Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k2qp2wYxK_t6R6YhKKE18OYDTW0.roa
File:                     k2qp2wYxK_t6R6YhKKE18OYDTW0.roa (raw, json)
Hash identifier:          TN79OFOoNo0khstO8I4cPwCe560Kqb7UcTs0qj8yUrA=
Subject key identifier:   93:6A:A9:DB:06:31:2B:FB:7A:47:A6:21:28:A1:35:F0:E6:03:4D:6D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22AA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k2qp2wYxK_t6R6YhKKE18OYDTW0.roa
Signing time:             Fri 25 Nov 2022 04:41:29 +0000
ROA not before:           Fri 25 Nov 2022 04:41:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.200.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8874 (0x22aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=936AA9DB06312BFB7A47A62128A135F0E6034D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:86:0f:b5:fb:9b:d4:9e:9d:2e:f4:b5:ad:
                    50:f4:6b:62:7c:16:32:a7:b0:02:d0:d4:cd:ba:cf:
                    e9:93:e4:4e:89:b8:fe:ed:06:3d:64:b3:17:e9:34:
                    28:aa:f8:c3:9d:cb:e7:26:76:14:ce:6b:24:2e:3d:
                    94:32:f5:b9:91:89:ee:10:5d:04:7b:a5:6f:5b:86:
                    9a:1c:a4:33:a1:34:03:c5:6c:b1:27:37:d1:ee:5f:
                    ca:ad:11:fc:1c:7d:c2:fc:c5:19:7f:94:c7:90:68:
                    22:fa:e6:11:1d:3e:e5:1a:2b:a1:aa:86:de:79:9c:
                    9b:6e:b0:dc:ee:7d:83:94:5a:d5:6c:06:f6:84:8c:
                    1d:01:f0:fa:54:2b:a7:d9:25:01:12:22:1e:3d:eb:
                    66:da:3c:49:ac:e9:7d:19:b5:34:33:df:e3:92:4d:
                    4c:f2:14:84:cd:5f:64:6b:43:1c:c2:dc:fe:58:aa:
                    17:c6:11:c8:72:41:fe:4b:c4:6d:9f:7d:5f:a4:9b:
                    04:fd:95:73:e5:ce:c4:78:be:a6:06:a6:b2:2a:61:
                    a7:bd:2e:5f:9b:20:a7:fe:1b:31:9d:d1:1d:ba:57:
                    a3:f5:8e:ca:d4:84:24:5f:b3:25:55:8b:42:4d:9a:
                    03:f4:b3:74:66:e6:7e:91:99:31:aa:6a:35:3f:ad:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:A9:DB:06:31:2B:FB:7A:47:A6:21:28:A1:35:F0:E6:03:4D:6D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k2qp2wYxK_t6R6YhKKE18OYDTW0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:b7:ed:c9:88:b8:de:b5:a5:58:40:7b:13:bc:78:77:05:
         e9:01:e9:14:79:27:56:71:91:5f:e6:ba:f1:b6:bd:7e:ec:eb:
         bb:ae:1f:d3:5f:1e:b3:55:ec:a9:88:87:04:72:1d:8e:27:3f:
         28:30:ed:15:14:43:8f:d1:5b:20:9f:a9:df:1a:0a:c9:e5:6d:
         8d:ce:04:d0:8d:7b:94:41:7b:a3:84:3e:3e:7a:5f:14:8e:d4:
         28:57:f9:be:ac:ea:2e:d1:0b:af:56:bd:a8:0e:3f:b4:f6:93:
         e8:32:16:98:33:41:14:c4:17:b5:5d:ea:2b:be:ae:14:d0:4c:
         d6:a6:09:5a:4f:fa:2f:80:e7:c7:25:89:92:18:f1:89:0e:a0:
         30:ba:34:03:c1:bd:82:8a:fd:bf:f1:97:81:91:9a:42:7e:e9:
         43:62:b5:36:d4:25:e9:6d:b1:32:26:18:8a:36:3d:00:cb:44:
         40:d0:f7:60:d6:19:2c:bd:94:00:f1:3f:2c:e8:86:19:61:c8:
         d7:e4:7e:3b:7b:ef:92:57:66:d4:ed:08:69:11:bf:0d:f2:5d:
         0f:97:6e:d2:15:05:db:c4:43:f0:e5:0b:e0:e4:7e:65:47:c4:
         15:f7:dc:9d:b8:6e:be:aa:29:1f:76:33:33:c2:b6:ac:eb:9f:
         d1:53:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:26 2025 by rpki-client