Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BtgnoWVRv36D2tGfADy7l8XW_4Q.roa
File:                     BtgnoWVRv36D2tGfADy7l8XW_4Q.roa (raw, json)
Hash identifier:          aV2/nElN0a9p5m7FjKteqRL5Yy0qpZWb6EzHXCs/1jg=
Subject key identifier:   06:D8:27:A1:65:51:BF:7E:83:DA:D1:9F:00:3C:BB:97:C5:D6:FF:84
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BtgnoWVRv36D2tGfADy7l8XW_4Q.roa
Signing time:             Thu 15 Sep 2022 02:52:23 +0000
ROA not before:           Thu 15 Sep 2022 02:52:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:23 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=06D827A16551BF7E83DAD19F003CBB97C5D6FF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:f7:1a:48:eb:ee:00:3c:ad:0e:7a:a3:8a:
                    70:8a:a3:fc:4d:71:b7:6c:3c:51:56:56:23:a1:60:
                    c4:48:a5:7b:2b:0e:d0:8e:f3:80:90:e9:44:74:c5:
                    a7:64:7e:f1:93:4a:ff:e2:d2:ed:2b:94:2c:a7:bd:
                    9f:b0:7a:7b:42:1c:b0:96:8d:25:51:fe:97:a9:a0:
                    c9:21:de:04:e8:a4:70:34:e8:61:b3:3e:58:ef:bf:
                    3e:78:62:41:6d:21:de:35:f8:24:3b:c0:ac:4e:a7:
                    ef:04:fe:2e:8e:1c:02:0f:b4:ff:b3:47:8b:24:aa:
                    3f:35:b1:12:32:74:79:0d:53:ee:68:63:72:f1:bb:
                    fb:c2:f7:12:79:79:da:e0:fe:24:82:4a:37:5b:c3:
                    f8:0c:2e:86:28:e1:20:7c:6f:94:1e:2b:a2:2f:40:
                    b0:b8:59:e2:ff:d5:dd:ce:3e:56:e5:49:b1:0f:70:
                    65:11:1d:67:9c:5f:a9:97:c6:7f:c8:01:a2:a8:e6:
                    44:72:2d:3d:93:6f:b9:56:07:78:3b:bd:de:93:45:
                    b0:7b:4e:e2:15:c0:64:22:d5:7f:d8:62:0f:74:57:
                    f3:1a:de:46:7c:c6:ee:03:9d:b6:21:74:06:3c:f4:
                    8e:2f:8b:61:05:66:9f:90:d5:80:4a:b3:50:2b:5e:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D8:27:A1:65:51:BF:7E:83:DA:D1:9F:00:3C:BB:97:C5:D6:FF:84
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BtgnoWVRv36D2tGfADy7l8XW_4Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:42:0b:30:00:ff:5a:79:ed:a6:b6:9b:3f:46:13:68:57:24:
         be:d3:f5:3b:46:b6:3d:ad:e8:ba:71:62:d8:a2:3f:b3:61:57:
         88:ce:09:0a:89:cf:75:92:01:30:aa:d2:fa:03:0f:15:76:ee:
         2f:07:e4:48:f7:51:0d:a6:22:c4:4b:ab:0d:9e:18:bd:55:a2:
         2c:01:2a:a2:62:9a:6e:f7:aa:2b:f8:4d:f1:46:82:dd:57:6c:
         dd:04:e7:df:d1:8c:21:36:78:6e:ee:d6:a5:8f:a5:59:63:19:
         49:1c:fb:1f:bc:d5:80:27:9e:61:9b:e6:0d:ef:f2:8b:2f:6d:
         15:78:39:fa:c2:c5:9d:9f:97:ed:45:27:81:04:c7:ab:61:6b:
         40:f2:00:3a:50:60:d2:30:0c:3b:1a:23:d5:e2:b1:ad:fe:88:
         06:57:3b:86:df:a3:f6:df:e3:48:5e:3b:b5:6c:aa:c4:e8:7f:
         0d:ef:c4:d5:95:28:c1:56:04:9c:e7:a3:a8:e3:0d:f1:6b:d3:
         ea:e8:7c:42:01:bd:50:da:37:12:df:c4:64:03:d7:23:89:b9:
         1c:37:24:84:3f:7e:fc:37:d6:d3:d9:a4:f9:14:fa:02:c7:a6:
         82:21:c3:fb:4d:31:ad:6e:b7:da:de:d5:c3:59:04:35:f4:8f:
         19:af:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org