Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TyYpPgf28PhH8CqSfx5KTybJd80.roa
File:                     TyYpPgf28PhH8CqSfx5KTybJd80.roa (raw, json)
Hash identifier:          8ZKmWogsvweXzz5zYWp7Pr7mnJuczXfoFG6p1Lx632k=
Subject key identifier:   4F:26:29:3E:07:F6:F0:F8:47:F0:2A:92:7F:1E:4A:4F:26:C9:77:CD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       149D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TyYpPgf28PhH8CqSfx5KTybJd80.roa
Signing time:             Sun 07 Feb 2021 11:59:21 +0000
ROA not before:           Sun 07 Feb 2021 11:59:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5277 (0x149d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:59:21 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4F26293E07F6F0F847F02A927F1E4A4F26C977CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:70:b7:6d:d8:fe:27:27:04:b0:16:b5:67:
                    f7:9a:70:8f:0f:9b:19:ce:11:a5:6c:49:40:7b:40:
                    2e:e6:88:f6:b1:ec:8d:3c:39:fe:cd:d6:37:5c:27:
                    44:55:c2:79:7d:5a:6f:27:bb:64:af:c7:b7:e8:40:
                    4e:f6:e3:84:e5:96:55:9b:e2:4e:74:1d:38:2a:37:
                    24:df:7d:2c:34:73:0b:98:1b:77:9e:bb:11:4a:f8:
                    45:f7:fc:93:43:93:20:b9:49:70:39:a0:e8:c5:e5:
                    9c:16:14:d7:17:ca:12:12:cc:90:0f:46:9c:5d:81:
                    6f:27:d7:c1:cf:ba:2a:99:76:ce:7e:66:a6:56:ba:
                    c0:16:23:64:52:ef:a0:46:f8:b1:26:59:12:83:3a:
                    12:28:65:5a:77:89:be:ae:60:12:9b:a2:e6:2e:e8:
                    50:dc:ba:ed:a3:ed:9f:78:29:71:f1:b4:14:34:8b:
                    5c:25:e8:29:5f:65:52:b7:36:24:f7:c0:c1:9b:35:
                    d6:1a:9e:67:ac:5a:aa:8b:de:af:e3:fe:ba:e2:b1:
                    a9:4d:ac:10:0a:d0:9c:5c:69:85:1e:38:54:e2:fa:
                    56:81:f6:c8:07:eb:52:6f:f6:cb:aa:77:5c:6e:e8:
                    4c:c9:bd:84:87:30:4e:5d:25:86:55:bc:3a:cc:37:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:26:29:3E:07:F6:F0:F8:47:F0:2A:92:7F:1E:4A:4F:26:C9:77:CD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TyYpPgf28PhH8CqSfx5KTybJd80.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:f2:3b:3c:e6:16:ea:2c:64:42:3f:0e:16:6d:f8:df:f6:
         e5:a5:5f:2a:fc:1a:15:73:6e:d3:20:cc:52:f3:be:02:3a:61:
         3e:c4:24:ca:f0:8e:17:71:b4:b4:b3:19:06:72:6b:3a:17:ea:
         34:12:82:82:09:52:a5:b5:e5:8c:d8:27:ae:91:b0:1c:99:61:
         12:8d:ef:8a:d8:e6:64:8c:95:6f:94:13:fe:00:f3:4e:09:1b:
         a7:55:02:3d:2c:21:f8:2b:84:f8:e4:20:3f:35:a9:8f:8a:99:
         57:88:40:fb:b6:20:89:39:39:40:f5:ee:e5:f8:a5:39:5b:26:
         b7:2a:0e:d8:ff:5b:f3:ba:dc:e8:ce:c7:26:01:4d:7a:d4:cc:
         aa:d7:a4:05:fd:39:21:c8:4e:aa:eb:8a:6f:96:9f:5a:e1:58:
         b0:c8:d3:be:74:51:10:0c:c0:71:c7:2c:1d:29:23:69:cf:db:
         c4:c4:e7:f9:c3:90:98:71:83:41:6b:53:f2:ba:13:72:f5:a3:
         99:9a:3d:0e:ec:51:62:50:ca:99:8b:c9:09:58:56:fc:fb:fd:
         1f:7b:40:05:5d:2e:08:7e:07:e6:99:80:ce:36:3e:a3:a9:b7:
         7b:58:9e:08:35:8f:ac:3e:9f:b0:e6:65:3f:e0:c1:44:e9:d7:
         95:2e:20:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org