Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tlNSKqyCEi16Zdl6-dXRNFq5qGw.roa
File:                     tlNSKqyCEi16Zdl6-dXRNFq5qGw.roa (raw, json)
Hash identifier:          C2jfcDMwhsvYD2bUeZGFvAfQj7mGZgxdBLrIjkrzIGE=
Subject key identifier:   B6:53:52:2A:AC:82:12:2D:7A:65:D9:7A:F9:D5:D1:34:5A:B9:A8:6C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E5A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tlNSKqyCEi16Zdl6-dXRNFq5qGw.roa
Signing time:             Tue 29 Sep 2020 09:55:38 +0000
ROA not before:           Tue 29 Sep 2020 09:55:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.177.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3674 (0xe5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B653522AAC82122D7A65D97AF9D5D1345AB9A86C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:10:5e:a1:d7:d1:9e:5d:cf:2f:0d:fd:97:
                    bf:a2:20:33:18:28:ae:6d:99:e2:f3:f6:ee:f0:85:
                    73:86:f1:a4:36:86:d6:a1:c3:0a:ce:7b:97:33:bc:
                    22:5d:c1:72:f6:f0:7c:5b:4d:3a:85:6e:fc:3d:97:
                    39:83:36:81:69:37:44:0b:60:f1:a9:86:88:34:05:
                    d7:06:73:de:47:29:5b:80:4f:b5:4e:40:ee:42:de:
                    a9:9e:2b:ac:b3:ad:f7:e8:8e:aa:b7:9c:9c:ee:b5:
                    eb:52:08:46:f9:d7:f7:87:2f:b2:33:fa:dd:e8:ef:
                    38:1e:01:6f:8b:3b:f4:19:35:24:12:a3:73:f2:c0:
                    b5:80:59:ed:33:98:08:e1:5f:8e:fb:17:fd:46:79:
                    e8:e8:1c:75:be:48:88:67:9f:31:d4:4d:4d:93:ef:
                    f2:a2:aa:2e:bd:e4:18:cf:f2:d0:4d:dc:cb:25:a5:
                    ff:d6:14:18:50:98:5f:4b:4d:9a:48:fd:c0:aa:7d:
                    f2:39:75:6b:2a:1f:81:7a:b5:77:4a:54:87:35:77:
                    3c:f3:74:b2:7c:e6:6e:29:61:4d:77:77:61:15:58:
                    29:f7:88:54:fa:d6:27:0b:ef:59:43:7e:21:fc:90:
                    e2:ed:b1:57:bc:3d:eb:5f:27:d5:b6:14:a6:e5:94:
                    ce:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:53:52:2A:AC:82:12:2D:7A:65:D9:7A:F9:D5:D1:34:5A:B9:A8:6C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tlNSKqyCEi16Zdl6-dXRNFq5qGw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e9:9e:3a:8d:e3:9e:2a:82:10:45:d1:0f:6c:ee:a5:d5:87:
         f6:49:96:21:bd:09:f2:01:79:eb:3b:9d:17:fd:13:36:03:fb:
         d4:4b:cc:d7:04:50:89:66:da:fc:8a:a0:d9:08:d1:1a:f9:36:
         90:14:ee:d0:54:4a:30:b8:eb:d7:30:2a:6e:a2:93:6c:72:c2:
         da:cc:10:de:74:4d:40:c0:df:ed:a0:30:d1:74:75:04:a1:5f:
         f8:49:23:63:e6:c1:a4:ae:87:62:b5:65:2a:7b:68:18:db:95:
         08:7c:0a:58:92:fc:e5:e4:8b:ad:2d:16:5b:43:5c:de:1a:49:
         20:a3:9b:10:38:c0:ac:c3:36:cb:1e:6b:9e:65:38:e9:cf:35:
         66:31:86:be:47:3a:07:6f:24:a8:ce:56:5f:d2:e1:60:9e:8f:
         58:a5:86:36:c1:c4:f1:3b:57:ac:8d:54:94:f2:68:b4:b0:90:
         6a:80:cc:7d:fd:c8:ca:0b:4c:ed:c9:54:44:b9:1f:5d:20:a6:
         8f:6d:a3:3b:c4:36:c3:1d:c8:4e:0e:aa:73:c7:2a:db:74:cc:
         53:d9:9d:19:6e:2c:8a:a7:e6:ec:41:9c:55:e6:35:8b:82:c8:
         0d:15:ed:70:d5:32:3d:dd:c5:30:29:0f:9a:40:11:36:0b:64:
         d0:97:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:58 2025 by rpki-client