Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/Wd_iVAwROutcth6WjIHjVyiRS54.roa
File:                     Wd_iVAwROutcth6WjIHjVyiRS54.roa (raw, json)
Hash identifier:          rSMesOAC+RQICM/3jb9EfQZ7Hkzd8OQ6X+nsjUPfwdE=
Subject key identifier:   59:DF:E2:54:0C:11:3A:EB:5C:B6:1E:96:8C:81:E3:57:28:91:4B:9E
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       0B3F
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/Wd_iVAwROutcth6WjIHjVyiRS54.roa
Signing time:             Fri 01 Sep 2023 10:17:06 +0000
ROA not before:           Fri 01 Sep 2023 10:17:06 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     17408
IP address blocks:        103.123.140.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2879 (0xb3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Sep  1 10:17:06 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=59DFE2540C113AEB5CB61E968C81E35728914B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:62:3d:62:c7:f1:7c:98:72:87:c1:80:ed:
                    24:11:65:81:23:f2:b3:fc:bf:f3:ba:da:13:1e:45:
                    74:b6:63:20:58:02:46:fd:e0:18:9a:1c:75:00:6d:
                    ab:50:c6:33:b1:1a:40:83:e6:28:f7:64:97:70:3d:
                    3a:e8:4d:11:6d:51:83:bd:50:a9:94:d7:20:cc:c9:
                    e3:59:89:0b:95:03:8b:4a:6f:31:70:68:6c:11:4c:
                    f8:17:e1:46:ea:7d:b3:fa:37:e4:61:72:fc:b8:9b:
                    f2:dd:1d:3c:40:07:f8:f1:76:3d:51:93:38:71:3e:
                    3e:6b:de:44:f8:5e:71:5c:ea:83:4e:3b:c2:fb:f8:
                    8d:84:0e:d8:43:4d:0b:55:28:5c:e3:c1:57:ba:4d:
                    77:22:0f:8a:f2:13:da:a6:30:2e:14:18:c6:82:80:
                    41:af:5c:78:7f:0b:ab:05:80:40:f7:e7:3b:2d:13:
                    3c:9e:48:fe:f3:10:d5:bf:b2:e5:b6:23:e6:6d:f5:
                    60:d5:52:d9:da:d2:44:56:89:90:fc:34:d6:07:7b:
                    77:5e:c1:61:17:ef:ac:33:38:56:70:75:73:a2:f9:
                    2a:20:01:ed:32:b1:bd:af:1f:12:0c:48:a3:7d:fd:
                    2f:51:cf:fe:1d:54:09:53:26:4a:c5:84:62:47:fb:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DF:E2:54:0C:11:3A:EB:5C:B6:1E:96:8C:81:E3:57:28:91:4B:9E
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/Wd_iVAwROutcth6WjIHjVyiRS54.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f9:d1:71:ae:21:a6:99:44:5e:92:21:e9:f9:9c:07:e0:fb:
         2a:b0:1e:a2:d1:3b:41:b4:f0:0a:4e:43:71:64:bd:f8:b5:ee:
         c2:80:47:15:1c:88:36:ab:89:a1:96:c6:6d:04:6c:23:c0:2c:
         64:4e:28:dc:fa:55:90:44:ce:36:0b:9f:db:c9:f3:b2:f2:a0:
         42:54:60:ba:b9:03:8e:71:dd:f3:f3:00:12:2b:4b:18:b9:ff:
         3d:d8:1b:dd:82:47:af:05:ed:0d:bc:cb:97:05:d6:05:ff:4a:
         a3:8d:14:4d:a9:61:52:98:0f:fe:e3:c9:9c:78:a2:3c:de:be:
         e3:f2:85:21:81:bf:14:0b:b4:e6:53:f2:a1:99:4e:00:6b:2d:
         9c:95:10:0d:0a:38:45:c1:8e:ec:1b:43:63:fa:19:ec:72:b4:
         42:cd:b1:a1:28:3d:18:01:e3:7f:10:0d:93:57:7b:3e:df:bf:
         cf:05:1e:14:f3:21:52:0b:1b:0d:db:e7:da:88:e5:fb:38:65:
         06:c7:70:38:e2:e2:df:86:8b:65:e5:3b:e8:4c:bd:21:a6:71:
         99:9c:fd:b3:12:ae:7d:46:43:68:f1:b8:cd:4a:8d:7e:69:5b:
         52:7c:d9:07:2d:69:64:09:75:8d:d4:73:07:94:ce:bb:59:77:
         7e:d9:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:50:50 2025 by rpki-client