Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KZUNfy9hyi-7dhq2nU14dyL2tEQ.roa
File:                     KZUNfy9hyi-7dhq2nU14dyL2tEQ.roa (raw, json)
Hash identifier:          YbseoClfE+0I/8uOyPK5XVSG2aLeLv9VmNAVQm9FR8E=
Subject key identifier:   29:95:0D:7F:2F:61:CA:2F:BB:76:1A:B6:9D:4D:78:77:22:F6:B4:44
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0980
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KZUNfy9hyi-7dhq2nU14dyL2tEQ.roa
Signing time:             Wed 29 Sep 2021 02:52:23 +0000
ROA not before:           Wed 29 Sep 2021 02:52:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18046
IP address blocks:        121.50.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2432 (0x980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Sep 29 02:52:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=29950D7F2F61CA2FBB761AB69D4D787722F6B444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:ec:54:1b:e5:d7:0a:54:3f:e0:7a:db:2a:
                    ed:90:37:fb:16:22:d0:3b:6a:c7:b8:8d:5f:10:84:
                    d4:76:11:6b:4f:57:d6:28:e3:bf:b0:60:e8:d2:7a:
                    b4:44:5a:ae:0d:70:64:3e:77:be:d1:e7:90:a0:81:
                    f7:a8:c4:58:b3:b0:83:4a:ca:7c:cc:01:ab:e3:d5:
                    e3:cc:f0:dc:d8:16:5f:86:23:9b:66:9f:75:5e:b8:
                    ee:aa:79:6e:92:d1:4d:10:81:8e:d2:3b:eb:f6:7b:
                    12:4b:a6:22:ad:27:c9:49:1d:d7:7f:ff:58:42:95:
                    b3:86:e5:9e:6d:73:73:14:79:72:5a:9c:fb:8f:71:
                    12:03:5e:84:60:62:55:a9:f2:de:64:97:51:85:bd:
                    a6:8d:80:b4:a1:4b:d3:3f:ac:35:39:73:2f:d4:7e:
                    39:5b:70:a2:bc:07:7f:a2:ff:c8:e4:44:d8:b5:6c:
                    71:e8:e0:d5:ce:c7:ee:65:43:03:e4:29:43:ee:fb:
                    ae:16:bd:30:59:29:91:82:ba:fe:7d:55:56:73:9a:
                    14:4a:4e:c3:3b:be:a7:1a:fa:c1:e7:a0:47:56:64:
                    73:25:63:e8:f7:a6:fc:36:d7:61:39:9e:1d:34:a3:
                    e9:3e:6f:45:ad:9c:50:9c:e9:ab:d6:6c:ce:f5:c7:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:95:0D:7F:2F:61:CA:2F:BB:76:1A:B6:9D:4D:78:77:22:F6:B4:44
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KZUNfy9hyi-7dhq2nU14dyL2tEQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:13:62:1c:13:59:a6:03:0c:a4:9e:fc:ce:5b:83:4a:fe:
         ec:cf:4e:74:7b:8b:ca:05:f3:fa:ec:1c:4d:6a:d9:68:21:6f:
         5f:b6:b8:89:bb:61:23:f5:2c:db:37:ca:e9:cc:6f:6f:f4:a7:
         d4:5d:ee:0e:78:4c:a6:2e:db:72:c5:4d:17:36:4f:b7:c1:ea:
         c0:8a:76:4b:83:1f:7a:ac:51:94:16:24:5f:e6:a2:05:9f:9e:
         b7:e4:33:18:f5:51:32:ae:0f:a9:aa:84:01:8f:b6:b3:a5:19:
         26:4f:da:59:cb:c1:c7:1f:9f:57:f2:6a:23:4f:e8:80:56:64:
         32:ee:95:15:65:25:5e:e7:6e:05:1a:8b:73:a4:48:b2:81:fa:
         33:aa:6e:50:7b:d9:a6:2e:f8:cc:bc:32:2f:9e:e7:90:8a:0c:
         10:e6:ea:26:17:e2:9b:cf:6d:da:d2:ea:8d:f4:cb:2d:98:55:
         55:36:f8:91:25:e0:47:fb:0b:fd:12:0f:38:5d:ef:b0:c9:20:
         2b:4d:db:02:7d:2a:ca:f9:88:8c:c9:27:b2:69:50:0d:b7:aa:
         c2:6b:18:f6:0f:62:d5:e1:b7:d5:ea:6c:78:39:2a:16:13:84:
         6a:4b:a2:66:cc:09:a4:79:4c:e8:ec:56:c9:45:bd:da:db:40:
         55:3f:c5:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org