Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kM8j4s4aYFPiE5J1vPwbZrHtMBA.roa
File:                     kM8j4s4aYFPiE5J1vPwbZrHtMBA.roa (raw, json)
Hash identifier:          peIzxvSa8PpR5mk4pfVvLFLmycs596/x02vrM2xuG4I=
Subject key identifier:   90:CF:23:E2:CE:1A:60:53:E2:13:92:75:BC:FC:1B:66:B1:ED:30:10
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kM8j4s4aYFPiE5J1vPwbZrHtMBA.roa
Signing time:             Thu 15 Sep 2022 02:53:32 +0000
ROA not before:           Thu 15 Sep 2022 02:53:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.194.232.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=90CF23E2CE1A6053E2139275BCFC1B66B1ED3010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ad:af:d0:e3:ac:eb:75:c5:25:6e:39:db:22:
                    e4:94:20:da:7f:f0:45:86:0e:96:41:50:d8:cb:a4:
                    73:e4:c6:58:2c:d1:dc:2f:89:3c:a6:5e:52:dd:7e:
                    73:f9:54:16:a6:f7:8d:3c:f1:d5:cd:de:4a:cf:0d:
                    20:f3:4d:35:70:d6:81:48:44:ad:3a:5b:a8:bb:b5:
                    98:96:da:0c:6d:fa:f0:58:65:ff:97:26:dd:2f:62:
                    5c:ac:ea:37:e1:b9:64:1c:10:46:79:cc:76:57:e9:
                    32:bf:19:9b:95:fb:08:a8:dd:67:6a:a6:97:54:a9:
                    9f:f0:d7:5c:e7:62:2f:db:4b:89:cb:8c:f3:a4:b2:
                    c1:48:71:bb:d4:a0:94:0f:b5:af:d4:37:f2:82:8f:
                    e3:dc:9a:c0:48:68:61:86:0b:bc:34:32:45:02:73:
                    a5:18:77:20:cd:d8:99:88:2c:55:35:9b:dd:d7:90:
                    02:f5:88:18:93:fe:64:27:d8:52:99:c9:d5:84:b5:
                    2f:ec:30:39:5e:26:e2:de:c8:bc:1a:a5:42:44:0a:
                    0d:09:d1:59:a7:81:98:e5:fb:0e:df:b1:8d:40:00:
                    3d:02:24:b6:22:d4:3c:2e:77:8c:b0:d8:4c:24:ad:
                    fb:e2:b4:6b:a6:46:2f:15:3e:4e:7c:fd:54:7e:37:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CF:23:E2:CE:1A:60:53:E2:13:92:75:BC:FC:1B:66:B1:ED:30:10
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kM8j4s4aYFPiE5J1vPwbZrHtMBA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:75:d0:10:f6:58:2d:3a:f2:90:67:73:35:11:84:64:df:83:
         42:23:b7:75:3b:08:05:95:24:41:b5:7d:c7:7f:b5:be:24:df:
         49:fa:1d:0b:84:bf:f7:ad:46:d5:b2:d9:87:eb:59:31:8f:8f:
         aa:61:78:12:ad:41:f6:63:68:c0:c6:de:48:8f:ef:cb:7c:49:
         ea:89:36:33:27:53:07:28:42:9a:0c:8b:2b:85:18:74:0a:61:
         fc:e0:e3:2f:c6:68:de:71:88:df:56:5b:6e:43:65:c2:07:a3:
         28:37:f3:e5:8c:6a:8d:ef:63:b1:e2:a0:2c:69:89:88:5d:c9:
         2f:51:14:46:24:b4:91:5d:62:46:e6:b3:8a:5e:87:c3:cf:64:
         84:76:4a:6a:54:34:fa:da:56:44:e0:34:f5:1c:98:ef:50:32:
         be:f4:a5:d0:f4:bc:bf:d8:e4:ab:e3:3a:76:81:f2:02:73:7a:
         e0:5c:22:b3:6e:ae:a6:f0:73:9b:bc:16:8f:33:3e:a3:68:70:
         17:57:cb:1f:ed:9c:32:97:db:47:1a:6b:a3:c2:0e:ef:17:73:
         9b:07:14:12:21:09:46:30:51:f3:8b:74:a6:7f:59:58:6e:41:
         1c:6f:ca:38:08:d7:13:18:33:1b:5b:b9:6f:a7:ce:67:a5:71:
         9b:4e:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:34 2025 by rpki-client