Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EdkEBP3OHox6U8uCX83UYc51_sc.roa
File:                     EdkEBP3OHox6U8uCX83UYc51_sc.roa (raw, json)
Hash identifier:          1zuB78rqBx3r0lHddsACG4jwb1F8SCnAOAmlmqEy6mA=
Subject key identifier:   11:D9:04:04:FD:CE:1E:8C:7A:53:CB:82:5F:CD:D4:61:CE:75:FE:C7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1847
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EdkEBP3OHox6U8uCX83UYc51_sc.roa
Signing time:             Sun 07 Feb 2021 12:27:54 +0000
ROA not before:           Sun 07 Feb 2021 12:27:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.136.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6215 (0x1847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:27:54 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=11D90404FDCE1E8C7A53CB825FCDD461CE75FEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:80:48:48:83:bd:a2:00:21:ba:87:68:b1:
                    ac:f9:ea:49:4f:4d:d0:f4:6c:c8:84:91:48:d2:88:
                    d6:68:5e:58:6c:dd:cb:be:81:91:58:f8:50:c1:9a:
                    d2:1a:b9:67:ff:55:88:f3:6e:32:e0:bc:b1:1d:2b:
                    a7:05:50:06:ff:b3:5a:68:8f:6f:ef:0b:a0:0d:b9:
                    b0:f9:bb:46:37:dc:57:a7:3c:86:98:5b:35:bb:30:
                    c4:03:d5:e9:a1:f3:2a:6c:fa:b5:4a:30:3b:ed:85:
                    d6:41:a5:7f:97:59:4e:31:e6:df:b7:b4:ba:fd:07:
                    bb:c7:f1:33:6b:44:14:e8:08:fa:e0:8d:41:93:f2:
                    62:a9:5f:1c:2f:cc:8d:21:a4:3f:4e:2b:9f:7c:45:
                    cd:75:fa:7c:ad:8f:72:ff:43:61:31:d4:02:55:83:
                    85:eb:17:0e:03:94:55:e3:69:f5:d1:b9:53:86:82:
                    87:f8:48:72:37:b9:bd:6e:23:63:65:6d:60:22:c3:
                    e1:b1:e2:30:6e:ed:09:3b:27:6f:a9:74:ca:de:2b:
                    00:6c:f9:7d:84:45:fd:68:55:95:d5:82:04:7e:8b:
                    92:50:db:03:c3:65:e7:80:dc:02:5b:7f:03:da:7f:
                    f0:f5:68:62:45:0b:08:4c:d5:58:cc:8a:42:9a:73:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D9:04:04:FD:CE:1E:8C:7A:53:CB:82:5F:CD:D4:61:CE:75:FE:C7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EdkEBP3OHox6U8uCX83UYc51_sc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:56:a9:50:37:f9:ba:7a:79:94:09:dc:2b:3c:ff:2b:d4:d8:
         02:da:2b:59:dd:62:0b:9e:31:f4:4f:56:34:80:e5:2e:42:30:
         b6:b7:c6:cf:9c:79:a9:11:46:68:09:28:50:52:2b:5d:7a:54:
         79:79:d3:50:48:84:e4:a3:18:c1:81:69:ab:57:9a:07:f5:8e:
         fd:8d:94:62:90:58:e1:67:cd:7e:e1:3a:6d:41:87:e2:a7:2e:
         f3:be:13:d2:47:f6:8b:9e:cc:a5:a9:f5:e5:4c:ab:34:d3:b3:
         28:9c:04:14:c1:08:3f:f1:5c:3c:04:5a:46:60:2f:2b:c3:e0:
         47:ab:61:42:86:f4:c7:43:56:b8:fd:01:82:16:44:80:7b:0e:
         62:5d:61:65:9f:0f:d7:87:70:81:52:2c:93:c3:0b:30:3c:e6:
         4d:1f:cb:7c:2f:b2:c6:fd:5c:b4:16:6d:87:ce:eb:64:ba:91:
         41:07:b3:ef:05:37:41:eb:f8:08:ae:35:24:94:ba:db:93:43:
         5d:4b:46:2a:47:64:27:c3:1a:29:9d:bc:cd:cf:93:97:52:25:
         c1:70:2b:15:a1:68:ae:83:ba:96:e9:bd:93:91:1c:69:36:29:
         40:00:10:3a:9e:c1:32:56:1f:8c:4a:b6:81:ac:64:2d:ec:af:
         cd:91:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-fra.rpki-client.org