Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/algS4oeZ6oVsy91q7haPU5sayLg.roa
File:                     algS4oeZ6oVsy91q7haPU5sayLg.roa (raw, json)
Hash identifier:          ieGIhTQSu/2Xo5RnZr525zIFNU8n270URRkOefWZqGc=
Subject key identifier:   6A:58:12:E2:87:99:EA:85:6C:CB:DD:6A:EE:16:8F:53:9B:1A:C8:B8
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       08CD
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/algS4oeZ6oVsy91q7haPU5sayLg.roa
Signing time:             Sun 07 Feb 2021 12:58:07 +0000
ROA not before:           Sun 07 Feb 2021 12:58:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        121.50.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2253 (0x8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Feb  7 12:58:07 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6A5812E28799EA856CCBDD6AEE168F539B1AC8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:b7:2d:49:38:a3:ab:6d:cf:a2:14:92:9e:
                    e4:52:65:3b:53:ec:66:b9:b3:f0:d3:20:88:d6:18:
                    85:e2:f7:a6:75:77:c2:a0:e0:f9:ed:0a:ba:3c:40:
                    ee:97:21:b1:b6:cb:69:db:d9:87:fd:11:54:63:17:
                    a5:19:aa:ca:ff:7e:02:7a:fe:1e:e0:26:ef:4c:3f:
                    bf:16:01:4e:63:19:7f:a9:92:39:ed:01:d9:91:16:
                    63:32:b5:50:2a:7d:28:23:3e:00:e4:b4:a4:8c:fb:
                    bb:95:89:df:f0:86:36:cb:42:a6:2e:52:4a:12:61:
                    b5:56:6b:36:f0:74:ed:b0:02:f0:73:ae:4b:e6:cb:
                    5e:9b:2f:56:fe:f2:8b:45:b7:ba:4f:4f:27:6e:11:
                    d5:28:a2:1f:bd:33:24:16:c8:6c:ff:f2:15:fb:8d:
                    43:eb:94:81:4e:59:68:7f:0a:d7:01:72:67:e6:36:
                    49:97:83:7f:c3:f7:ee:13:a4:84:c4:48:d4:cf:10:
                    ca:59:ba:7b:96:ec:69:c5:41:c8:6b:1c:5d:f4:67:
                    6c:f4:26:fb:33:f3:53:f4:88:27:53:02:30:5c:16:
                    37:11:61:7e:8b:09:34:53:8e:36:32:d5:9d:c4:56:
                    c8:17:ef:7e:26:e4:7b:33:49:a3:6e:de:51:af:8b:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:58:12:E2:87:99:EA:85:6C:CB:DD:6A:EE:16:8F:53:9B:1A:C8:B8
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/algS4oeZ6oVsy91q7haPU5sayLg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:75:4e:b5:5e:b4:f0:8c:8e:ca:dc:33:10:a7:22:08:f6:67:
         c5:0a:79:ba:e6:ce:8a:82:34:de:48:bd:ba:89:23:9a:2a:e4:
         d4:0b:41:51:8f:b4:f1:46:bd:4a:4c:6b:b7:16:21:1f:a7:d0:
         8c:e7:ff:32:59:0a:05:90:c4:9f:5e:01:4f:4c:d8:49:c5:3e:
         54:8d:08:91:0f:dc:a8:1e:9e:ea:30:65:97:3f:cd:2f:ec:07:
         18:0f:d6:35:97:15:06:db:ab:02:1a:57:b9:9c:ce:e8:f2:02:
         52:7a:c6:d6:3e:4e:df:07:a6:c3:c0:ac:27:95:19:9f:8a:6d:
         79:f9:bb:2f:82:a6:41:ec:c3:b6:31:db:cc:75:b6:07:49:47:
         70:6d:af:ba:e0:ca:9d:ad:06:93:04:4c:f6:4a:cc:36:57:95:
         1d:21:af:20:9c:94:b9:31:73:5f:ac:6b:7a:12:2b:c6:aa:27:
         dd:5a:b8:29:70:84:09:13:88:78:54:5d:01:ba:61:9d:e6:a2:
         56:f6:20:2c:cc:17:b7:c8:5c:bd:e0:05:6e:b5:46:2f:eb:d5:
         b5:25:e8:15:a4:4a:e9:18:ec:80:79:85:02:6b:dd:6f:cc:65:
         7e:4f:ce:c3:40:b2:b7:62:23:c3:e2:67:77:86:46:b8:bd:91:
         02:55:dd:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org