Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fF6UxGsQmWyPYJ0DzCZ3jQOH4Lc.roa
File:                     fF6UxGsQmWyPYJ0DzCZ3jQOH4Lc.roa (raw, json)
Hash identifier:          i99Wo7enuju0gtjxe6w0CSAOhQONpYMjAgf7HvyTlWo=
Subject key identifier:   7C:5E:94:C4:6B:10:99:6C:8F:60:9D:03:CC:26:77:8D:03:87:E0:B7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D34
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fF6UxGsQmWyPYJ0DzCZ3jQOH4Lc.roa
Signing time:             Wed 29 Sep 2021 02:48:45 +0000
ROA not before:           Wed 29 Sep 2021 02:48:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.193.192.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7476 (0x1d34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7C5E94C46B10996C8F609D03CC26778D0387E0B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:28:e8:5a:ee:62:20:23:09:6e:de:b0:21:d3:
                    c4:88:6c:8a:6b:1d:aa:cd:47:97:77:ad:23:ef:7e:
                    a6:47:04:c0:f9:09:36:38:d5:6d:ed:fd:a5:d6:89:
                    6b:27:97:14:b1:2d:02:bd:7b:42:a0:61:c8:68:9f:
                    fb:54:71:1f:b9:77:3e:de:77:05:f4:6b:d1:20:07:
                    61:0d:b4:37:4d:d0:64:06:6d:1c:f7:31:cb:23:3f:
                    33:be:30:ad:7d:57:54:df:11:8e:37:56:25:b1:e3:
                    a1:7c:2b:2d:46:73:f8:fa:86:07:ef:cf:2b:64:22:
                    82:f6:48:57:b5:05:aa:19:ea:c6:04:a9:ea:aa:77:
                    71:a2:54:59:4c:8f:04:e3:9c:8f:b7:11:3d:13:de:
                    13:ac:8a:a0:b1:6e:9a:6a:ac:3a:0d:12:c2:02:85:
                    f2:3f:19:5a:7b:40:f1:95:b8:ad:df:a5:4b:10:d6:
                    82:7e:8f:06:f8:4e:1f:ae:8f:66:de:c2:1f:07:5b:
                    3e:83:6e:8d:ac:10:93:62:60:57:3a:dc:0c:39:28:
                    3a:d5:6f:ca:bc:35:58:5b:66:38:89:8e:80:f9:09:
                    4c:e1:b8:cb:fa:b7:65:ed:7d:cb:fb:cb:51:82:53:
                    3d:44:5d:d9:ff:21:1c:65:ee:15:a8:d6:d1:29:20:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5E:94:C4:6B:10:99:6C:8F:60:9D:03:CC:26:77:8D:03:87:E0:B7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fF6UxGsQmWyPYJ0DzCZ3jQOH4Lc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:fd:79:48:64:05:e6:c0:e5:06:70:1f:23:64:7e:82:6b:84:
         a8:93:bd:24:0f:16:99:74:e4:78:22:2a:99:05:ba:bb:f6:c6:
         25:0b:c6:ee:4a:27:dc:ed:79:ad:2a:b6:c8:15:80:02:a0:11:
         0e:7b:51:c4:1f:e2:5c:b4:62:6d:31:d5:7c:16:e7:3b:cf:eb:
         1c:e2:a5:6c:2e:77:f1:60:64:a7:c8:6a:ab:de:98:b7:f4:81:
         8d:db:0e:22:5e:2b:c5:62:b7:39:d5:21:b0:d6:0c:69:20:82:
         c4:2b:02:4b:78:78:07:af:d0:39:4d:e1:c1:a0:f4:b0:84:04:
         18:8c:17:30:9c:5e:0f:ff:a3:50:62:38:ea:a2:fb:44:f0:d1:
         4b:35:d8:5a:64:a0:38:da:a9:07:20:f6:79:4b:97:ce:3d:9c:
         85:ab:98:11:ac:44:ed:ea:87:3f:c3:95:36:c8:9a:5d:98:10:
         41:1f:c4:a5:54:e9:f0:2b:cd:28:94:05:af:70:54:d5:cf:46:
         ee:3e:98:bc:a5:a1:61:c9:6f:c7:f6:69:42:1d:b7:66:05:6d:
         f3:ab:5c:63:60:9c:0c:23:79:45:66:4a:7a:13:2e:cb:5c:a7:
         c3:7c:20:4e:fd:af:8d:c1:bf:f1:d7:98:ad:d0:88:fb:39:66:
         f8:b3:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:58 2025 by rpki-client