Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oK_pvbasmqSexs_MIP_UlV_cf08.roa
File:                     oK_pvbasmqSexs_MIP_UlV_cf08.roa (raw, json)
Hash identifier:          Q72fHdXLidoLLVgkcyFrqmwT0h5FrejfPBMxj6Kb/0Q=
Subject key identifier:   A0:AF:E9:BD:B6:AC:9A:A4:9E:C6:CF:CC:20:FF:D4:95:5F:DC:7F:4F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E08
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oK_pvbasmqSexs_MIP_UlV_cf08.roa
Signing time:             Tue 29 Sep 2020 09:55:15 +0000
ROA not before:           Tue 29 Sep 2020 09:55:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.144.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3592 (0xe08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A0AFE9BDB6AC9AA49EC6CFCC20FFD4955FDC7F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:50:ae:f6:a5:50:24:16:71:c4:38:00:4b:
                    eb:74:bc:50:45:a3:bd:c6:c0:fe:a1:59:bc:a6:d8:
                    fa:59:89:a9:85:d4:db:28:2b:29:56:ef:9b:3e:a3:
                    96:e9:14:8f:87:71:ca:1d:50:b0:77:cc:54:d9:df:
                    ee:d1:ea:71:bb:9f:35:a4:c2:6a:cd:31:00:97:82:
                    d7:4e:da:d7:55:78:3a:f4:a3:dd:61:40:0d:d1:3f:
                    c6:58:39:0d:91:a3:85:e1:e0:f6:b7:09:ed:4b:e2:
                    55:c6:a3:bd:4a:53:3e:ba:3e:58:e9:ce:30:94:fe:
                    92:8b:0e:4a:da:1c:cc:0c:c6:56:88:27:80:04:6c:
                    21:62:d5:1b:e4:b7:e6:42:7d:03:0c:10:e7:a2:d0:
                    10:cc:bc:7e:12:1e:61:6e:43:6a:c4:bd:f9:64:c9:
                    37:aa:72:e0:ab:8f:1a:d0:43:a8:48:3c:c1:c0:a1:
                    5c:9a:9a:0d:65:7f:d9:da:21:96:3a:14:6c:d4:f9:
                    f2:74:d7:5d:a6:21:30:07:d8:19:e8:de:e6:9d:80:
                    48:37:29:9f:f1:04:66:cb:fe:76:c3:65:7b:cb:5a:
                    1a:76:86:2f:36:93:6e:a0:74:97:2b:54:4f:e7:be:
                    96:38:73:a6:fa:fb:e7:29:d7:b4:44:a1:a6:7f:33:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AF:E9:BD:B6:AC:9A:A4:9E:C6:CF:CC:20:FF:D4:95:5F:DC:7F:4F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oK_pvbasmqSexs_MIP_UlV_cf08.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:d9:9e:39:44:9c:45:19:cd:7b:d7:74:86:07:ef:48:a3:
         b0:21:a2:1a:22:8c:54:7d:ea:e8:0b:cf:b1:df:8b:e4:c3:c8:
         28:56:fb:18:b9:e1:72:26:42:03:92:89:53:2f:98:e0:80:f9:
         a8:f5:a8:64:14:83:03:06:e9:9e:30:e3:99:82:a0:60:40:4b:
         29:4c:70:d1:7b:90:22:3a:80:ca:7b:87:98:67:fd:98:d2:a7:
         a1:be:77:d0:38:e0:04:bd:97:18:f4:aa:cc:ed:a4:4c:08:16:
         75:48:ac:a5:40:18:f2:92:f0:07:7b:fb:a2:eb:4f:04:7b:7f:
         b5:09:26:af:e1:1e:77:39:58:93:45:9e:29:1a:78:76:60:cc:
         13:67:16:f9:fa:2a:54:68:25:19:41:6c:fe:b7:a8:7d:a3:60:
         21:15:e2:3f:5f:62:47:99:6b:27:7e:70:12:d3:c0:d5:0b:ee:
         53:de:45:e0:e9:5d:7c:98:52:b7:48:ac:9b:eb:1b:ec:3e:52:
         0c:39:e3:a4:9d:b1:ea:92:cb:48:fa:89:25:c6:e0:d7:ab:00:
         d9:db:de:86:4a:77:18:16:57:f2:5a:e5:eb:cc:cf:c2:48:f7:
         a0:5b:b3:e8:c0:6a:05:09:8d:4e:d0:5a:fe:9d:79:b8:58:f5:
         85:4f:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:48 2025 by rpki-client