Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sAA6EOl7_-nx89jFYN0OLqeLNiU.roa
File:                     sAA6EOl7_-nx89jFYN0OLqeLNiU.roa (raw, json)
Hash identifier:          +LlfHkBUlGo79yWAZaQDfNmyZJTSqQBAHo06iKZ03ZU=
Subject key identifier:   B0:00:3A:10:E9:7B:FF:E9:F1:F3:D8:C5:60:DD:0E:2E:A7:8B:36:25
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       229B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sAA6EOl7_-nx89jFYN0OLqeLNiU.roa
Signing time:             Fri 25 Nov 2022 04:41:23 +0000
ROA not before:           Fri 25 Nov 2022 04:41:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.112.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8859 (0x229b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:23 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B0003A10E97BFFE9F1F3D8C560DD0E2EA78B3625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:71:59:31:74:66:e7:94:18:2a:61:94:dc:
                    fb:35:73:df:32:7c:80:c0:f2:cc:e2:41:24:a1:b2:
                    91:10:bf:d1:69:c1:99:8a:b8:7e:e2:c9:a4:f4:24:
                    ec:26:04:1f:10:1d:b0:32:b9:4c:07:d5:81:fd:d5:
                    84:3c:0c:16:af:48:47:95:6e:70:01:e6:5a:0c:7e:
                    fb:99:b5:74:6d:ea:f7:49:db:d1:98:07:62:9c:9f:
                    d3:cd:e2:41:42:83:3b:4e:eb:de:58:80:99:b4:a6:
                    c4:39:cb:03:80:6c:cc:ff:7d:e4:79:ce:1f:fa:2c:
                    96:01:c0:f1:24:e5:2b:c6:d9:57:f0:ec:89:99:f0:
                    32:5e:8a:5b:06:cb:4a:bc:62:d0:7b:f6:aa:3b:78:
                    eb:e5:9f:18:96:09:f9:97:0f:ea:ef:7f:89:2c:73:
                    3e:26:46:4b:bb:e1:80:9f:82:24:ea:e2:15:0b:7b:
                    d7:58:c2:9f:fb:29:a4:8c:db:b5:16:bf:c8:c5:dd:
                    5e:9e:df:07:53:a9:c8:10:18:e3:31:7a:5d:c5:f8:
                    0e:28:fa:d8:a5:00:85:f9:44:f5:99:5c:8b:42:f9:
                    6f:1b:5a:88:52:57:30:27:e3:f8:bc:db:65:b1:dd:
                    85:11:29:e4:03:b9:ee:56:30:57:2e:f2:0d:e1:da:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:00:3A:10:E9:7B:FF:E9:F1:F3:D8:C5:60:DD:0E:2E:A7:8B:36:25
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sAA6EOl7_-nx89jFYN0OLqeLNiU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:74:7d:d0:41:7d:c3:ac:91:ed:e5:95:be:58:49:d2:24:5b:
         9c:b4:3d:d1:71:5e:d5:91:b3:6e:d9:b4:f7:17:d7:3d:8b:f5:
         81:b7:af:8f:ee:12:3a:d7:85:1c:22:ba:fe:38:15:9d:3c:ce:
         69:f4:f4:33:01:f5:88:4f:fe:ac:f1:dd:c8:b8:f4:50:0e:3b:
         ad:83:8c:eb:e4:b7:0b:9e:e2:b3:3e:1d:3f:ec:27:af:02:56:
         4c:d0:fd:c5:57:9e:a4:19:8c:5e:c1:9d:58:d6:d4:3a:8a:f5:
         37:36:c3:d9:80:12:b6:58:a6:c3:74:fd:5c:57:ec:7c:27:25:
         29:da:fc:7e:bb:05:23:b4:d6:42:eb:a6:e9:c2:5e:93:de:8d:
         8e:60:89:f0:8b:bc:a2:79:96:96:73:fe:24:0d:e7:b8:9b:fb:
         4f:33:86:41:b1:65:c8:ee:6b:3a:9b:42:ad:69:11:6e:2b:a6:
         7d:99:b9:b9:d6:f6:05:7a:01:09:e7:ee:7d:7c:59:58:eb:6f:
         b4:63:c0:a3:b4:eb:1a:ee:fe:4c:03:75:7e:37:20:f5:d2:5f:
         75:72:36:60:74:e6:76:6c:a9:b3:cf:cb:9e:07:bd:e1:33:25:
         4e:7b:4c:bc:6b:f5:9a:a3:c0:f0:1a:9f:8d:5f:e8:5f:61:20:
         76:8d:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:22 2025 by rpki-client