Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fk9zqjk-oRbRsr4GPI_Lof_T448.roa
File:                     fk9zqjk-oRbRsr4GPI_Lof_T448.roa (raw, json)
Hash identifier:          0vICI+TN4s7QvrYtEoQqoOHtS8034eAHyNjpBHEplvw=
Subject key identifier:   7E:4F:73:AA:39:3E:A1:16:D1:B2:BE:06:3C:8F:CB:A1:FF:D3:E3:8F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       217E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fk9zqjk-oRbRsr4GPI_Lof_T448.roa
Signing time:             Fri 25 Nov 2022 04:39:59 +0000
ROA not before:           Fri 25 Nov 2022 04:39:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.0.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8574 (0x217e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7E4F73AA393EA116D1B2BE063C8FCBA1FFD3E38F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:5e:47:90:49:73:7a:10:9d:d7:9e:79:ce:
                    11:31:32:82:11:1c:d7:04:85:35:48:9c:98:97:87:
                    3f:72:ee:98:08:92:26:e7:f4:21:91:c8:70:f2:cb:
                    54:c5:b6:d4:51:a5:ed:dc:67:7f:f3:ce:d8:52:ff:
                    32:1e:87:7a:28:b2:2d:8c:cb:98:dc:57:f1:ff:d8:
                    87:fd:28:76:d4:6e:42:f4:c9:93:e4:cd:ef:70:4f:
                    0e:a5:12:d3:76:f2:dc:62:e0:bd:40:4b:44:2d:40:
                    c6:20:14:e0:51:f0:0a:f9:87:6a:21:62:b8:47:2f:
                    f3:82:de:16:40:cd:68:4f:17:07:75:33:c7:ab:ba:
                    15:0c:ff:a5:9e:d3:f7:c3:49:02:bf:58:23:56:f2:
                    8f:74:33:ca:52:a2:2f:f8:f9:d5:ca:d5:45:ac:3d:
                    c7:78:8d:dd:59:fc:80:aa:ec:d8:d6:d7:8a:73:16:
                    9a:4b:35:f1:99:3c:e2:36:80:1d:ca:fd:0a:65:d5:
                    ff:6c:19:ec:cd:83:65:ff:6d:78:16:21:73:68:50:
                    14:bf:8e:1d:f9:1e:23:3f:1c:49:b2:ea:ab:c4:c2:
                    63:47:80:85:ee:51:cf:2c:77:e4:50:c0:73:8c:75:
                    d5:b6:19:da:1a:e8:5f:e2:67:c6:ca:44:bf:fa:04:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4F:73:AA:39:3E:A1:16:D1:B2:BE:06:3C:8F:CB:A1:FF:D3:E3:8F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fk9zqjk-oRbRsr4GPI_Lof_T448.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:62:76:07:df:e0:74:06:07:36:8c:fa:03:6a:bf:4a:af:3a:
         b7:f1:e7:9f:4b:ea:10:81:43:5f:39:de:10:e9:b4:17:63:db:
         4f:1e:a9:04:31:13:bd:b2:d4:68:05:e9:e5:c4:b1:1d:4c:dc:
         5c:ee:92:80:74:72:10:c9:25:67:99:25:98:87:14:0b:0a:76:
         e9:07:79:fe:e3:24:40:2c:c7:d3:4d:1c:aa:bc:4b:57:e4:4b:
         7f:c9:b8:cf:7a:84:95:a8:b5:9c:b3:dd:b4:89:60:17:ec:2c:
         76:45:ae:a4:0f:ab:fa:55:e5:4d:cb:f8:d4:44:15:7a:74:71:
         20:67:c5:90:de:56:6c:1a:9d:9b:dc:35:d8:02:56:89:23:3b:
         33:37:84:e1:18:a6:a9:c9:ee:be:1c:ac:3c:9e:2f:d7:82:18:
         b0:8f:a0:71:05:68:6e:3a:45:76:70:94:35:e6:53:74:14:28:
         78:fc:73:ef:fc:92:37:2a:7e:1e:6e:fd:8b:d4:12:b9:b1:93:
         1a:37:35:f0:a3:17:9e:77:7b:5b:ff:b3:8a:45:22:88:da:98:
         54:31:59:12:f6:6a:c2:17:57:f1:8e:b6:6c:4d:71:5a:12:4b:
         50:14:9a:ad:f8:98:14:b1:af:ec:33:dd:c9:aa:1e:75:59:e9:
         87:7b:8e:8a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdFNEY3M0FBMzkzRUEx
MTZEMUIyQkUwNjNDOEZDQkExRkZEM0UzOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvx15HkElzehCd1555zhExMoIRHNcEhTVInJiXhz9y7pgIkibn
9CGRyHDyy1TFttRRpe3cZ3/zzthS/zIeh3oosi2My5jcV/H/2If9KHbUbkL0yZPk
ze9wTw6lEtN28txi4L1AS0QtQMYgFOBR8Ar5h2ohYrhHL/OC3hZAzWhPFwd1M8er
uhUM/6We0/fDSQK/WCNW8o90M8pSoi/4+dXK1UWsPcd4jd1Z/ICq7NjW14pzFppL
NfGZPOI2gB3K/Qpl1f9sGezNg2X/bXgWIXNoUBS/jh35HiM/HEmy6qvEwmNHgIXu
Uc8sd+RQwHOMddW2Gdoa6F/iZ8bKRL/6BJufAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfk9zqjk+oRbRsr4GPI/Lof/T448wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZrOXpxamstb1JiUnNyNEdQ
SV9Mb2ZfVDQ0OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sQAwDQYJKoZIhvcNAQELBQADggEBAB1idgff4HQGBzaM+gNqv0qvOrfx559L6hCB
Q1853hDptBdj208eqQQxE72y1GgF6eXEsR1M3FzukoB0chDJJWeZJZiHFAsKdukH
ef7jJEAsx9NNHKq8S1fkS3/JuM96hJWotZyz3bSJYBfsLHZFrqQPq/pV5U3L+NRE
FXp0cSBnxZDeVmwanZvcNdgCVokjOzM3hOEYpqnJ7r4crDyeL9eCGLCPoHEFaG46
RXZwlDXmU3QUKHj8c+/8kjcqfh5u/YvUErmxkxo3NfCjF553e1v/s4pFIojamFQx
WRL2asIXV/GOtmxNcVoSS1AUmq34mBSxr+wz3cmqHnVZ6Yd7joo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:12 2025 by rpki-client