Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/sg4dN7qeJWKzGz79AoAZf0DigX8.roa
File:                     sg4dN7qeJWKzGz79AoAZf0DigX8.roa (raw, json)
Hash identifier:          wCsGN2gRhpXsEAKqAsjKV88Xu8azbAYeHd+HaEpyB1w=
Subject key identifier:   B2:0E:1D:37:BA:9E:25:62:B3:1B:3E:FD:02:80:19:7F:40:E2:81:7F
Certificate issuer:       /CN=1E79C6C033BB9D469E0CE8164538DF39E9F1C3BC
Certificate serial:       02AE
Authority key identifier: 1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/sg4dN7qeJWKzGz79AoAZf0DigX8.roa
Signing time:             Fri 01 Sep 2023 10:19:54 +0000
ROA not before:           Fri 01 Sep 2023 10:19:54 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     38856
IP address blocks:        103.159.118.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E79C6C033BB9D469E0CE8164538DF39E9F1C3BC
        Validity
            Not Before: Sep  1 10:19:54 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=B20E1D37BA9E2562B31B3EFD0280197F40E2817F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2d:53:c3:b5:f4:21:f8:4f:e2:79:32:5a:27:
                    4f:51:0f:9f:aa:cc:9f:da:64:e2:77:8a:53:84:a7:
                    71:50:52:c0:b7:33:b7:3b:05:58:4c:23:c6:5d:0e:
                    fa:7c:e6:1a:2b:a4:ad:b6:4d:8c:2d:21:1c:af:6e:
                    44:00:41:a0:4a:75:82:d2:fc:de:e8:3e:6f:b0:da:
                    5a:b1:75:5c:4f:a8:60:84:ae:0a:76:3e:98:9f:14:
                    3c:a4:67:9f:19:f8:3b:b9:91:ef:57:19:3a:4b:e4:
                    7e:4f:25:cd:8e:bf:a5:2f:8c:19:43:cc:85:9e:e5:
                    86:86:a9:d2:93:2a:9b:d7:16:5c:89:e3:e2:ba:9e:
                    ff:50:95:67:6e:f9:8d:2c:ce:fe:37:13:86:42:1b:
                    99:99:05:f0:c1:ba:b1:80:df:f0:fd:58:c1:15:a3:
                    7f:34:14:e8:bf:a4:0b:91:7f:2d:8b:b4:5c:f8:d7:
                    66:12:6c:23:af:7f:aa:f6:59:af:f9:f4:72:60:a8:
                    38:b8:28:12:d6:ea:5c:ca:76:57:76:71:01:9d:f6:
                    4a:3d:f5:f5:7a:5c:6e:14:7a:97:b4:be:c6:e9:89:
                    3d:ba:cb:1b:82:8d:60:b1:9b:f8:fd:d7:3d:28:35:
                    cf:28:96:02:f0:cb:97:5f:3d:df:50:0c:c5:1a:db:
                    d6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0E:1D:37:BA:9E:25:62:B3:1B:3E:FD:02:80:19:7F:40:E2:81:7F
            X509v3 Authority Key Identifier:
                keyid:1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/HnnGwDO7nUaeDOgWRTjfOenxw7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/sg4dN7qeJWKzGz79AoAZf0DigX8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:99:e0:82:c9:f4:23:9c:1f:50:b6:2a:3e:3a:89:f7:59:36:
         10:72:eb:ff:be:2b:26:20:73:e5:40:e1:85:d9:9c:fa:85:30:
         c6:cd:f6:a8:bd:45:86:df:78:50:05:08:b4:ef:7f:00:19:cc:
         d3:7c:88:35:4e:de:a0:a8:74:72:db:16:1c:ed:a7:bb:3c:54:
         ee:d6:1b:70:e9:4f:bb:fb:b0:e7:5f:61:69:34:dc:50:87:37:
         4e:12:79:68:ed:7d:73:40:3b:12:2c:aa:95:ff:b2:97:8b:df:
         fd:ad:7d:24:e7:58:5c:a0:79:45:a3:84:9d:9c:e3:53:0a:19:
         29:fa:a3:ef:a1:1e:bf:b1:6d:15:9b:14:13:95:0b:36:ac:da:
         c2:93:1e:45:e5:de:01:7c:ae:98:ab:52:cd:1f:24:66:0d:86:
         54:d1:9f:8e:87:cd:d2:54:d0:b2:ff:9c:b9:ac:47:dd:6c:d7:
         22:f4:50:f5:66:40:23:84:f3:a6:bd:7f:2d:8a:7e:cc:a6:b0:
         af:d0:ee:88:bf:81:9b:d0:27:e2:d1:b3:e5:af:ee:6f:38:cf:
         8c:54:ca:23:84:e8:ac:70:b8:29:25:71:3a:ca:e3:d4:93:fa:
         24:28:ca:6f:aa:b5:ee:b3:59:fc:b0:c1:62:f4:f7:12:82:f4:
         ab:4f:a0:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:33 2025 by rpki-client