6a:d0:9f:38:0d:87:af:27:
                    18:e6:3b:48:f3:42:53:71:90:50:b0:5c:7a:66:7e:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E0:B6:A2:D0:C7:A0:5F:77:4E:FB:E0:95:94:31:B0:38:C4:03:19
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eOC2otDHoF93TvvglZQxsDjEAxk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:ad:12:b9:1e:09:72:bf:3e:da:64:d8:65:58:bc:f3:17:
         e8:7b:a5:45:74:88:eb:1f:41:9d:fc:82:cb:93:36:d8:c0:42:
         f8:6b:02:15:3a:0c:0c:c8:bf:9b:b4:1b:2b:91:fb:7e:fc:dc:
         96:6c:1c:fa:97:40:22:46:0a:e7:44:ed:8e:f0:d1:0e:1b:8e:
         07:fd:aa:c8:31:92:ac:b8:58:ef:7a:b3:dd:19:0c:f6:1e:34:
         2b:1f:f5:2b:8f:a9:de:f1:6b:59:ce:3c:41:14:60:43:67:d5:
         e1:ae:d0:9c:af:c4:3f:12:ae:5a:bc:98:0c:41:fc:6c:79:44:
         25:3e:70:6b:21:81:af:f6:4a:ca:0d:c4:1e:d3:4e:6d:17:5b:
         71:51:e4:bb:34:2f:3c:cd:58:55:fe:db:16:97:cc:df:2e:fb:
         d8:50:c5:3a:06:ce:6d:d0:85:f3:57:c2:93:dd:9b:11:73:00:
         f4:9c:b3:62:ec:11:7d:cc:74:6e:49:d6:57:e4:52:14:26:82:
         5b:37:0f:58:df:c0:15:d4:82:e9:6c:46:c9:7a:15:f7:10:60:
         b7:45:45:3f:b1:ba:ef:3c:00:5d:71:40:34:28:ea:6f:8d:e7:
         40:df:d7:22:d8:23:95:8d:e7:49:d2:a3:a8:d7:dd:12:b4:4a:
         b8:f7:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:34 2025 by rpki-client