Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YTmVnLouaOMN_1iD6UDOphPDcu8.roa
File:                     YTmVnLouaOMN_1iD6UDOphPDcu8.roa (raw, json)
Hash identifier:          uO5oACtuJWqYS7Q9CgsPZwfGamNLA614kruoYb9sd6w=
Subject key identifier:   61:39:95:9C:BA:2E:68:E3:0D:FF:58:83:E9:40:CE:A6:13:C3:72:EF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D7F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YTmVnLouaOMN_1iD6UDOphPDcu8.roa
Signing time:             Mon 04 Oct 2021 01:44:36 +0000
ROA not before:           Mon 04 Oct 2021 01:44:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        2407:4d00:ff05::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7551 (0x1d7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Oct  4 01:44:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6139959CBA2E68E30DFF5883E940CEA613C372EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bc:77:e1:d5:41:a2:b9:34:17:00:df:69:92:
                    c2:5f:04:34:04:6e:16:40:92:16:04:3e:17:b3:5c:
                    ae:09:84:e2:7a:de:88:d6:57:e7:8c:bb:6b:3f:cd:
                    c0:75:34:07:91:cb:e9:b9:58:5d:e9:13:27:4a:96:
                    0b:e4:95:33:a7:ea:06:3d:77:89:d7:b3:9c:c3:6e:
                    35:a0:87:25:6f:b3:b6:60:8f:25:46:98:c1:72:e2:
                    e3:73:63:7e:4c:bd:03:90:af:c4:22:9f:20:f9:7a:
                    4e:ec:cc:18:63:cf:1b:87:70:ef:b5:e2:71:72:9c:
                    52:46:da:55:78:36:51:9d:cb:0d:84:27:90:d1:81:
                    6c:18:58:a4:e3:a9:de:ef:b3:b8:84:22:ef:6f:3a:
                    2a:4a:3f:93:f8:4d:68:5a:80:89:56:3c:8e:80:66:
                    08:ad:99:cd:39:80:ca:16:c8:a9:48:2a:00:64:f1:
                    1e:74:ac:54:32:31:db:28:66:d4:aa:83:8c:ac:3b:
                    aa:9b:1d:61:f8:2f:7a:ff:a7:0d:2a:fb:57:a9:05:
                    9e:ae:51:3c:55:ed:17:3c:fc:a2:02:c7:cb:1a:2e:
                    96:cd:c5:97:9d:5d:e7:27:ea:db:fa:8b:2d:f4:85:
                    34:29:c0:2c:44:de:39:9e:d1:40:73:20:69:e2:1e:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:39:95:9C:BA:2E:68:E3:0D:FF:58:83:E9:40:CE:A6:13:C3:72:EF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YTmVnLouaOMN_1iD6UDOphPDcu8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:ff05::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:cb:2e:52:17:d0:13:f5:14:f3:90:83:05:24:24:a2:74:da:
         7a:bb:64:8c:06:1c:91:fa:7b:3f:da:ba:c8:d3:67:d1:a4:54:
         5b:fa:00:20:34:ce:ce:88:81:4f:fb:4b:f5:21:98:21:e2:c3:
         db:b7:fd:bf:57:32:04:5f:8a:f0:19:98:d7:dd:b4:ab:3c:c2:
         46:63:26:f7:cf:87:f0:76:90:fb:92:81:bd:eb:8f:f7:0c:61:
         25:ab:49:fd:d5:24:a6:51:87:33:30:18:44:9c:ba:0e:c2:ef:
         d1:6e:4a:25:1e:f2:db:bb:3e:3d:95:eb:ca:1a:c6:2b:9e:e6:
         0b:af:40:f8:71:91:e5:f5:55:f0:ec:4a:3f:f7:00:7a:85:a6:
         63:92:d0:d0:3b:65:86:07:0d:77:de:40:20:03:cb:c4:e0:f5:
         3f:d8:2a:a6:ba:33:4b:ac:35:bc:ca:17:2c:3a:81:db:7f:d0:
         15:72:6f:88:26:5e:42:a3:ca:14:33:68:da:bd:c3:2e:07:ea:
         f8:93:12:67:1e:13:6c:07:a6:90:2d:8a:fb:6a:26:fa:78:50:
         87:24:58:b0:df:ee:23:bd:79:8f:fe:d1:ca:d6:6f:c2:3b:7d:
         6b:49:ef:3a:d7:a2:03:3e:6d:a5:2b:b0:db:7d:49:4f:05:f0:
         c9:86:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org