Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SsjnSe2O_pj0EuYLDX5B_pjCIV0.roa
File:                     SsjnSe2O_pj0EuYLDX5B_pjCIV0.roa (raw, json)
Hash identifier:          QaELATg2Ccj1n8zSEihElII8Avpl454Wa3+GN9Efgdk=
Subject key identifier:   4A:C8:E7:49:ED:8E:FE:98:F4:12:E6:0B:0D:7E:41:FE:98:C2:21:5D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DE0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SsjnSe2O_pj0EuYLDX5B_pjCIV0.roa
Signing time:             Tue 29 Sep 2020 09:55:05 +0000
ROA not before:           Tue 29 Sep 2020 09:55:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3552 (0xde0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4AC8E749ED8EFE98F412E60B0D7E41FE98C2215D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:e2:97:09:25:d3:8d:4c:6a:ac:d3:40:8c:
                    0c:bd:bf:63:9e:f5:e9:b1:15:0c:e2:f6:4f:36:10:
                    38:24:c2:5e:0d:e9:c5:2d:3c:77:c3:4d:45:36:0f:
                    77:f7:04:05:d3:95:5b:87:0e:41:a9:b7:5d:14:72:
                    db:67:18:da:e5:ea:96:b4:fe:77:59:d5:12:c1:97:
                    0d:df:47:25:7c:e3:31:5e:a5:6b:a8:b5:ec:78:d1:
                    d0:ed:41:3a:84:5f:ea:98:51:84:e0:6c:41:59:21:
                    ec:3d:c3:2d:13:f0:66:cd:6a:2c:36:12:bb:66:ec:
                    a6:3a:0a:a9:08:bf:a7:bb:55:34:9a:6f:f8:0a:7b:
                    8a:c0:4e:96:8d:0e:66:8c:a9:42:87:5b:d2:7e:17:
                    7d:fb:21:77:49:4b:58:36:88:08:78:4b:2e:8a:a7:
                    5f:bb:72:81:e2:dc:db:64:11:bd:0f:32:eb:e7:74:
                    3a:44:5b:e1:d0:8a:64:76:4d:d1:3b:f0:bf:eb:bf:
                    13:40:f1:f2:8e:9d:38:02:ef:9c:9d:bf:39:5a:58:
                    0d:e2:fe:4c:f5:a9:f1:7c:97:e4:e6:94:a2:ae:2d:
                    28:5d:87:05:81:2c:40:f9:24:6b:26:a2:27:89:e4:
                    67:70:bc:2a:17:b2:d0:b3:f1:7d:b1:ee:de:69:eb:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:E7:49:ED:8E:FE:98:F4:12:E6:0B:0D:7E:41:FE:98:C2:21:5D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SsjnSe2O_pj0EuYLDX5B_pjCIV0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:fb:21:cf:28:19:26:67:fb:3f:49:b5:50:dc:b1:26:c7:01:
         09:28:58:20:b9:5f:da:02:c1:60:a3:36:ec:1e:80:f8:3f:05:
         1b:48:5f:dd:f0:07:b3:5c:71:7c:b0:84:42:d3:7d:d8:7d:02:
         7c:97:aa:a7:c6:d8:e7:73:54:c3:8a:ae:62:dc:1b:c5:54:21:
         ed:12:ca:84:43:ad:a5:35:03:18:b6:5b:b9:73:70:c3:d1:3a:
         c2:1c:43:26:3a:23:a0:bd:fe:a2:c0:99:ae:d5:47:45:fc:b3:
         71:6e:e8:3a:32:5b:73:7a:66:b4:68:fc:7b:19:98:05:7c:c5:
         06:b5:06:09:b8:67:ca:08:01:65:a8:39:f1:39:79:d5:45:08:
         9f:de:80:d0:01:0b:4b:95:cc:e8:37:d5:01:40:db:e3:37:81:
         91:34:06:82:79:2f:f0:42:e9:28:9a:8c:08:29:e5:cd:3e:66:
         8f:bc:82:af:98:e4:6e:06:5c:8d:74:b8:53:02:55:06:48:e0:
         a5:3d:fe:06:ca:85:d4:1d:8e:f2:76:1a:9a:91:c5:43:ac:0c:
         45:fb:c3:0d:36:c9:d5:f9:01:1e:e3:c2:70:9d:c3:c5:93:9b:
         8b:bc:84:0a:68:18:27:9a:88:1e:da:63:a1:36:eb:18:a7:63:
         01:1b:16:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org