Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t41FQVZvJksFYloA7mcIfbJpoIY.roa
File:                     t41FQVZvJksFYloA7mcIfbJpoIY.roa (raw, json)
Hash identifier:          o3LIsPm2W76KdemNZSXob5ere8/0R0GqOV5awFmajPU=
Subject key identifier:   B7:8D:45:41:56:6F:26:4B:05:62:5A:00:EE:67:08:7D:B2:69:A0:86
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       165F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t41FQVZvJksFYloA7mcIfbJpoIY.roa
Signing time:             Sun 07 Feb 2021 12:10:02 +0000
ROA not before:           Sun 07 Feb 2021 12:10:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.148.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5727 (0x165f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:10:02 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B78D4541566F264B05625A00EE67087DB269A086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:a6:0c:9e:b7:46:10:9b:ba:29:b6:43:8d:
                    8e:27:f7:9b:b9:04:08:cb:a0:2a:3b:5d:94:8c:35:
                    99:62:4f:08:3c:72:eb:b9:e8:5a:ec:e6:14:e9:dc:
                    0d:a8:fb:63:b5:8e:c4:3a:39:2c:02:dd:a5:96:9b:
                    65:c7:2a:49:c0:6e:93:20:8d:a7:e8:f5:43:8f:d9:
                    1d:85:7c:92:aa:65:d4:88:a6:bb:5b:d0:83:64:e7:
                    c3:72:06:3c:d0:3c:b1:d3:ae:3c:63:90:43:3f:ff:
                    2d:45:83:ed:90:f7:df:5c:fc:01:24:e3:96:db:0b:
                    93:7b:d7:8d:b7:cb:ca:05:90:b9:54:1b:29:5b:ed:
                    ea:8f:de:ca:0c:19:c1:83:c1:cd:42:74:6a:0c:20:
                    da:fc:c9:24:24:8c:37:d0:f8:6b:80:ab:6f:6a:be:
                    2c:a6:02:86:e4:db:36:f0:03:03:6d:ba:29:47:21:
                    07:b9:41:03:0e:c6:b3:9f:6e:30:1b:57:b6:0a:10:
                    11:39:c7:cb:a8:3b:12:f1:13:4a:da:f7:09:e6:f4:
                    91:1e:55:1c:df:18:07:ad:b5:a3:d8:3d:d0:1a:2d:
                    5c:cd:db:e0:dd:9d:e4:f6:4e:57:cc:15:ac:80:20:
                    c8:b5:70:e1:73:e1:6e:bb:b4:de:ce:92:fa:72:ca:
                    27:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8D:45:41:56:6F:26:4B:05:62:5A:00:EE:67:08:7D:B2:69:A0:86
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t41FQVZvJksFYloA7mcIfbJpoIY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:19:ce:5c:5b:77:de:c3:fb:56:e1:02:f3:23:fb:c5:3c:4e:
         58:c8:af:82:cc:fa:0b:33:b2:d4:96:6b:bc:41:b0:d8:75:c1:
         5a:49:66:0f:58:4b:0c:59:92:5a:ef:37:54:30:9d:87:00:7a:
         1c:40:d1:68:03:bd:83:22:da:a3:de:f1:5f:c8:b0:0a:59:79:
         b2:48:ec:68:1f:3f:cf:c7:6e:eb:d2:f3:95:57:df:25:ee:82:
         bb:a1:0a:f4:0f:a3:af:e1:65:91:d4:59:33:b2:12:fa:aa:bb:
         7d:96:b4:bd:e2:ca:c8:98:3d:b1:c1:aa:7b:e6:b3:9b:88:96:
         3b:c0:d9:2d:64:29:01:42:8e:7e:a0:76:60:76:05:fd:41:5c:
         75:83:a5:e2:a4:19:a2:4b:3a:2f:10:8d:9d:57:b3:1b:88:ae:
         f5:33:ae:28:9a:5d:a7:9a:f3:ef:3c:af:67:31:89:7b:b1:dc:
         c2:40:2f:93:3d:21:50:48:f0:c2:15:c4:26:12:80:94:60:db:
         c7:28:7e:4a:61:b3:b8:f3:70:7f:09:50:20:3d:16:82:1a:57:
         b0:2b:f3:ca:38:61:80:ba:ce:86:a1:14:a5:5b:3c:d1:8e:0e:
         7a:0e:14:a4:6a:5f:8f:50:85:ab:7f:e5:64:90:71:ec:fa:9b:
         c2:74:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:48 2025 by rpki-client