Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ahUXPm8E06fB0_PJ48iMN6Uoq0Y.roa
File:                     ahUXPm8E06fB0_PJ48iMN6Uoq0Y.roa (raw, json)
Hash identifier:          wgmZi/eMjIOylBRQBgYRt8CY24pKgp5aXk9BhTHkfxc=
Subject key identifier:   6A:15:17:3E:6F:04:D3:A7:C1:D3:F3:C9:E3:C8:8C:37:A5:28:AB:46
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ahUXPm8E06fB0_PJ48iMN6Uoq0Y.roa
Signing time:             Thu 15 Sep 2022 02:45:01 +0000
ROA not before:           Thu 15 Sep 2022 02:45:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6A15173E6F04D3A7C1D3F3C9E3C88C37A528AB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:56:fa:ab:b3:06:2e:dc:c2:19:55:5f:23:
                    ed:51:00:c6:6c:5a:c3:54:cf:6e:50:20:01:91:98:
                    5e:e9:ca:13:bd:c7:71:d2:79:d1:f6:a7:94:19:ac:
                    65:e7:f6:e4:f8:91:71:54:7e:8f:68:00:ff:ce:8e:
                    ae:15:bc:80:f9:43:ac:20:b1:c3:e2:fb:57:df:96:
                    d9:cc:40:24:d5:89:10:9d:94:68:88:a6:3b:f7:48:
                    b6:19:9d:55:11:bb:93:a9:29:c0:28:46:69:f0:c2:
                    84:b8:42:ca:93:bf:d2:f1:74:43:e1:df:9a:9a:29:
                    1b:55:b7:61:44:28:1a:3e:3b:ef:32:56:b1:00:7c:
                    9c:63:bf:cb:fd:52:4f:f4:df:2b:77:39:a8:ae:aa:
                    66:9d:3b:43:aa:10:5a:28:38:36:52:d7:98:2d:c6:
                    70:79:00:f6:6d:23:9a:75:df:f0:18:ed:88:64:08:
                    f4:54:2b:bd:48:44:06:f1:a2:8a:18:77:20:58:40:
                    ac:9d:ae:08:31:e4:5d:49:e1:be:0d:2a:cd:c6:8f:
                    3b:56:21:44:35:72:f1:9b:9b:df:b0:ca:ac:e7:37:
                    e2:99:d7:42:df:3b:92:c7:65:64:53:71:e3:47:97:
                    bc:64:b6:de:7d:a1:9c:3b:41:16:f3:34:4a:93:11:
                    ff:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:15:17:3E:6F:04:D3:A7:C1:D3:F3:C9:E3:C8:8C:37:A5:28:AB:46
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ahUXPm8E06fB0_PJ48iMN6Uoq0Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:26:8d:79:6d:1f:b4:30:6d:dd:99:f4:69:23:32:9b:8f:29:
         7a:68:2d:8a:cb:e1:19:7e:a2:e6:94:4a:aa:0e:2e:53:05:1c:
         63:bc:ec:31:38:d8:e4:c3:4e:52:a4:09:a5:24:b9:27:7a:0a:
         77:26:f1:1a:23:dc:a0:24:44:88:36:a4:87:e0:33:d9:c0:13:
         72:78:68:6b:38:43:b2:dc:4f:18:c4:60:6c:a0:d2:ba:50:3c:
         6a:58:48:2e:02:2b:3c:0b:fe:c0:45:7b:ce:e8:c1:39:73:10:
         16:da:87:f0:35:cc:c9:08:30:58:14:e6:62:31:04:6d:0c:f4:
         18:8a:59:9c:81:7e:b5:93:37:da:1b:6e:f9:7e:b5:24:ef:ea:
         36:33:32:84:04:3e:78:8f:db:8c:0b:07:3c:c7:79:6d:bc:f7:
         10:03:7e:36:9a:a3:cb:68:b3:55:c2:9e:4c:88:04:1c:02:fa:
         23:84:cc:15:70:64:1b:42:f6:15:cc:14:a1:e5:b8:ca:1d:d2:
         fb:64:24:59:5b:02:da:3b:95:94:ef:87:62:19:22:68:8e:b8:
         a3:18:90:46:49:bb:be:4f:ea:c7:9e:be:e8:83:5b:09:51:98:
         8f:8d:02:fc:97:3e:4d:2b:ef:a3:8a:e7:02:3d:05:41:25:dc:
         74:08:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org