Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W9t3aSLs6NoL2ER-KSaQyU9W51s.roa
File:                     W9t3aSLs6NoL2ER-KSaQyU9W51s.roa (raw, json)
Hash identifier:          aJCoh2/zWfm9ZRWonjuFdegDU8MgC3g4NSUm8qjYyCU=
Subject key identifier:   5B:DB:77:69:22:EC:E8:DA:0B:D8:44:7E:29:26:90:C9:4F:56:E7:5B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       164F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W9t3aSLs6NoL2ER-KSaQyU9W51s.roa
Signing time:             Sun 07 Feb 2021 12:09:37 +0000
ROA not before:           Sun 07 Feb 2021 12:09:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.228.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5711 (0x164f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:09:37 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5BDB776922ECE8DA0BD8447E292690C94F56E75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:ab:7b:12:c8:57:c7:5f:3c:eb:d8:be:03:
                    fa:50:08:90:b7:ea:61:39:d7:92:8a:4d:e0:76:5a:
                    05:7d:78:78:a3:24:44:3c:00:14:59:f4:b5:22:19:
                    ed:9a:5f:e6:2f:c1:87:be:56:8c:9e:b3:af:bf:42:
                    72:57:e8:f8:e7:67:00:f2:42:ee:26:23:73:b6:aa:
                    f0:cc:65:8d:aa:e4:00:9e:d7:8b:f6:8c:32:55:e1:
                    b4:24:4a:0b:a7:b5:25:37:ce:5d:97:45:f2:71:12:
                    7d:13:4b:0e:47:5e:28:15:52:0e:36:a3:72:a6:44:
                    cf:5f:76:69:ba:05:57:81:45:dd:41:83:cc:ca:78:
                    ff:33:36:07:f2:10:50:45:60:e6:cb:12:17:7d:7e:
                    f0:97:d0:1d:e1:21:29:76:a9:4a:82:3c:31:73:8a:
                    ef:ad:cc:ba:f1:77:b5:b7:38:ea:dd:52:6b:bc:e1:
                    74:53:ee:40:f6:01:0e:4f:2a:cd:a6:ac:6c:b9:0d:
                    d6:1e:0a:83:43:bf:5c:23:27:c9:d0:1d:4e:7a:a3:
                    7e:52:e0:39:15:76:c0:0e:ed:76:c9:89:5e:1c:be:
                    9e:f2:ec:1e:51:c8:9e:96:35:73:a6:ac:5f:74:45:
                    fc:1d:29:9f:fa:17:07:39:b7:13:76:11:60:0c:bf:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DB:77:69:22:EC:E8:DA:0B:D8:44:7E:29:26:90:C9:4F:56:E7:5B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W9t3aSLs6NoL2ER-KSaQyU9W51s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:8a:90:ea:fc:41:58:81:bb:4f:c2:63:32:87:78:8a:00:
         12:1a:6a:46:b1:8d:8d:8c:ec:0d:db:58:28:a9:ce:6d:5a:00:
         01:55:f2:1d:ca:84:64:98:5f:4f:17:38:50:fa:63:9b:9b:1c:
         17:0c:f2:b7:7a:7c:92:1a:99:69:e1:2a:19:71:e7:39:01:cc:
         8e:a4:f9:b8:34:96:ea:34:4e:1e:6e:9f:d8:a1:54:c1:bc:40:
         56:51:bd:f6:95:09:6a:20:be:a4:4e:04:10:a7:c7:41:f6:a5:
         93:34:df:46:ea:07:0a:42:0d:dc:17:19:73:86:23:51:49:4a:
         ee:6d:71:40:b0:24:d9:76:c5:93:fd:31:19:d2:c6:2f:7e:6d:
         81:a8:e3:dd:24:71:f6:9d:83:2c:ae:38:05:75:4c:5d:2a:3a:
         bc:3c:a8:dc:d0:89:9a:3b:60:2c:02:f1:6e:52:28:be:69:60:
         01:c0:93:77:dd:37:81:31:33:1a:7f:cb:fb:f0:d8:18:e0:39:
         7e:91:07:b0:bb:12:6b:d9:97:26:a8:04:29:77:78:3d:fb:dd:
         df:5b:5e:40:c5:81:56:f8:e7:f9:ba:10:a5:3c:f2:d6:75:ae:
         bf:d1:39:49:4f:c0:06:9e:e9:81:f0:27:87:cc:18:28:7d:fd:
         2a:e7:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org