Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rvB5Fv3_KzHDjrmiSePDW-Zo0eg.roa
File:                     rvB5Fv3_KzHDjrmiSePDW-Zo0eg.roa (raw, json)
Hash identifier:          1HPedOMDik9NqMxEoKdbxI0wNXbEPw0CpBSYcm9D9vY=
Subject key identifier:   AE:F0:79:16:FD:FF:2B:31:C3:8E:B9:A2:49:E3:C3:5B:E6:68:D1:E8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14FD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rvB5Fv3_KzHDjrmiSePDW-Zo0eg.roa
Signing time:             Sun 07 Feb 2021 12:00:57 +0000
ROA not before:           Sun 07 Feb 2021 12:00:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.16.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5373 (0x14fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:00:57 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AEF07916FDFF2B31C38EB9A249E3C35BE668D1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:97:84:6e:f7:99:29:bc:e9:a8:eb:03:e5:
                    e8:5f:2d:a9:5c:29:5b:ea:7d:2f:78:b7:a7:09:cd:
                    e3:d5:ed:35:9a:ba:37:fb:7e:c0:ad:cb:96:a1:61:
                    9f:d3:62:82:5f:0c:f7:61:c8:20:b6:ae:61:36:49:
                    cb:33:a9:63:a8:16:44:37:62:8e:8a:e5:94:09:4a:
                    27:43:af:c1:82:e4:aa:1a:f2:65:e5:a1:43:7b:17:
                    ee:e3:dd:1c:b3:37:82:bf:76:97:ab:da:53:87:a8:
                    51:43:6e:ae:73:83:08:1c:16:7d:14:d3:94:95:d8:
                    f5:19:a2:8d:b2:98:e4:ac:2c:5b:a1:e5:05:d5:12:
                    a6:64:fa:b2:f5:b5:41:9c:6b:38:fb:08:46:8c:ed:
                    49:50:a5:d9:9c:92:54:a3:d1:2d:1f:d4:41:d4:73:
                    18:9c:67:b4:15:fe:17:e3:3e:17:68:df:21:e6:be:
                    ea:21:25:4b:28:0d:3f:84:8d:23:4d:a7:87:49:6f:
                    9f:15:5b:ed:e0:53:3a:46:2d:67:3f:c0:50:72:ac:
                    73:4c:37:7e:2d:b3:97:c8:38:4d:7a:85:70:b8:6d:
                    20:d2:20:91:17:ea:84:1b:07:64:22:93:0d:d1:45:
                    5d:b5:63:69:c4:09:77:86:0a:25:29:5a:40:1d:d9:
                    4b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F0:79:16:FD:FF:2B:31:C3:8E:B9:A2:49:E3:C3:5B:E6:68:D1:E8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rvB5Fv3_KzHDjrmiSePDW-Zo0eg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:01:e2:fc:a5:af:e6:0d:f1:d8:b1:f1:c8:37:04:af:d0:d9:
         db:2c:cd:aa:27:88:1a:89:bb:78:29:2b:00:0b:78:b6:72:00:
         94:e7:a9:57:a0:aa:9b:23:3f:da:a7:4c:a3:1a:64:dd:ae:0b:
         3b:18:92:9a:03:55:0e:34:8a:4f:76:50:4c:1c:25:6d:17:a6:
         af:1c:ce:b4:26:a2:b2:d4:6f:0a:78:ab:46:d1:b9:6b:94:6a:
         bd:5a:78:29:d4:c1:ba:96:30:7b:22:e4:bf:33:39:0e:74:3e:
         2d:65:ef:a4:ef:1f:43:03:8a:a0:af:b4:a2:0f:7b:b7:45:0b:
         89:7c:1a:96:6c:95:1d:de:7c:a6:39:27:9a:cf:8c:81:47:32:
         cc:44:f2:39:a6:6c:a3:c4:ce:1f:ea:97:bf:fe:ca:5b:cf:08:
         0f:bf:d2:1d:10:7b:b8:7c:9b:de:5b:1f:1a:19:49:8d:be:bb:
         7f:5d:1a:20:a2:26:d7:31:6f:3f:01:ed:e4:3f:57:66:42:06:
         1d:de:9e:b6:0c:5b:3a:bc:3c:b7:77:78:0c:33:49:51:1b:a2:
         b4:8a:7f:6b:bc:9c:2c:b7:0b:ca:06:94:d1:7b:23:14:ef:3d:
         b0:4a:05:30:34:db:91:a7:a3:95:85:92:9c:79:de:ba:bb:d4:
         73:fb:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:13 2025 by rpki-client