Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k5ZUDeziSP2PSj4mYR1mp_PBHVE.roa
File:                     k5ZUDeziSP2PSj4mYR1mp_PBHVE.roa (raw, json)
Hash identifier:          C90DTXlzTj2HP09RlAYZzbymTsL4A1/OR+P7AZ/x1ww=
Subject key identifier:   93:96:54:0D:EC:E2:48:FD:8F:4A:3E:26:61:1D:66:A7:F3:C1:1D:51
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BF9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k5ZUDeziSP2PSj4mYR1mp_PBHVE.roa
Signing time:             Wed 29 Sep 2021 02:47:13 +0000
ROA not before:           Wed 29 Sep 2021 02:47:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.172.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7161 (0x1bf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9396540DECE248FD8F4A3E26611D66A7F3C11D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a3:c1:3e:e5:19:63:7f:58:24:e3:09:9c:39:
                    15:f2:62:d5:0b:d6:f4:e8:a8:03:60:f2:b3:70:64:
                    a7:97:16:be:12:92:7d:1e:c6:34:89:d7:07:25:90:
                    2d:74:e9:42:ed:75:c5:d3:b0:39:b5:f5:82:f9:18:
                    94:85:b2:e7:1c:18:1f:94:9f:98:e8:0a:4c:9e:10:
                    00:e8:8f:ff:e6:20:1e:46:35:56:c0:4e:2c:41:0c:
                    99:08:c9:de:6d:08:23:ff:37:0d:76:71:61:a6:01:
                    1c:db:2f:3e:88:47:0f:72:4c:69:8a:c4:6b:2a:8c:
                    5a:2b:87:04:f5:c0:ce:ba:38:a1:a9:57:74:0e:7e:
                    98:20:48:b5:da:d4:68:5b:ec:02:a6:a2:9c:5b:af:
                    eb:00:22:8b:53:9e:83:80:66:7d:19:4b:03:1a:c8:
                    63:0f:29:99:ab:af:bd:78:39:94:74:f7:b8:a4:ab:
                    82:23:03:79:90:60:9f:61:bb:8d:6c:45:02:9d:08:
                    25:e2:e2:4b:44:9a:aa:7d:23:68:41:ed:39:a7:68:
                    43:23:60:9f:a0:ba:58:10:a4:65:9a:f1:f4:1c:ed:
                    cd:4a:c1:f1:b9:54:e2:27:e1:13:df:59:ed:dc:9a:
                    68:1f:08:5f:45:9f:3b:aa:be:aa:23:fb:2b:23:21:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:96:54:0D:EC:E2:48:FD:8F:4A:3E:26:61:1D:66:A7:F3:C1:1D:51
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k5ZUDeziSP2PSj4mYR1mp_PBHVE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:0e:e7:4e:1a:ad:8b:38:db:65:5a:37:1e:f6:a3:0b:f7:e3:
         18:f8:fc:7d:e4:d5:51:ee:66:e0:fc:5b:77:ad:9e:06:9e:1b:
         a1:3c:4f:79:94:15:c8:a7:c4:70:c8:37:2a:73:d3:bd:e9:e7:
         d8:17:eb:0b:84:35:45:d2:b7:35:23:db:74:61:13:06:69:81:
         60:ee:8d:04:06:ae:b7:f2:e5:a8:9d:7f:94:38:27:97:ed:e2:
         72:5a:36:7d:dc:b3:d6:d5:94:68:0a:33:c5:25:39:58:fa:a4:
         96:23:b8:36:91:27:03:32:ea:d3:3e:27:d6:90:19:9e:d1:65:
         bd:19:14:f4:b5:42:74:34:ee:4e:97:47:68:31:b4:e4:d8:2c:
         32:72:0b:be:bb:e5:fb:9d:cc:f3:86:ad:d4:c9:86:8f:1d:d3:
         44:bf:a0:4c:0f:62:ee:55:b1:c1:6d:d2:ff:25:5d:cc:49:b6:
         86:0f:ba:e5:9b:ee:4d:04:95:47:25:8c:2b:17:13:8d:04:37:
         8d:d0:42:f6:c1:21:84:1a:12:58:c8:64:e5:cb:13:f0:8a:00:
         f3:12:e6:e3:2a:aa:ed:1b:f1:d5:0f:a8:42:a4:0b:0f:db:0b:
         11:e9:51:6e:82:a4:42:5d:b6:da:e9:65:20:26:cc:58:d2:b1:
         ed:56:43:1b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG/kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MTNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDkzOTY1NDBERUNFMjQ4
RkQ4RjRBM0UyNjYxMUQ2NkE3RjNDMTFENTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwo8E+5Rljf1gk4wmcORXyYtUL1vToqANg8rNwZKeXFr4Skn0e
xjSJ1wclkC106ULtdcXTsDm19YL5GJSFsuccGB+Un5joCkyeEADoj//mIB5GNVbA
TixBDJkIyd5tCCP/Nw12cWGmARzbLz6IRw9yTGmKxGsqjForhwT1wM66OKGpV3QO
fpggSLXa1Ghb7AKmopxbr+sAIotTnoOAZn0ZSwMayGMPKZmrr714OZR097ikq4Ij
A3mQYJ9hu41sRQKdCCXi4ktEmqp9I2hB7TmnaEMjYJ+gulgQpGWa8fQc7c1KwfG5
VOIn4RPfWe3cmmgfCF9Fnzuqvqoj+ysjIUXTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUk5ZUDeziSP2PSj4mYR1mp/PBHVEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2s1WlVEZXppU1AyUFNqNG1Z
UjFtcF9QQkhWRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sawwDQYJKoZIhvcNAQELBQADggEBAIQO504arYs422VaNx72owv34xj4/H3k1VHu
ZuD8W3etngaeG6E8T3mUFcinxHDINypz073p59gX6wuENUXStzUj23RhEwZpgWDu
jQQGrrfy5aidf5Q4J5ft4nJaNn3cs9bVlGgKM8UlOVj6pJYjuDaRJwMy6tM+J9aQ
GZ7RZb0ZFPS1QnQ07k6XR2gxtOTYLDJyC7675fudzPOGrdTJho8d00S/oEwPYu5V
scFt0v8lXcxJtoYPuuWb7k0ElUcljCsXE40EN43QQvbBIYQaEljIZOXLE/CKAPMS
5uMqqu0b8dUPqEKkCw/bCxHpUW6CpEJdttrpZSAmzFjSse1WQxs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:17 2025 by rpki-client