Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yHAd4HWzSUST_kOsL1zV2xkYpa8.roa
File:                     yHAd4HWzSUST_kOsL1zV2xkYpa8.roa (raw, json)
Hash identifier:          bBsiwwF0MUc8PlEpLDGCgRj3cWSo6246+ElCycxrtmk=
Subject key identifier:   C8:70:1D:E0:75:B3:49:44:93:FE:43:AC:2F:5C:D5:DB:19:18:A5:AF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E16
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yHAd4HWzSUST_kOsL1zV2xkYpa8.roa
Signing time:             Tue 29 Sep 2020 09:55:19 +0000
ROA not before:           Tue 29 Sep 2020 09:55:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.56.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3606 (0xe16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:19 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C8701DE075B3494493FE43AC2F5CD5DB1918A5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:60:c2:87:b3:3d:33:5b:25:57:58:34:95:
                    6e:02:19:d3:0a:bc:ee:50:54:7d:df:20:06:60:33:
                    6b:ee:6d:d9:45:b8:53:3a:8d:7f:1c:ff:3e:96:36:
                    14:ca:2c:3a:5f:e4:b3:3d:a5:b2:c4:12:08:14:fc:
                    f7:89:8d:b3:75:71:4d:fd:51:d9:76:9f:2a:cd:16:
                    3c:f8:a7:8f:e0:f5:65:2f:aa:d1:1b:87:df:da:a0:
                    b3:54:8e:a7:ed:9e:a6:8b:c2:c5:f7:ac:12:f2:28:
                    aa:75:20:5f:2d:9c:1b:35:78:0a:7c:a7:38:ec:f3:
                    9c:55:b6:f0:f7:c7:46:60:92:e8:b8:66:f7:74:23:
                    b8:a8:62:3e:9f:e1:68:9f:c3:5e:55:f8:0b:d9:65:
                    78:a9:0e:13:b3:92:e3:48:ee:2b:ef:9c:94:7c:39:
                    4e:7d:6a:89:95:76:2c:29:a5:31:69:ff:84:fb:5d:
                    0a:b9:06:9c:e7:af:81:8c:92:d6:4b:a7:07:4e:d5:
                    53:59:5a:3c:41:57:bb:a0:a3:0a:59:4e:2b:31:88:
                    64:5e:b0:54:8b:65:15:76:5d:92:b3:03:54:8e:3d:
                    8f:2a:71:f5:4c:39:29:3e:03:94:c3:0a:3c:72:4d:
                    e5:f9:ab:67:cf:7b:b1:02:2c:3e:52:e8:ed:02:b8:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:70:1D:E0:75:B3:49:44:93:FE:43:AC:2F:5C:D5:DB:19:18:A5:AF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yHAd4HWzSUST_kOsL1zV2xkYpa8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:3d:da:70:21:41:33:c5:d0:16:12:8a:23:c9:97:a5:32:e3:
         8e:6e:15:78:3a:02:6e:6b:f3:43:42:dd:99:2e:fc:07:d4:ee:
         38:2f:08:86:11:b3:b9:fe:1a:36:ee:91:69:7a:1f:68:08:8d:
         7e:8a:c1:79:05:c0:c2:50:4a:f1:da:e9:e2:8a:1c:f1:82:a1:
         ce:3d:55:10:d5:f1:87:b7:21:e1:6c:ee:8d:2e:9d:6b:07:68:
         2d:a2:0b:ca:28:96:22:bd:96:30:50:27:34:5e:09:c2:c0:d7:
         4a:28:a4:aa:40:82:06:2c:30:44:bd:14:0f:a7:83:e0:02:5c:
         e3:0a:05:34:9f:c1:81:51:cd:04:38:9d:f2:fd:e6:49:c0:a1:
         1c:38:1c:f0:6b:7e:c9:9b:bf:73:e0:65:c8:3e:c2:8e:f8:29:
         82:6d:39:c8:9b:1e:f7:e7:95:b8:78:27:c5:44:ae:9e:31:84:
         43:89:67:ff:51:d7:62:2e:f5:84:58:a3:10:d0:e9:24:c4:91:
         5a:41:8b:00:ec:56:91:b8:26:36:fa:47:b0:88:b3:f9:d4:42:
         42:e7:45:db:44:7a:ea:ef:3e:42:d6:c0:26:ba:2f:dc:fa:90:
         16:c7:97:a8:a1:a0:00:c8:58:a1:ca:29:9f:7c:82:c1:4f:14:
         06:e3:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:12 2025 by rpki-client