Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y5E31cQe86aSRwBH4lgdJYNYyaI.roa
File:                     y5E31cQe86aSRwBH4lgdJYNYyaI.roa (raw, json)
Hash identifier:          0+6UzkMlTKmtYypg8d5+nFP+2xkwkEo0GV0pKJlQUqw=
Subject key identifier:   CB:91:37:D5:C4:1E:F3:A6:92:47:00:47:E2:58:1D:25:83:58:C9:A2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F1D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y5E31cQe86aSRwBH4lgdJYNYyaI.roa
Signing time:             Tue 29 Sep 2020 09:56:31 +0000
ROA not before:           Tue 29 Sep 2020 09:56:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.164.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3869 (0xf1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CB9137D5C41EF3A692470047E2581D258358C9A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:4c:8d:a7:34:42:fd:9b:c9:cb:89:d4:1e:
                    7f:5e:3e:1c:ad:fa:68:1e:99:db:87:24:9a:1a:a5:
                    ef:af:b7:33:10:9e:68:95:c8:53:f0:44:92:4a:27:
                    2b:71:3b:82:de:bf:4c:f8:37:60:38:32:ff:d1:42:
                    e2:88:5b:c4:79:ee:2b:4d:68:77:22:5f:92:8f:79:
                    14:c9:51:dd:15:85:04:8b:23:a5:07:16:04:b7:a3:
                    f4:33:9b:e7:c4:69:cc:c3:4c:84:a4:63:eb:c6:25:
                    de:8e:25:87:42:43:e0:11:3e:ca:02:34:37:4d:0f:
                    22:c8:70:da:83:9f:bb:06:45:0a:8f:30:c2:b7:09:
                    c8:7b:95:85:c2:92:da:ef:c8:17:15:71:c7:69:d4:
                    9d:be:75:5a:16:2e:bc:26:1f:07:18:5d:56:d0:d9:
                    ca:56:e8:11:da:c0:b5:9e:bc:6a:32:f9:c7:4c:9e:
                    ac:ac:13:b0:c8:b2:77:cb:8e:9a:0d:5c:6e:2a:09:
                    1f:2b:32:56:fa:83:08:f6:f5:0c:2c:82:0a:f4:44:
                    d4:96:9d:46:a4:6f:e9:ca:39:2e:d7:68:95:42:79:
                    e5:09:3f:80:f8:04:c6:49:a2:54:d4:c8:d6:85:7b:
                    96:f6:c6:ad:35:7d:12:b4:45:a9:f5:31:45:26:39:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:91:37:D5:C4:1E:F3:A6:92:47:00:47:E2:58:1D:25:83:58:C9:A2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y5E31cQe86aSRwBH4lgdJYNYyaI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:53:5e:24:b2:9f:1d:ac:a0:bf:57:01:82:7f:a1:a9:e2:c0:
         ee:c6:6a:cf:f0:80:bb:fa:29:3e:51:1b:7f:1a:41:8a:72:0d:
         bf:ff:f9:7a:ae:b6:ad:0f:01:9a:60:8a:16:66:3e:a2:07:56:
         4c:a8:c4:13:50:db:bf:7f:92:9f:27:03:2a:cf:c8:7f:ee:4b:
         0b:92:d4:70:73:7e:0f:cb:fb:55:e5:3b:42:f3:c5:cd:6d:58:
         f9:c1:06:5f:35:6a:5c:5e:1a:69:ae:2c:30:46:12:53:40:c0:
         d7:c6:05:ce:db:95:13:e9:e9:b2:d8:76:46:fd:ba:21:85:3e:
         e4:74:11:b1:88:00:7e:30:9d:19:50:97:71:ce:b8:09:05:e4:
         ad:b5:55:62:4d:5f:b2:04:20:0f:e4:e1:16:ca:7a:f3:73:99:
         c1:f0:f2:81:e9:fc:e8:3d:2b:c2:ca:1b:ce:cf:3f:cf:92:3f:
         90:fa:fa:20:9d:70:b2:47:8e:aa:fd:0c:2d:af:c9:6f:88:ad:
         67:9d:6a:c4:69:19:91:99:44:72:0d:45:08:af:c0:71:71:99:
         5e:22:6d:ec:18:cf:84:c4:92:4c:49:7a:6a:3c:56:f8:87:19:
         59:38:cf:ff:16:b5:20:8f:1d:61:fd:d6:4a:c7:79:02:81:56:
         f9:5d:2e:94
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDx0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKENCOTEzN0Q1QzQxRUYz
QTY5MjQ3MDA0N0UyNTgxRDI1ODM1OEM5QTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChp0yNpzRC/ZvJy4nUHn9ePhyt+mgemduHJJoape+vtzMQnmiV
yFPwRJJKJytxO4Lev0z4N2A4Mv/RQuKIW8R57itNaHciX5KPeRTJUd0VhQSLI6UH
FgS3o/Qzm+fEaczDTISkY+vGJd6OJYdCQ+ARPsoCNDdNDyLIcNqDn7sGRQqPMMK3
Cch7lYXCktrvyBcVccdp1J2+dVoWLrwmHwcYXVbQ2cpW6BHawLWevGoy+cdMnqys
E7DIsnfLjpoNXG4qCR8rMlb6gwj29Qwsggr0RNSWnUakb+nKOS7XaJVCeeUJP4D4
BMZJolTUyNaFe5b2xq01fRK0Ran1MUUmOVOlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUy5E31cQe86aSRwBH4lgdJYNYyaIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3k1RTMxY1FlODZhU1J3Qkg0
bGdkSllOWXlhSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AaQwDQYJKoZIhvcNAQELBQADggEBAFxTXiSynx2soL9XAYJ/oaniwO7Gas/wgLv6
KT5RG38aQYpyDb//+Xqutq0PAZpgihZmPqIHVkyoxBNQ279/kp8nAyrPyH/uSwuS
1HBzfg/L+1XlO0Lzxc1tWPnBBl81alxeGmmuLDBGElNAwNfGBc7blRPp6bLYdkb9
uiGFPuR0EbGIAH4wnRlQl3HOuAkF5K21VWJNX7IEIA/k4RbKevNzmcHw8oHp/Og9
K8LKG87PP8+SP5D6+iCdcLJHjqr9DC2vyW+IrWedasRpGZGZRHINRQivwHFxmV4i
bewYz4TEkkxJemo8VviHGVk4z/8WtSCPHWH91krHeQKBVvldLpQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:45 2025 by rpki-client