Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-5DJxASEeGd7lU4mPXUt-XaDMc.roa
File:                     f-5DJxASEeGd7lU4mPXUt-XaDMc.roa (raw, json)
Hash identifier:          RvUXKQkK+9JR9EDbRYGpNk3tumhkA2AHhwDW9bOYYEY=
Subject key identifier:   7F:EE:43:27:10:12:11:E1:9D:EE:55:38:98:F5:D4:B7:E5:DA:0C:C7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20A0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-5DJxASEeGd7lU4mPXUt-XaDMc.roa
Signing time:             Fri 25 Nov 2022 04:38:56 +0000
ROA not before:           Fri 25 Nov 2022 04:38:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.200.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8352 (0x20a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7FEE4327101211E19DEE553898F5D4B7E5DA0CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:1a:2b:7f:1b:f9:bf:c7:32:3f:9e:fd:fc:
                    32:04:6d:56:45:55:35:e7:fc:a0:5f:50:5d:c2:a7:
                    0c:c8:6a:45:24:fb:31:2d:8f:75:2c:91:a3:02:6e:
                    4a:71:d5:8e:6e:fa:d4:e0:27:84:82:4b:c9:a5:04:
                    3e:09:66:ab:ea:6e:75:83:6f:71:b8:53:38:e7:c0:
                    a8:9b:00:68:ee:ed:11:2c:51:56:0f:44:62:6f:60:
                    9f:1d:38:87:58:a9:ee:94:af:85:44:dc:40:76:eb:
                    e6:3e:f7:d5:b0:64:ff:22:75:d3:73:63:f1:0b:e9:
                    d2:96:ba:c9:33:73:3a:cb:f8:de:b2:ab:c2:37:54:
                    f8:be:3f:f9:54:e7:c3:cf:da:5e:79:c7:e2:75:fe:
                    12:b1:21:3a:2c:84:0a:62:6a:a2:aa:3e:3e:a9:a6:
                    ce:41:b8:62:da:32:ca:b4:73:be:f1:82:34:2a:45:
                    e3:66:a2:a9:4f:b3:59:ac:29:89:4b:73:a0:dd:d3:
                    c0:d3:e7:ce:5a:5a:75:8d:bf:17:17:79:03:2d:96:
                    4d:c5:2e:26:37:d6:c0:5f:10:f2:de:8d:bb:8c:14:
                    5f:d4:18:04:59:0a:80:83:07:7d:6c:3b:2b:c7:25:
                    f2:c7:fa:97:05:d7:ad:c4:e0:d6:ca:c7:f5:a3:a8:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EE:43:27:10:12:11:E1:9D:EE:55:38:98:F5:D4:B7:E5:DA:0C:C7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-5DJxASEeGd7lU4mPXUt-XaDMc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:04:76:6d:a1:5a:94:49:45:7d:0a:6b:ab:29:5b:38:4d:0a:
         fb:80:2a:0f:a7:7b:24:e2:49:5d:df:53:45:28:3b:48:32:a4:
         9e:2c:e9:b5:e7:d9:6d:07:3e:64:3a:a5:5d:20:7f:6c:d4:07:
         96:f9:f1:fa:5b:e1:c1:6e:80:8d:78:ea:c3:34:f4:ac:31:c7:
         e3:86:91:c3:fa:e0:a4:bc:f1:64:19:eb:c8:6e:c2:0f:65:18:
         4e:80:27:9e:56:dc:a2:8c:4d:a3:bd:1c:f1:e9:d4:55:a8:41:
         df:b8:35:c8:70:c7:16:3a:1b:ba:c0:8d:0d:7f:09:85:c5:67:
         88:c3:ff:a7:bb:77:ff:29:a3:02:de:81:ef:44:99:47:59:64:
         1e:a5:07:5d:9c:40:24:45:df:6a:8d:38:51:f3:2f:fe:70:f6:
         82:3d:eb:e3:49:95:27:61:1e:c2:c2:8d:73:ab:e6:69:41:fc:
         91:50:a8:ea:f6:83:d1:e4:2a:6a:c5:33:f9:76:76:e6:e8:46:
         bc:72:98:d1:c7:5c:f1:63:d4:04:e9:05:57:02:61:1d:3e:46:
         85:7d:c7:a1:bd:91:13:d4:37:b7:aa:2b:4c:26:1b:c6:68:a8:
         64:00:52:ca:ad:9e:c9:1d:69:51:cf:93:70:fd:74:d5:ad:fe:
         c1:81:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:11 2025 by rpki-client