Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iVohhIlT77mwcIY0rJfjrqEKmZ4.roa
File:                     iVohhIlT77mwcIY0rJfjrqEKmZ4.roa (raw, json)
Hash identifier:          H9dNsiMlXg9NCfdBx12Pwb18T6bsr81xctGzdf//Kgg=
Subject key identifier:   89:5A:21:84:89:53:EF:B9:B0:70:86:34:AC:97:E3:AE:A1:0A:99:9E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iVohhIlT77mwcIY0rJfjrqEKmZ4.roa
Signing time:             Thu 15 Sep 2022 02:53:36 +0000
ROA not before:           Thu 15 Sep 2022 02:53:36 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.144.64/26 maxlen: 26
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:36 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=895A21848953EFB9B0708634AC97E3AEA10A999E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:cb:97:ae:df:2d:a7:aa:69:be:5f:65:36:
                    4b:74:38:22:ea:30:50:6c:01:7a:34:bd:02:0d:25:
                    21:23:51:f8:89:78:70:84:5e:14:ec:a5:95:4c:76:
                    01:0a:7a:e0:f7:bd:99:50:14:c0:63:39:f8:f8:93:
                    50:31:fd:df:79:79:61:46:32:8d:7e:71:3e:a7:ca:
                    e7:37:47:da:ab:f2:b9:17:0e:64:73:36:b4:15:3a:
                    c9:92:12:4f:2f:39:74:38:cc:ab:3e:2a:b7:b9:2c:
                    1b:30:73:0b:9f:0d:ec:bb:eb:7a:b3:36:61:df:ba:
                    fc:e3:ff:55:a2:fd:20:7f:8f:9e:33:42:bf:9c:03:
                    ec:5f:d9:24:e9:79:e0:7e:68:01:2d:64:27:7d:c6:
                    58:2b:bd:f8:05:7a:4a:7f:5a:cd:83:ee:5e:ec:67:
                    5f:cf:e6:5e:24:b7:25:e7:76:ef:74:8b:4a:36:5c:
                    35:37:6a:4a:af:14:d1:d9:2f:cf:c8:2d:b3:a9:bc:
                    75:cc:e8:82:52:d4:30:b5:29:02:e5:30:74:1e:74:
                    f9:c0:63:c3:2c:4b:c6:0a:de:99:65:8d:1e:df:21:
                    06:b2:ae:67:0e:e6:b6:d6:87:d1:05:66:62:82:54:
                    4d:d1:b8:d1:47:96:3d:98:19:cf:fa:93:3a:c0:9f:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5A:21:84:89:53:EF:B9:B0:70:86:34:AC:97:E3:AE:A1:0A:99:9E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iVohhIlT77mwcIY0rJfjrqEKmZ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.64/26

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:7c:71:e5:0e:4d:cd:50:d6:af:1b:3b:51:61:5f:62:96:
         51:72:a1:59:fd:aa:27:64:ea:b7:7b:9c:78:a2:5f:31:62:83:
         dd:07:31:80:5a:4f:3c:86:6a:9c:4b:15:a8:1b:b6:5a:fe:3f:
         9b:3b:e3:d3:4d:8a:8f:0a:9b:79:34:d5:b9:f5:c6:9e:60:8d:
         d4:1e:9f:03:60:97:4f:d0:d0:56:07:65:4a:3f:6c:a3:78:9c:
         8f:21:7f:8b:20:7b:d7:c8:0c:04:a5:77:65:d1:3f:e7:c6:48:
         ac:f3:36:41:33:e1:46:f1:fa:a7:14:66:a3:a4:e5:01:7e:7e:
         c3:26:b7:7b:7a:49:a5:45:81:8e:5a:1e:f2:d8:e8:e3:7b:df:
         f7:cf:58:05:88:6e:95:94:16:f1:0c:95:9b:b8:30:f2:2a:80:
         e7:35:60:d1:36:b4:94:b4:23:98:72:ad:32:b8:2b:a3:80:dd:
         93:24:a2:68:b4:ae:de:9c:96:71:56:7f:99:a7:b6:a8:30:b3:
         9c:df:ef:28:02:32:dc:3a:8b:52:ff:f8:9e:1c:b3:45:16:9c:
         55:7e:a4:c3:fa:77:c6:bf:ec:b5:97:3e:a6:0d:b6:2b:2b:93:
         73:1f:6f:00:dc:34:eb:57:86:e6:d3:67:27:dc:26:bb:95:67:
         43:9a:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:25 2025 by rpki-client