Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iKOzTcMefiv-L01N3_AL9NUDPQU.roa
File:                     iKOzTcMefiv-L01N3_AL9NUDPQU.roa (raw, json)
Hash identifier:          cyVJC9qEALIw68QMdMsuMndrb3To9C4/o9Lm17JRNhs=
Subject key identifier:   88:A3:B3:4D:C3:1E:7E:2B:FE:2F:4D:4D:DF:F0:0B:F4:D5:03:3D:05
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       143D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iKOzTcMefiv-L01N3_AL9NUDPQU.roa
Signing time:             Sun 07 Feb 2021 11:57:53 +0000
ROA not before:           Sun 07 Feb 2021 11:57:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.180.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5181 (0x143d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:57:53 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=88A3B34DC31E7E2BFE2F4D4DDFF00BF4D5033D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:43:ef:91:50:13:5e:fd:e4:91:80:ce:86:01:
                    e5:d9:b3:4c:cf:4d:8c:a9:86:cf:31:67:52:df:11:
                    a1:e1:4f:bd:88:59:a1:6f:59:e9:10:4d:ff:14:1b:
                    8f:fa:63:5d:d8:29:b6:c8:e7:ce:e1:df:fd:46:e2:
                    31:34:67:75:9d:43:42:6b:81:7a:9a:cc:cc:0a:f3:
                    6c:4d:89:00:a2:d7:2b:13:3a:d9:30:f1:33:6e:44:
                    f3:0b:04:75:fd:d4:22:c4:df:3b:d7:c0:3c:5e:e0:
                    30:3a:98:0f:62:fa:42:b2:32:57:6f:d3:51:25:79:
                    9c:37:ac:99:68:d0:06:18:ab:3e:8a:5b:f4:5d:51:
                    bc:5e:6b:cf:1e:4c:cd:b0:96:9d:e8:ce:78:37:3b:
                    91:f9:37:2d:48:de:28:4d:82:e0:ad:b6:ff:51:4f:
                    bf:20:1c:2f:46:13:ec:1e:98:42:43:66:bb:f4:e9:
                    9e:7c:10:25:76:78:fa:fc:04:fd:b9:e6:fd:c0:1b:
                    70:bf:aa:eb:5a:a6:0c:8e:19:b3:1a:a0:e3:84:43:
                    79:9b:e3:fe:79:7d:a7:eb:8b:20:8f:33:71:63:76:
                    9a:fe:44:4a:a5:49:29:04:69:1a:a2:f9:ae:e3:b2:
                    f2:81:e5:f9:8e:7b:dd:79:2e:2a:3c:74:79:30:68:
                    3e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A3:B3:4D:C3:1E:7E:2B:FE:2F:4D:4D:DF:F0:0B:F4:D5:03:3D:05
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iKOzTcMefiv-L01N3_AL9NUDPQU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:82:67:29:4e:0e:f9:b6:ea:ac:ca:99:9d:e3:9d:4c:47:2c:
         eb:ad:44:b3:72:51:a9:5e:83:cd:40:5b:36:69:29:2c:72:af:
         82:e2:35:5c:6c:b4:45:5b:65:10:99:0e:ee:20:e9:4d:5d:64:
         69:7c:77:fc:4a:75:d1:a6:1d:49:b4:35:8c:f7:3b:3b:13:fc:
         04:04:25:1f:50:aa:7f:9f:a0:46:3f:14:da:5c:bf:c7:08:fa:
         4f:70:1d:8d:1e:d6:d7:cb:ad:5a:47:84:c4:31:dd:43:75:48:
         a3:4d:a4:88:e6:ca:18:13:38:08:df:8b:bf:a4:86:40:b8:fc:
         a9:79:e0:11:a1:80:53:25:8b:76:8c:5b:5b:8c:53:28:d3:44:
         62:1f:18:04:10:4b:7b:34:8c:78:88:4e:51:95:82:b1:00:36:
         27:3f:fd:87:66:1b:1e:5b:98:10:85:82:8f:6e:f0:3f:a1:55:
         84:25:21:51:c0:13:c0:bf:3b:5e:dd:62:ea:60:c6:43:1a:84:
         63:9c:00:aa:25:b1:af:91:cd:eb:d2:12:50:fd:54:2c:73:9e:
         32:88:f0:2e:7e:af:e3:da:8f:24:c8:8f:10:bb:13:d6:ac:5b:
         2a:a8:4a:41:8e:e6:db:ef:3b:ef:01:b2:24:7f:4a:f4:25:10:
         16:ee:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:54 2025 by rpki-client