Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v76MW0mXdSK3vRbtpDPibTYPuYo.roa
File:                     v76MW0mXdSK3vRbtpDPibTYPuYo.roa (raw, json)
Hash identifier:          CQ8PIzsp9anBi4jypL77fcj21vytnvgNBT+A1jEFCKs=
Subject key identifier:   BF:BE:8C:5B:49:97:75:22:B7:BD:16:ED:A4:33:E2:6D:36:0F:B9:8A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EAF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v76MW0mXdSK3vRbtpDPibTYPuYo.roa
Signing time:             Tue 29 Sep 2020 09:56:01 +0000
ROA not before:           Tue 29 Sep 2020 09:56:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.123.0/25 maxlen: 25
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3759 (0xeaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BFBE8C5B49977522B7BD16EDA433E26D360FB98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ec:fe:76:35:78:d0:1e:f0:2f:7b:64:2c:fb:
                    f8:e7:aa:19:ec:a3:01:0b:4b:8b:74:20:dd:78:c6:
                    e7:ac:fd:f2:0a:0d:7c:c6:89:80:07:5c:9c:eb:da:
                    75:ea:b9:5f:44:7e:2f:c0:ca:fc:64:a7:67:9e:4f:
                    4d:03:ea:51:3e:c4:bd:68:ce:20:11:16:60:95:78:
                    2b:a9:1c:d7:53:53:8a:e5:10:50:eb:1c:59:63:d3:
                    1f:8a:4d:d7:51:81:15:13:4f:f5:4a:45:aa:d0:40:
                    17:8d:50:17:ad:14:cd:89:cd:40:75:37:9a:51:4e:
                    89:4e:39:da:b7:46:67:7d:81:3d:c6:4a:5d:f9:6e:
                    17:21:d1:f9:a3:1d:d3:00:2d:f0:e3:ff:42:dd:80:
                    18:8f:57:82:ab:05:57:ef:e5:55:06:ad:93:3b:7f:
                    80:52:fc:c3:eb:42:9b:a4:9a:79:c3:33:c0:02:2e:
                    ff:99:7e:14:23:95:ca:70:93:6a:09:4e:95:22:35:
                    c9:eb:c3:6f:75:b9:85:1a:4f:01:4e:7d:33:cf:67:
                    3d:c4:fd:05:63:a9:76:6f:04:d7:8f:02:c9:76:9f:
                    0b:5c:f4:38:3c:53:bb:99:e6:69:40:8a:7a:64:9a:
                    3b:d9:4a:dd:a3:1d:3f:78:f7:7f:9d:e6:2a:ff:88:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:8C:5B:49:97:75:22:B7:BD:16:ED:A4:33:E2:6D:36:0F:B9:8A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v76MW0mXdSK3vRbtpDPibTYPuYo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.123.0/25

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:f6:93:6b:1d:4b:80:6c:21:af:4f:12:69:88:b0:56:9f:
         b9:99:2d:0e:e9:99:2e:0c:88:09:d9:49:cd:22:c2:41:ab:3c:
         0f:ff:5a:01:fc:fa:ea:50:1d:86:c5:9c:98:7d:fe:71:1c:a4:
         16:12:fb:d8:fc:21:59:bc:6a:18:5e:f9:2c:35:ab:53:70:ca:
         cf:f3:17:66:cb:f5:58:67:47:f5:a2:a7:dc:e1:90:19:f4:5d:
         35:e1:3d:c1:c0:24:33:af:82:27:95:13:c3:e5:7d:36:8f:a0:
         5c:53:70:0e:f8:ae:79:36:cf:4d:35:b8:ac:76:21:e7:cb:a4:
         f1:a1:90:11:c7:ea:43:10:e3:e6:8c:02:b8:d2:d1:e9:12:28:
         30:34:c0:78:c6:a6:7d:d9:0d:83:68:4b:50:2c:03:8b:b3:36:
         cc:bf:14:13:16:b7:4c:46:b1:24:b4:6f:e5:1d:d0:c1:1a:42:
         c3:a6:5a:c4:ba:03:17:60:06:bc:41:4d:1c:72:f3:4e:6d:5c:
         74:c1:e0:f9:63:e2:ba:50:55:5d:a3:30:69:49:c8:9d:12:5f:
         0f:f1:80:87:cd:24:db:76:63:97:29:86:c7:1f:2e:e0:ae:5f:
         c2:89:b6:15:c1:db:f2:d7:a0:82:07:9d:4d:a1:c2:d4:f4:06:
         81:ad:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:57 2025 by rpki-client