Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ff-a2fWjV7hyjupzg7LSYL9Popc.roa
File:                     Ff-a2fWjV7hyjupzg7LSYL9Popc.roa (raw, json)
Hash identifier:          Vy7GFENsvUH2Kgc63H8Y1xnMgB0nffexbFdLjOEsS74=
Subject key identifier:   15:FF:9A:D9:F5:A3:57:B8:72:8E:EA:73:83:B2:D2:60:BF:4F:A2:97
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C78
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ff-a2fWjV7hyjupzg7LSYL9Popc.roa
Signing time:             Wed 29 Sep 2021 02:47:48 +0000
ROA not before:           Wed 29 Sep 2021 02:47:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7288 (0x1c78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:48 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=15FF9AD9F5A357B8728EEA7383B2D260BF4FA297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:22:87:f3:c2:95:d3:8b:2e:65:32:34:11:
                    a4:07:12:5b:da:d2:c2:75:5b:d6:62:2b:74:2f:83:
                    a1:a1:21:3c:80:ed:6d:7e:3e:3b:d1:38:23:4b:0a:
                    c8:c1:eb:0a:bb:96:ec:12:46:f9:27:17:74:e4:eb:
                    0b:29:29:45:e9:df:d9:87:12:45:14:50:a0:ef:91:
                    59:8a:7c:aa:d7:a4:38:81:1b:f9:2d:86:c0:e6:cf:
                    a4:08:ca:28:4a:82:10:b0:8c:63:bb:3f:d7:22:04:
                    b9:34:81:62:2c:d1:b1:59:af:ab:5f:3c:ee:fc:17:
                    37:73:e7:dc:df:af:90:8a:59:1a:bc:e9:54:4d:8e:
                    12:93:c7:07:a6:14:11:7c:23:4b:f6:cf:e1:1a:78:
                    d9:1d:a1:5c:9d:18:ae:82:c6:f5:70:09:d8:f7:66:
                    73:4c:3d:46:43:79:f4:fd:2f:b1:c4:55:18:df:72:
                    97:43:54:f7:ba:f0:c5:e5:13:cd:a6:9c:ff:01:5b:
                    2f:54:a5:55:59:75:f0:43:25:49:a1:af:70:38:e0:
                    d2:bd:81:07:63:10:47:91:88:89:11:a4:44:24:49:
                    7f:f1:1a:2d:1c:f1:5f:1d:3b:98:aa:1d:d6:03:1d:
                    20:92:b6:db:37:ca:10:ec:ee:6c:eb:76:9b:11:64:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FF:9A:D9:F5:A3:57:B8:72:8E:EA:73:83:B2:D2:60:BF:4F:A2:97
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ff-a2fWjV7hyjupzg7LSYL9Popc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:03:6a:16:52:ee:f7:ee:bb:21:15:1e:ec:81:b2:df:fd:dc:
         8b:44:22:38:7c:ec:9c:0e:38:af:7e:b8:d4:4a:9c:2d:14:70:
         cb:1d:ec:56:fa:77:2a:bd:12:81:f8:08:9c:d1:48:a4:31:95:
         4e:2c:9a:b1:b8:dc:42:71:c5:bd:40:73:24:6e:95:a6:88:4e:
         ed:4c:f2:0c:47:b0:e7:c1:cd:36:79:d9:aa:48:df:10:69:4f:
         ef:3e:28:61:9e:81:ff:60:7f:be:ae:c4:8f:c1:b9:ae:ad:36:
         45:b6:e3:f9:d6:ed:45:4f:e9:5f:0b:67:3b:e9:b5:98:46:59:
         ce:0b:aa:7e:12:b8:af:85:f9:40:ff:da:28:4d:3d:31:d1:53:
         a8:22:01:29:c5:56:9b:ab:90:be:25:bb:c7:d0:9e:69:5b:ef:
         fb:ef:6a:15:c2:ae:d7:11:ac:df:9d:a1:1e:c1:08:0a:bc:0d:
         d4:35:f4:06:fb:b7:55:67:78:d1:89:93:6a:10:15:11:69:bd:
         18:42:26:ed:1f:27:69:27:3a:53:8f:75:48:1a:ff:ff:f2:75:
         f1:15:2f:62:1e:9f:1b:0a:f7:cc:9e:de:69:26:92:96:9c:2f:
         8b:ba:f6:fb:b4:2b:f3:12:4f:73:1a:6f:36:31:09:78:2f:c0:
         93:71:2e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org