Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/poNA83OHsZTIbZ7wsZJMloiL69M.roa
File:                     poNA83OHsZTIbZ7wsZJMloiL69M.roa (raw, json)
Hash identifier:          l0eAMsmXq93npT5Qb9b0I+HWOJ5r4Ely2R8zK+97+k8=
Subject key identifier:   A6:83:40:F3:73:87:B1:94:C8:6D:9E:F0:B1:92:4C:96:88:8B:EB:D3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22AE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/poNA83OHsZTIbZ7wsZJMloiL69M.roa
Signing time:             Fri 25 Nov 2022 04:41:31 +0000
ROA not before:           Fri 25 Nov 2022 04:41:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.80.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8878 (0x22ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A68340F37387B194C86D9EF0B1924C96888BEBD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:42:13:7b:fe:21:77:1f:c2:14:f2:a0:f9:
                    e9:9b:53:07:39:4d:f8:c0:5e:6f:96:54:6f:0f:45:
                    4a:6f:59:61:6d:81:51:fe:f2:e5:78:15:27:6d:b4:
                    05:3b:a2:f0:39:53:f5:56:76:37:4c:73:bd:85:38:
                    93:d1:df:a5:83:9b:2b:22:5e:f9:f1:4e:36:a7:6f:
                    70:9d:c5:9f:06:3b:1c:02:28:49:72:4e:59:a6:a7:
                    45:a8:84:57:90:c5:fa:26:c7:2b:a9:f5:81:e4:b8:
                    9b:46:88:f8:ee:6f:fb:21:0e:e6:a6:6f:12:ab:20:
                    e4:bf:fa:63:ac:8d:57:f6:64:67:ff:c8:40:5a:7a:
                    27:f0:0d:d8:5b:00:cb:70:48:98:09:41:20:b1:f1:
                    69:fd:32:5f:d4:83:42:1c:fd:13:f3:5d:57:18:e7:
                    44:e7:82:f1:62:53:f2:5c:21:15:97:e1:57:f9:68:
                    e0:ae:11:94:ba:88:e4:e4:2a:5c:a0:4a:0f:4b:67:
                    d6:2c:80:9b:74:99:09:94:c6:e3:be:9e:9e:cc:54:
                    7b:34:8b:f8:f5:c8:3c:56:18:7b:65:af:79:70:2c:
                    b5:c4:8e:02:95:b8:de:69:51:58:dd:6f:8c:36:8b:
                    cb:91:0b:be:f6:3f:db:dc:7c:02:ab:e3:38:e5:39:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:83:40:F3:73:87:B1:94:C8:6D:9E:F0:B1:92:4C:96:88:8B:EB:D3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/poNA83OHsZTIbZ7wsZJMloiL69M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:02:f6:de:c6:2a:19:d0:d6:9e:cd:e5:01:d2:05:d9:3d:f4:
         f2:aa:87:65:f0:6f:a7:20:f5:e0:e1:c5:61:f5:38:05:67:ce:
         ca:92:f7:00:0b:5c:62:20:dc:7e:98:45:f1:c1:92:e7:f2:32:
         6b:91:45:a1:7b:16:16:39:2e:dc:ef:96:ee:97:8c:35:59:cf:
         d7:98:80:13:da:11:87:75:ca:ae:0b:52:29:74:0e:0d:24:9b:
         81:7e:88:b6:c7:b3:b7:3a:a2:ac:22:7a:c4:df:f8:0b:a2:6b:
         3d:62:7a:1f:e0:e4:31:40:13:b8:14:ce:06:e1:3c:24:65:e3:
         cb:8b:1c:4f:b4:d4:b3:cd:b8:58:b2:a2:29:14:88:ad:49:22:
         a6:75:e9:c0:f8:bc:be:2d:77:dd:07:ae:c1:a3:1b:f7:05:31:
         55:d5:45:d4:fd:d6:1c:c9:e9:86:be:2c:a4:f6:6b:30:d5:4d:
         c7:41:30:ee:d7:6a:95:b8:7c:ae:d0:20:e9:cb:b4:c5:1f:73:
         83:e1:12:10:04:be:ec:b3:ee:89:c5:7e:50:94:44:59:5c:d8:
         26:9e:46:5a:5c:d1:d8:15:6a:a4:2c:df:8b:2f:67:c3:ef:f8:
         8e:ba:05:78:30:8f:70:48:dd:f1:c3:dc:e0:e9:b2:f4:5a:c0:
         10:56:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:00 2025 by rpki-client