Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvBYnJxTxfBdASC1T0X_Nxc_pZE.roa
File:                     zvBYnJxTxfBdASC1T0X_Nxc_pZE.roa (raw, json)
Hash identifier:          0g0ghF/kM0HtyXg3nP+YwnSybHPWyRG7878NzZ48Kmk=
Subject key identifier:   CE:F0:58:9C:9C:53:C5:F0:5D:01:20:B5:4F:45:FF:37:17:3F:A5:91
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D16
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvBYnJxTxfBdASC1T0X_Nxc_pZE.roa
Signing time:             Tue 29 Sep 2020 09:54:10 +0000
ROA not before:           Tue 29 Sep 2020 09:54:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.109.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3350 (0xd16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:10 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CEF0589C9C53C5F05D0120B54F45FF37173FA591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:df:7c:13:b4:5b:04:7d:bc:2b:73:96:3e:
                    3f:06:60:87:38:61:a7:f0:ba:81:b9:d9:8d:3f:23:
                    44:95:27:ed:e7:94:ce:d9:9a:2a:86:3c:c6:81:26:
                    0a:5c:b6:d5:d4:77:95:0d:70:54:65:39:9f:dd:1f:
                    ba:72:c5:3b:42:dd:d0:d6:12:ad:bf:99:12:91:70:
                    8d:9f:a7:03:ee:8b:f9:da:23:53:9b:8f:f5:55:21:
                    a2:af:b1:3f:89:14:fd:ed:20:d0:15:36:7b:ec:53:
                    a6:19:a3:20:8d:02:76:f6:79:e3:3b:1f:3d:83:ac:
                    19:cf:5a:a3:fa:c8:1f:ef:c0:60:be:41:be:42:59:
                    fc:72:7f:38:72:66:68:eb:48:14:35:4c:d7:a0:1f:
                    28:1b:5b:8b:5c:72:a6:d7:71:c4:c0:83:c2:26:fb:
                    a4:e5:24:e4:00:27:b0:d3:21:5b:71:b6:86:5d:cf:
                    41:e8:8f:16:83:b2:19:a2:28:a1:ec:ed:5a:bc:1b:
                    cb:25:6d:6f:d4:27:4a:85:56:c1:b8:cf:16:f3:7f:
                    05:54:7f:54:70:20:44:4e:aa:2f:dd:f3:8b:cf:ee:
                    28:fa:1a:39:a3:10:10:53:d2:d5:4f:96:65:41:6e:
                    1f:b2:6b:ba:89:d4:58:50:0d:7c:2d:29:20:fe:3c:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F0:58:9C:9C:53:C5:F0:5D:01:20:B5:4F:45:FF:37:17:3F:A5:91
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvBYnJxTxfBdASC1T0X_Nxc_pZE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:75:3d:8e:0b:b9:d9:ac:29:ec:7e:24:0c:f2:a6:81:24:
         82:f2:e7:45:5b:2a:3f:cc:e2:8f:bb:1c:b4:cb:e1:a8:d8:86:
         0e:19:11:b3:47:cd:97:42:91:ae:14:03:ce:7a:8e:f2:32:96:
         91:88:61:11:5d:67:4a:af:45:b7:8e:10:dc:1e:f1:58:e8:ce:
         c4:9c:a5:1f:71:be:40:57:b6:06:9c:72:1d:4c:29:3c:f0:fa:
         e0:1e:49:c0:92:1a:aa:a0:92:ce:3a:af:36:45:44:22:ae:85:
         bd:e6:e1:5b:fe:89:4e:84:19:10:2d:94:85:e1:17:bb:26:c5:
         cb:bf:e1:16:55:a6:74:b1:62:ba:9a:37:a7:e4:44:85:f5:52:
         7d:68:dc:94:ce:38:e1:84:53:bd:c6:ef:86:a4:6f:35:d6:69:
         98:e4:ad:44:4d:52:74:33:ef:22:c3:0f:44:be:e5:34:e3:58:
         14:6f:30:36:57:41:cf:12:0d:f6:53:57:a8:2c:57:b1:07:82:
         0f:f0:4a:06:7a:35:25:25:78:51:a3:d9:db:d7:26:24:74:0c:
         11:56:b4:46:d2:14:d4:15:b3:a8:5d:5d:39:9d:f8:26:6a:9b:
         29:16:67:5f:8b:7f:a4:fc:e8:1b:04:df:b0:f9:34:5d:62:7e:
         71:7b:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:51 2025 by rpki-client