Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqeJoDN-7vLSHidKOIOvZ05Xk_s.roa
File:                     lqeJoDN-7vLSHidKOIOvZ05Xk_s.roa (raw, json)
Hash identifier:          FMA2f7VW4GsdH6Esv84KjB9JU2upVG8uH+rtdQ4SefI=
Subject key identifier:   96:A7:89:A0:33:7E:EE:F2:D2:1E:27:4A:38:83:AF:67:4E:57:93:FB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22F9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqeJoDN-7vLSHidKOIOvZ05Xk_s.roa
Signing time:             Fri 25 Nov 2022 04:41:52 +0000
ROA not before:           Fri 25 Nov 2022 04:41:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.234.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8953 (0x22f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=96A789A0337EEEF2D21E274A3883AF674E5793FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:06:96:37:39:0e:97:21:aa:6c:6e:c3:22:
                    52:1d:f9:77:b0:d7:da:82:16:df:fa:9f:1c:5b:16:
                    c8:8f:93:3e:26:4d:31:a6:01:47:97:2f:2a:85:14:
                    51:d8:91:30:ea:9f:78:07:44:ee:4b:6d:4c:40:14:
                    94:15:1e:04:70:5c:fa:3e:ec:ba:ff:64:fe:48:05:
                    c9:d4:2a:e8:40:d6:2b:5c:b0:bc:ca:30:aa:5c:a9:
                    0f:5f:b1:a6:ef:8b:57:6d:45:f7:db:d9:69:c3:24:
                    9b:53:05:cd:1c:51:ea:66:29:d7:1d:2e:f4:e6:d6:
                    e4:d9:1f:85:c1:7a:fb:c6:e2:de:a2:41:da:84:8e:
                    1d:d1:e8:26:11:23:bd:df:c3:35:7d:4a:49:1c:b1:
                    b8:7b:de:5b:41:fc:55:50:0a:a0:8d:49:a8:d0:b6:
                    85:c2:6c:43:c9:d7:5e:87:64:29:c4:2f:4c:3f:46:
                    ec:e7:83:c7:56:ee:00:37:02:67:57:55:aa:eb:c2:
                    12:86:40:56:a6:ef:c3:5b:0b:cc:b8:30:b1:14:fa:
                    1c:77:96:c7:e4:1e:26:f4:30:07:7f:8a:b8:9a:17:
                    d8:72:e4:63:ff:33:b3:b5:70:fc:b9:69:69:4a:a2:
                    e3:3a:b8:b1:08:99:c9:f3:21:af:63:20:33:30:86:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A7:89:A0:33:7E:EE:F2:D2:1E:27:4A:38:83:AF:67:4E:57:93:FB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lqeJoDN-7vLSHidKOIOvZ05Xk_s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:dd:fd:28:17:3f:bd:e3:49:bd:32:56:1f:d4:79:70:d5:
         e6:8d:63:42:56:ba:0d:3c:7a:1d:8c:e7:79:f4:5e:d7:87:0a:
         a6:61:12:46:42:49:00:27:5e:31:db:ab:4d:7c:11:74:2d:8a:
         bf:55:00:18:53:2e:73:10:9a:bc:f7:18:94:63:49:3f:52:88:
         e7:38:ee:6c:bf:2f:f7:fe:71:1c:2b:d9:ea:85:d5:7d:99:c8:
         bf:d6:fe:a2:b5:a5:83:aa:91:0b:a6:3f:98:fe:a0:2c:84:51:
         26:bb:28:be:08:99:1b:fd:bf:62:a7:cc:e1:d8:49:0a:8f:c2:
         cb:f7:35:33:6e:ed:5c:67:59:4e:4d:aa:89:e6:24:f1:74:bd:
         9b:b7:25:0f:95:d5:d5:dc:b9:52:16:1c:e1:bd:ec:82:2f:4c:
         b0:3a:5b:83:1b:49:31:17:60:bd:eb:e0:75:db:b4:af:32:f0:
         bb:e3:f9:49:55:76:8b:20:60:c3:f8:f3:8c:99:a6:cf:c7:6a:
         8a:b4:c5:18:86:f2:f5:bb:f4:d3:49:8b:81:0e:35:f5:bb:56:
         1e:a9:76:22:3b:a6:1a:1a:b5:09:8a:98:a4:5c:ce:56:3d:f3:
         51:5c:3e:5f:34:17:62:a8:47:0d:e6:25:71:1d:9e:dc:19:58:
         57:6a:e2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:39 2025 by rpki-client