Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ms7EAQCiDGS4Ozjf5SP0E5qaEj0.roa
File:                     ms7EAQCiDGS4Ozjf5SP0E5qaEj0.roa (raw, json)
Hash identifier:          tjmZZeaUNXc0fLRFhAVK5F3t2fSoxHckHcPMO16nUcM=
Subject key identifier:   9A:CE:C4:01:00:A2:0C:64:B8:3B:38:DF:E5:23:F4:13:9A:9A:12:3D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ms7EAQCiDGS4Ozjf5SP0E5qaEj0.roa
Signing time:             Thu 15 Sep 2022 02:45:11 +0000
ROA not before:           Thu 15 Sep 2022 02:45:11 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.193.224.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:11 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9ACEC40100A20C64B83B38DFE523F4139A9A123D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:34:9d:24:ff:52:7f:a0:e3:ae:c6:84:34:
                    bb:d6:dd:6e:b1:df:6d:b2:ce:09:67:f0:b3:7c:1a:
                    71:ac:e0:2f:4d:35:ea:f7:57:a1:a3:ee:1a:a9:3f:
                    a3:e9:7d:c7:e4:80:f8:e7:17:77:58:e8:be:6b:1c:
                    c6:2d:6a:5d:a5:cd:88:27:1f:2e:c8:1d:5c:e0:ac:
                    9c:c5:f2:69:82:af:87:be:be:45:66:6a:71:86:e6:
                    a6:3d:46:87:2f:35:ca:98:ad:be:a5:2c:1f:b2:50:
                    b7:0d:ca:a5:c6:b3:6c:33:0f:e6:ce:0c:90:74:30:
                    32:27:ed:18:6e:d2:b0:7f:87:fd:aa:90:62:b2:b2:
                    a4:e3:2c:66:6d:4d:41:6c:9a:37:59:09:b0:d7:0b:
                    d1:e5:fd:1a:8e:7b:6c:c7:cf:5e:93:a8:7a:d1:71:
                    f5:51:40:a6:70:bd:00:3d:b6:47:6d:c0:99:24:f5:
                    fa:59:8f:14:67:64:6d:21:8e:a3:ce:4e:84:e0:5a:
                    91:7c:71:66:45:95:b4:52:ab:17:10:1b:37:2b:97:
                    0e:8b:4c:82:31:cd:f0:87:23:ae:99:20:07:2e:96:
                    57:c1:09:75:7e:00:ac:70:0e:d7:52:0f:55:27:cf:
                    2a:a8:69:24:c3:44:88:76:51:ef:c5:f0:7d:f3:19:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CE:C4:01:00:A2:0C:64:B8:3B:38:DF:E5:23:F4:13:9A:9A:12:3D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ms7EAQCiDGS4Ozjf5SP0E5qaEj0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:ce:7e:0a:f9:55:7b:e2:83:b5:09:ae:30:ce:dd:84:21:2a:
         6b:33:3b:0b:c8:53:59:1f:52:f8:2d:e6:59:25:eb:eb:de:66:
         c8:81:56:ca:80:c3:b5:ff:b5:c4:2d:c8:eb:06:79:db:77:a0:
         1a:5b:ec:93:9e:c8:ca:4e:56:07:d1:6e:15:70:3c:35:bd:f1:
         a4:30:68:5f:3d:95:13:4f:69:6f:db:71:61:8b:8f:45:52:8b:
         a6:bf:1a:69:b3:e7:00:4e:d3:9f:73:cf:65:b6:1f:a1:00:5e:
         43:30:18:15:83:dd:f7:94:b8:cc:c1:4b:f6:39:48:e7:af:a2:
         56:11:49:36:78:2e:e0:f5:b2:83:0f:93:9a:2b:6d:a2:98:46:
         07:1e:12:fd:ea:3d:a8:94:1d:1d:b1:0d:61:5d:9e:20:fc:d3:
         dc:b0:54:6b:f5:c8:35:20:6f:08:15:62:df:54:96:51:4b:3a:
         f6:54:01:ad:9a:11:c7:bb:f9:0b:50:d8:57:3a:23:0a:0e:47:
         86:b3:60:bf:dc:81:3d:b5:10:66:b2:43:0c:0a:d8:9f:60:bc:
         ab:7c:1f:f3:04:17:6f:78:74:37:61:03:66:7b:10:8e:17:f2:
         db:5d:4b:9d:59:e0:f6:3e:f9:64:7c:e3:81:f7:f9:5e:63:26:
         21:29:8b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:25 2025 by rpki-client