Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fpe2WpZV4hiG8gc_9aWVI63LOew.roa
File:                     fpe2WpZV4hiG8gc_9aWVI63LOew.roa (raw, json)
Hash identifier:          u95C5awN6WquVAacwJu5YKhZTjOmeLECWfn3GDY9m2Q=
Subject key identifier:   7E:97:B6:5A:96:55:E2:18:86:F2:07:3F:F5:A5:95:23:AD:CB:39:EC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fpe2WpZV4hiG8gc_9aWVI63LOew.roa
Signing time:             Thu 15 Sep 2022 02:46:32 +0000
ROA not before:           Thu 15 Sep 2022 02:46:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.104.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7E97B65A9655E21886F2073FF5A59523ADCB39EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:44:9d:a5:bb:2d:a1:24:7b:0b:24:c9:0b:55:
                    08:8d:67:f7:b1:41:2b:05:94:15:39:e0:e0:1f:67:
                    57:1f:70:e5:4c:0d:6a:bc:83:40:50:89:58:fc:c1:
                    e7:0c:2f:61:7a:a3:df:6a:6a:f9:9f:ce:69:9f:c1:
                    93:48:6c:d9:07:3f:b9:36:dc:34:c7:5b:82:70:d8:
                    bb:8f:1e:7e:7f:e6:af:11:41:dd:d9:62:ee:6b:70:
                    c7:77:51:4e:a5:f6:76:ff:91:cc:76:32:cb:a4:db:
                    a8:8c:67:46:40:e0:37:6f:7e:3a:8c:62:c5:07:b7:
                    9e:ca:65:91:52:86:45:14:e9:fd:58:7c:59:bb:6e:
                    45:76:83:86:80:f0:3b:08:b1:56:f8:a2:72:07:49:
                    31:e9:d8:ea:86:7f:1a:4b:5e:46:a1:7e:58:14:52:
                    9a:01:6b:fe:6c:60:d7:22:d1:2f:04:11:64:b0:2e:
                    10:bb:e1:dd:93:83:ca:69:d0:09:cc:8b:84:cb:66:
                    d3:f6:4c:88:89:2b:56:19:99:9b:b4:03:9c:89:d9:
                    7b:03:e8:5f:2a:86:b9:d1:e4:3b:1f:e3:4a:9b:a7:
                    e0:44:5d:f1:70:7a:a8:cf:78:40:85:3d:f5:f9:63:
                    e1:0d:11:0b:8e:1b:94:b7:e3:8c:19:6c:85:22:9f:
                    1d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:B6:5A:96:55:E2:18:86:F2:07:3F:F5:A5:95:23:AD:CB:39:EC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fpe2WpZV4hiG8gc_9aWVI63LOew.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:b4:88:fa:6d:9e:94:d2:aa:e3:2a:9d:05:10:ab:ce:0d:3e:
         96:cf:69:36:98:cf:43:25:d1:92:b9:01:7d:76:55:ee:9b:5a:
         34:53:16:3a:a2:74:7b:f8:35:05:19:f4:4d:6b:ad:59:b7:0c:
         be:b5:58:c6:35:35:5e:4b:f9:de:67:80:6a:1d:35:14:78:50:
         7d:b0:d4:51:14:b1:6e:1d:b2:86:9e:af:21:24:0a:88:d1:c2:
         dd:37:80:cc:9c:e5:36:95:ed:76:c5:41:61:01:13:3f:67:2a:
         a2:99:b1:e5:b1:7a:c4:02:bd:fb:da:54:aa:dc:f4:99:b6:76:
         8f:ea:0b:34:87:b6:90:64:87:31:f9:80:ca:e8:62:89:98:2d:
         30:c1:9f:4b:f1:81:c9:f9:ed:7c:41:fa:ce:ce:ab:f5:2a:8c:
         bf:3e:65:d7:22:9e:09:65:55:78:41:38:5f:2b:bb:a3:eb:54:
         de:3f:5f:05:e1:8a:09:53:6a:9a:7e:8a:7a:0a:88:37:b7:be:
         a5:e6:6c:37:02:36:9d:09:2d:d5:61:e9:84:5d:e8:4e:d0:a9:
         12:a0:67:36:e7:98:ff:40:52:12:2a:90:60:27:07:26:f0:85:
         63:51:2f:bf:8b:ca:67:0d:5e:87:a7:72:e7:70:b9:7f:b3:7a:
         b3:7d:44:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:17 2025 by rpki-client