Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fpq7vA7HUCWJJR_JPxxVcHtWpcs.roa
File:                     fpq7vA7HUCWJJR_JPxxVcHtWpcs.roa (raw, json)
Hash identifier:          1Gaozm6kys6AftlcAgxwi3CbeOUIGEzxdn4uaXsQiJ0=
Subject key identifier:   7E:9A:BB:BC:0E:C7:50:25:89:25:1F:C9:3F:1C:55:70:7B:56:A5:CB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       15CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fpq7vA7HUCWJJR_JPxxVcHtWpcs.roa
Signing time:             Sun 07 Feb 2021 12:06:39 +0000
ROA not before:           Sun 07 Feb 2021 12:06:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.96.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5583 (0x15cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:06:39 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7E9ABBBC0EC7502589251FC93F1C55707B56A5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:ce:a5:c6:ec:ad:d5:39:c0:dc:a9:0b:7a:
                    f4:c7:5c:1c:fe:6b:22:dd:de:b2:61:b3:ec:ab:ee:
                    21:ef:9c:4a:f3:cc:4d:85:a5:60:a7:62:d1:ec:3f:
                    a8:5c:43:03:4f:5a:ec:ae:99:65:2d:f3:75:3d:3b:
                    bf:d3:60:ff:b4:f5:18:bd:93:3c:a2:61:a5:a6:e4:
                    fc:2b:40:4a:b0:c6:50:f3:c0:6f:ed:b9:d0:86:b6:
                    55:c7:03:65:6c:ed:66:a3:64:2b:32:a8:8b:76:00:
                    14:11:f1:8a:d5:a7:f5:d1:23:02:73:9d:84:74:49:
                    15:fd:79:dd:b4:0c:da:02:12:84:56:2b:56:b6:2b:
                    e2:6d:a2:31:9a:9d:bb:89:ed:b2:f1:6f:92:32:3c:
                    72:f4:03:d9:3f:0c:d1:11:ac:97:74:ad:26:0d:af:
                    e1:91:86:e1:dd:a1:51:a4:d1:31:f9:47:af:3e:20:
                    1f:ee:01:df:31:06:62:e1:85:e3:1f:67:44:b7:f1:
                    cf:18:50:5c:e0:5f:d5:bf:36:22:8d:20:6f:0a:b0:
                    54:62:a7:8f:ef:08:13:6d:fa:c0:46:fe:93:bc:eb:
                    a6:ad:35:e8:a8:01:30:3a:cf:27:89:24:b9:c8:8d:
                    6a:e7:f4:b6:6e:c8:ec:27:c2:9c:3d:8e:1f:0b:ce:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9A:BB:BC:0E:C7:50:25:89:25:1F:C9:3F:1C:55:70:7B:56:A5:CB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fpq7vA7HUCWJJR_JPxxVcHtWpcs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:5d:d1:4a:a9:2a:85:d6:d1:5d:d7:18:de:06:e2:f4:8b:5b:
         0b:13:d3:7f:ee:9c:d7:01:6b:73:78:ee:a1:53:e8:3a:5a:8d:
         cc:3b:49:0a:6a:40:f9:77:cf:1b:bf:f9:57:ca:85:43:27:38:
         c4:03:4b:5e:9f:a4:47:c4:7e:b3:d7:73:39:43:63:8a:5f:1c:
         c9:14:46:b6:68:c9:25:82:ca:6b:01:ea:69:10:c6:b6:23:d6:
         f8:c2:e3:71:d3:27:a7:2a:c5:8c:91:30:a8:d0:f8:72:54:bb:
         34:a3:9b:0e:58:49:54:c0:0d:61:b2:38:e2:aa:51:0b:6b:e5:
         28:2e:29:10:2e:c5:2d:bb:fd:7a:53:f0:54:e6:a9:87:33:3a:
         a3:54:e0:ec:93:84:69:b9:70:51:71:a5:f3:03:46:29:6d:0c:
         7f:6e:fe:e6:59:30:5b:90:1f:d0:2c:be:40:89:81:67:7f:b2:
         32:bb:b0:84:59:eb:54:23:bf:21:fb:a7:0e:79:9a:ec:25:9c:
         c2:00:e1:80:16:de:2d:3e:4f:4e:29:f4:1f:22:38:ea:19:c1:
         bb:30:51:fc:0d:ea:50:93:f5:73:97:82:1d:32:fd:bc:b7:50:
         8c:fe:59:88:67:ca:2a:f9:1f:bd:bc:1a:69:20:27:b9:00:0e:
         63:47:bd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:11 2025 by rpki-client