Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6AFq98K7zlnq9PrzNpKDQ1-A6k.roa
File:                     w6AFq98K7zlnq9PrzNpKDQ1-A6k.roa (raw, json)
Hash identifier:          zGaInsrbRBKIkkt9mZpnQw8N9llTQ8p/QBEuJAWv7q4=
Subject key identifier:   C3:A0:05:AB:DF:0A:EF:39:67:AB:D3:EB:CC:DA:4A:0D:0D:7E:03:A9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2102
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6AFq98K7zlnq9PrzNpKDQ1-A6k.roa
Signing time:             Fri 25 Nov 2022 04:39:24 +0000
ROA not before:           Fri 25 Nov 2022 04:39:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.223.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8450 (0x2102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C3A005ABDF0AEF3967ABD3EBCCDA4A0D0D7E03A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:51:69:9d:4b:92:7b:a3:25:dd:10:09:95:44:
                    5e:d4:62:fb:1b:a4:de:e2:e7:6b:20:77:1a:0e:21:
                    12:78:2d:da:63:60:98:06:2a:89:cb:b0:e2:b4:ca:
                    98:75:73:51:2f:77:43:bb:55:0d:42:e7:ef:e1:4b:
                    f8:75:78:00:7c:c0:e5:4d:02:e0:cc:cb:bd:19:d2:
                    c7:e8:a3:51:da:a7:86:2a:80:5d:51:9e:ca:bd:17:
                    9f:f7:36:52:49:a5:69:a5:f4:f2:d6:01:d9:4d:f9:
                    67:e1:d5:c9:1f:e0:53:9b:72:2f:01:b1:ee:b1:d0:
                    71:d2:35:75:05:53:f0:b3:f4:e8:6a:43:ca:30:43:
                    82:20:0a:54:ba:d3:c3:67:a3:80:39:ea:af:59:7e:
                    c9:e9:c7:b0:8c:c0:29:88:ac:35:b6:ae:0c:35:4c:
                    7a:e8:82:3b:14:c9:0c:70:56:87:05:c8:1b:ac:e4:
                    32:24:6c:14:73:17:91:98:74:74:db:c9:aa:2d:27:
                    3b:c9:e8:82:33:3c:2c:a3:23:11:44:c3:2e:67:06:
                    4c:85:02:f1:f6:af:ac:23:e0:f9:f1:f3:4b:55:b8:
                    34:58:44:a4:54:c6:fe:1c:a8:56:f7:6c:99:2f:bd:
                    d1:f2:14:74:46:7b:14:22:41:a2:f7:c5:49:1e:19:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A0:05:AB:DF:0A:EF:39:67:AB:D3:EB:CC:DA:4A:0D:0D:7E:03:A9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6AFq98K7zlnq9PrzNpKDQ1-A6k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:25:7d:05:25:67:f8:a9:ee:8c:27:bd:ba:76:16:c7:6f:
         9d:e9:a5:4f:c2:5d:b5:ab:69:4f:de:d7:12:22:26:ab:1e:1c:
         68:23:2f:a7:cf:7e:1d:d2:8e:f2:43:8c:ae:85:e1:08:20:27:
         d3:b1:bf:eb:c2:94:d3:70:32:98:be:28:98:7d:79:22:a5:b2:
         a1:09:f5:77:f6:ea:a4:a6:31:d4:cd:f7:cf:d1:64:56:9c:92:
         04:4a:90:0c:32:ce:a9:6a:af:92:46:c3:87:19:8a:17:71:9b:
         39:2d:f3:60:21:cb:74:78:5b:39:83:8b:c7:54:77:c4:3c:3e:
         f0:54:db:97:b5:77:44:44:46:73:8c:49:06:82:87:87:2e:53:
         f8:37:1b:06:d6:7d:c3:25:44:af:41:13:19:00:51:9a:02:7e:
         c7:99:b3:9b:6b:07:5e:af:ea:24:4d:cd:5b:6c:e3:a1:5e:a9:
         aa:d0:e8:2d:f3:7f:17:1e:9e:29:bb:65:4e:3a:60:53:a9:ce:
         71:61:a0:66:7e:13:c2:40:35:62:7d:3f:2c:1b:40:0b:2d:dd:
         52:83:9d:e9:fb:4d:82:3b:6b:ba:db:74:50:0e:6e:9f:e4:f5:
         78:4a:07:b6:c4:78:6e:ec:ee:f2:cf:ed:33:10:c3:19:be:21:
         ee:5f:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:48 2025 by rpki-client