Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/or8BCJVlYuqQEuZ4JJkE41szMso.roa
File:                     or8BCJVlYuqQEuZ4JJkE41szMso.roa (raw, json)
Hash identifier:          pVJuxnRQkklYmjRBjH/SakUd/7bZ2aVxVoxMg8AGrck=
Subject key identifier:   A2:BF:01:08:95:65:62:EA:90:12:E6:78:24:99:04:E3:5B:33:32:CA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/or8BCJVlYuqQEuZ4JJkE41szMso.roa
Signing time:             Sun 07 Feb 2021 12:13:36 +0000
ROA not before:           Sun 07 Feb 2021 12:13:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.222.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5805 (0x16ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:13:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A2BF0108956562EA9012E678249904E35B3332CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:df:0a:1b:bd:bb:38:5f:c9:8c:43:f7:6b:
                    da:9b:d9:67:ce:43:5b:7a:b7:a6:39:bd:e1:40:50:
                    c9:ea:54:a1:82:65:6a:b0:1e:8d:ea:89:f0:a3:eb:
                    7b:53:8e:8a:e9:fe:14:42:ec:3c:bd:9c:42:25:41:
                    a7:59:67:c6:ef:8c:88:72:2a:b3:b4:aa:18:eb:83:
                    35:5d:06:fc:d0:b9:95:8c:77:2d:22:bf:2d:90:9e:
                    dd:21:80:f7:f7:9b:6f:7b:3c:60:fe:e8:3e:86:4d:
                    de:23:94:7f:03:58:60:69:98:2e:ff:45:6e:f4:81:
                    e8:11:e5:1b:35:95:b1:56:77:1f:30:f6:f5:2e:fc:
                    6e:83:2e:13:52:00:18:4a:8b:e6:2c:b0:e5:1a:28:
                    33:59:30:82:ce:90:10:c7:b5:c4:82:9c:87:73:96:
                    bf:22:ca:08:47:70:2e:6a:2c:08:6e:bc:3b:18:5e:
                    1f:ba:26:2f:53:48:b3:43:31:4d:69:3c:95:75:10:
                    84:08:ed:b1:db:e2:0e:93:1d:5f:5c:fa:3f:46:cb:
                    54:8c:07:7f:fc:7d:e8:e1:6e:77:bd:92:e4:62:91:
                    2b:66:71:2b:51:ed:d1:26:76:ac:7f:56:94:34:f2:
                    a3:70:51:4f:7c:2e:4d:13:86:07:bc:7b:48:69:06:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BF:01:08:95:65:62:EA:90:12:E6:78:24:99:04:E3:5B:33:32:CA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/or8BCJVlYuqQEuZ4JJkE41szMso.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:2b:56:e7:e8:f6:e1:e6:9e:7e:da:c3:57:9d:14:f4:40:5d:
         f6:47:50:96:3e:b5:f9:7e:53:f2:22:a9:2d:e8:b9:30:99:5e:
         08:d7:0e:95:8a:b8:37:e0:0c:98:d7:01:5f:e3:4d:a5:a9:0c:
         64:e4:e3:f2:28:7a:7a:85:93:1d:f1:40:ff:05:98:a2:dc:0a:
         cb:4b:07:cd:64:8e:09:71:b1:68:c3:b9:1c:4c:18:3b:52:cd:
         c3:5e:2a:a4:5e:e7:50:51:ae:18:2c:70:2b:dc:d7:1f:66:00:
         87:b2:54:5b:0f:c7:24:b6:ac:80:8b:b5:8b:ca:0d:c8:63:0f:
         96:92:5b:65:be:38:4a:19:f5:d4:85:8f:a8:91:15:ea:c4:ed:
         75:16:df:ed:e8:a7:45:70:dc:09:0b:8a:3c:99:50:bb:b2:ee:
         ae:0e:46:78:0b:9b:13:00:ad:ef:6e:e9:40:fe:2d:0b:de:60:
         75:f6:bc:a1:cc:fa:04:c2:0f:ad:0f:d7:28:3d:74:66:b0:c2:
         77:c8:46:14:1c:5f:f5:33:9b:b4:fa:61:50:2f:7f:43:72:87:
         79:bc:d4:e7:ec:49:6c:a0:cb:72:5e:8b:90:6f:a8:e4:9e:78:
         25:43:54:62:43:64:84:55:06:b5:8a:96:1d:c6:43:61:e8:55:
         05:6e:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:09 2025 by rpki-client