Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wKcDV25rDAEm3p_z3NVHjdLvPWk.roa
File:                     wKcDV25rDAEm3p_z3NVHjdLvPWk.roa (raw, json)
Hash identifier:          fdibmTx1cReDFL1lLq0MWV2n6ZkL4sPOH8Mgo0Wcxug=
Subject key identifier:   C0:A7:03:57:6E:6B:0C:01:26:DE:9F:F3:DC:D5:47:8D:D2:EF:3D:69
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E9D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wKcDV25rDAEm3p_z3NVHjdLvPWk.roa
Signing time:             Tue 29 Sep 2020 09:55:57 +0000
ROA not before:           Tue 29 Sep 2020 09:55:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.44.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3741 (0xe9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C0A703576E6B0C0126DE9FF3DCD5478DD2EF3D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:ad:dc:dd:52:36:41:ad:52:e6:01:54:65:
                    ee:ea:a4:5d:4c:5e:80:f8:9b:16:fc:c9:21:7b:aa:
                    60:5f:d7:3f:84:ce:87:1e:d3:ef:ea:0a:28:5d:17:
                    dc:b3:fe:77:02:55:67:c2:ae:c8:dd:dd:f0:53:79:
                    cf:47:58:46:ef:aa:76:24:7c:c7:25:d0:83:d2:cc:
                    04:72:f4:9c:74:2d:62:cb:dc:80:2e:6e:9e:4e:76:
                    db:31:44:81:8c:c4:36:98:f8:bf:ae:e3:19:31:aa:
                    b8:0c:ae:d4:95:3c:23:86:25:e2:9c:02:e3:b2:d5:
                    7a:88:1b:4c:ed:61:71:08:1f:c6:76:8f:84:a9:6f:
                    47:20:fe:ee:21:b4:8a:c6:e8:74:07:27:7d:f8:23:
                    3b:4f:82:6d:e8:ad:7b:4c:46:5c:48:f8:c8:c0:b0:
                    a1:dc:a7:5f:0b:31:54:7a:d5:28:d0:bf:66:df:65:
                    29:c3:30:54:6e:bc:3d:5e:25:24:d6:88:a7:6b:36:
                    04:82:70:06:fd:c6:63:88:0a:32:31:d0:77:54:c3:
                    8a:db:e4:3f:87:15:a9:4e:3a:16:99:0c:3b:3b:61:
                    ef:9b:f0:52:cb:60:87:53:cb:29:37:f4:50:c8:7c:
                    9e:6f:de:d8:37:9c:31:aa:82:3e:31:3f:66:53:7c:
                    b7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A7:03:57:6E:6B:0C:01:26:DE:9F:F3:DC:D5:47:8D:D2:EF:3D:69
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wKcDV25rDAEm3p_z3NVHjdLvPWk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:e0:e6:03:b9:47:1d:d9:71:a2:2c:91:5c:e7:35:db:98:e2:
         f9:40:cd:ba:c7:f5:4e:82:9d:ae:c0:b9:ec:e4:71:3b:43:f6:
         07:6f:24:d7:1f:d5:3d:f5:e2:3c:b3:66:f8:b9:76:31:d9:27:
         9d:9d:f9:09:b2:21:c0:91:3d:1f:f6:42:d5:53:72:34:72:66:
         05:fc:81:46:c4:29:d4:ae:95:79:19:fe:0e:e8:95:2e:d0:c3:
         d4:44:ce:65:b0:b8:83:e7:f4:73:9c:73:43:0b:50:12:9a:10:
         87:92:03:fc:c7:0a:ef:ab:13:e7:dd:51:02:86:d1:8f:dd:5e:
         b6:df:3f:0b:60:17:cd:5c:73:72:0f:b1:c2:bd:a5:4c:13:e1:
         52:8e:41:2d:39:07:59:1c:f7:1a:28:26:f5:d6:aa:b5:17:8a:
         3d:02:1b:71:27:1f:c3:18:93:f5:1c:87:0f:1d:f8:30:c6:fc:
         a6:94:65:81:2f:0a:21:11:46:4a:31:bf:e8:df:e4:95:85:c2:
         44:54:b3:08:d1:d8:62:cf:61:40:f5:d3:90:61:cd:32:2b:4d:
         f4:64:87:ef:89:6f:34:da:d9:99:05:40:0a:7a:17:1c:d2:15:
         b0:e7:5d:3f:b2:5f:71:e6:85:15:f4:ec:31:35:7a:ca:c8:95:
         55:de:c7:ba
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDp0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMwQTcwMzU3NkU2QjBD
MDEyNkRFOUZGM0RDRDU0NzhERDJFRjNENjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8N63c3VI2Qa1S5gFUZe7qpF1MXoD4mxb8ySF7qmBf1z+Ezoce
0+/qCihdF9yz/ncCVWfCrsjd3fBTec9HWEbvqnYkfMcl0IPSzARy9Jx0LWLL3IAu
bp5OdtsxRIGMxDaY+L+u4xkxqrgMrtSVPCOGJeKcAuOy1XqIG0ztYXEIH8Z2j4Sp
b0cg/u4htIrG6HQHJ334IztPgm3orXtMRlxI+MjAsKHcp18LMVR61SjQv2bfZSnD
MFRuvD1eJSTWiKdrNgSCcAb9xmOICjIx0HdUw4rb5D+HFalOOhaZDDs7Ye+b8FLL
YIdTyyk39FDIfJ5v3tg3nDGqgj4xP2ZTfLdDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwKcDV25rDAEm3p/z3NVHjdLvPWkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dLY0RWMjVyREFFbTNwX3oz
TlZIamRMdlBXay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6CwwDQYJKoZIhvcNAQELBQADggEBALng5gO5Rx3ZcaIskVznNduY4vlAzbrH9U6C
na7AuezkcTtD9gdvJNcf1T314jyzZvi5djHZJ52d+QmyIcCRPR/2QtVTcjRyZgX8
gUbEKdSulXkZ/g7olS7Qw9REzmWwuIPn9HOcc0MLUBKaEIeSA/zHCu+rE+fdUQKG
0Y/dXrbfPwtgF81cc3IPscK9pUwT4VKOQS05B1kc9xooJvXWqrUXij0CG3EnH8MY
k/Uchw8d+DDG/KaUZYEvCiERRkoxv+jf5JWFwkRUswjR2GLPYUD105BhzTIrTfRk
h++JbzTa2ZkFQAp6FxzSFbDnXT+yX3HmhRX07DE1esrIlVXex7o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:33 2025 by rpki-client