Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/n7gd4vr8S5JitjSITkyULF0l91U.roa
File:                     n7gd4vr8S5JitjSITkyULF0l91U.roa (raw, json)
Hash identifier:          RCwKNVXTvK1cMMUWRir8b9alol9xVzwqdUFRdGa/VBQ=
Subject key identifier:   9F:B8:1D:E2:FA:FC:4B:92:62:B6:34:88:4E:4C:94:2C:5D:25:F7:55
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0783
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/n7gd4vr8S5JitjSITkyULF0l91U.roa
Signing time:             Tue 29 Sep 2020 10:00:29 +0000
ROA not before:           Tue 29 Sep 2020 10:00:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        2405:8700:3000::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1923 (0x783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9FB81DE2FAFC4B9262B634884E4C942C5D25F755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:19:22:14:b8:e9:44:2b:9b:f7:76:04:72:dd:
                    d0:a8:06:a2:e8:2c:19:e6:e1:d3:b2:e8:61:78:63:
                    da:bd:cf:ff:c4:b7:ec:bd:8c:4e:95:eb:e4:45:bf:
                    b3:e1:ac:c8:3c:17:7a:b5:b5:3f:dd:f3:0b:e3:be:
                    68:d4:1c:40:90:52:70:f7:1e:de:2e:a2:80:9f:47:
                    5a:0a:2e:1d:f3:5f:20:14:6b:2f:c9:91:a0:7e:de:
                    58:1d:b0:05:56:01:ce:1d:09:79:c6:77:14:31:40:
                    4c:12:26:9d:28:76:b3:ca:6b:f4:30:ce:5e:21:6e:
                    f8:ae:9e:51:3d:4b:b9:00:df:81:99:70:ba:ec:ba:
                    ab:c6:27:0e:c5:64:67:f4:a3:4b:46:a4:43:e4:1f:
                    fc:54:0d:71:51:df:42:4c:7a:59:f7:e5:bf:90:bb:
                    7e:18:71:a2:77:99:1e:ae:e4:7b:36:50:4f:e1:f6:
                    86:ae:17:57:12:df:65:9b:ee:bd:86:59:d9:96:c9:
                    1d:a1:d5:51:2b:a6:7e:f8:71:7c:4c:8f:ab:ba:a3:
                    a4:e5:c6:f0:e1:40:73:fb:44:66:70:29:ca:26:c3:
                    1b:94:ff:cb:31:55:f7:b8:27:43:33:48:eb:48:5c:
                    36:b8:5f:5e:34:be:55:b5:e4:73:a7:aa:ad:3b:a2:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:1D:E2:FA:FC:4B:92:62:B6:34:88:4E:4C:94:2C:5D:25:F7:55
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/n7gd4vr8S5JitjSITkyULF0l91U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:cf:3f:29:aa:fb:3d:48:20:29:c8:7b:39:c4:48:39:9d:
         3d:c3:31:d6:3f:99:a7:64:48:36:11:3f:d4:cc:42:3c:02:3a:
         66:96:d8:4f:3a:0e:dd:29:16:a1:e2:3a:65:e5:0e:2c:89:60:
         75:6a:40:27:1b:87:46:ef:88:f9:e4:bb:e5:a5:4d:06:cf:b1:
         6c:e7:81:55:55:94:5f:68:a3:8d:1f:1d:6e:3e:db:6d:fa:ff:
         5d:d8:20:f9:41:08:4c:7d:e0:8c:e8:1c:3d:97:d3:9c:fa:ca:
         cc:d1:2b:8b:b6:99:1d:f6:01:f4:86:24:69:35:fb:13:0e:96:
         3a:a1:8d:5e:69:44:49:5b:f9:29:76:03:e5:50:19:f9:2f:ec:
         9c:c9:c0:de:c4:fe:c3:45:7b:db:b2:4c:89:b3:4c:e9:e4:fd:
         c0:77:d9:be:be:97:5a:67:b6:4e:49:4b:99:5c:ec:ef:da:59:
         88:be:3e:aa:1d:9f:61:2a:6b:b6:d3:59:86:d4:de:51:9b:86:
         42:61:e5:28:15:47:50:9b:bb:9c:50:6a:d8:a6:2b:ab:82:4c:
         34:21:ff:9f:d6:15:3b:74:80:e7:c9:aa:05:4d:a5:5f:26:b0:
         57:82:d0:e2:e1:15:16:ec:01:3c:d7:c4:9a:14:bd:40:5b:af:
         a4:87:74:ac
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:38 2025 by rpki-client