Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dapT7nC3rq9hNUrHPJNS7OpYaf4.roa
File:                     dapT7nC3rq9hNUrHPJNS7OpYaf4.roa (raw, json)
Hash identifier:          W47Cmr+5rwTyNaU5GhCXN3fRLNm75HbAcV5g2FXpvns=
Subject key identifier:   75:AA:53:EE:70:B7:AE:AF:61:35:4A:C7:3C:93:52:EC:EA:58:69:FE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C2C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dapT7nC3rq9hNUrHPJNS7OpYaf4.roa
Signing time:             Wed 29 Sep 2021 02:47:26 +0000
ROA not before:           Wed 29 Sep 2021 02:47:26 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7212 (0x1c2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:26 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=75AA53EE70B7AEAF61354AC73C9352ECEA5869FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:08:1e:4d:06:64:b6:61:c1:53:af:c2:c2:
                    4b:3e:6d:f3:75:2b:0e:eb:60:1a:ae:28:c8:bb:4f:
                    93:9d:48:fd:4a:3e:e2:49:57:ea:32:7d:64:ee:e5:
                    1b:76:e6:a4:6b:ba:db:9f:59:d4:4c:70:45:65:54:
                    72:ab:35:6d:85:7c:f6:c3:83:6a:d7:72:a5:d6:b5:
                    cc:03:29:4b:86:ca:a8:4c:d1:93:9f:16:10:f6:d9:
                    7e:1f:bd:04:b7:79:b7:41:ae:c2:98:b8:0d:06:58:
                    a7:ab:e7:69:1a:63:6d:15:45:a9:3f:9b:17:69:58:
                    de:a1:d2:38:13:f1:94:30:3e:a8:b2:c8:77:82:2f:
                    98:bc:ab:21:6a:cc:ac:62:b9:f1:c8:c8:55:7d:e9:
                    0b:8b:11:2d:fa:e0:eb:3e:fa:85:95:e9:68:f3:db:
                    d9:96:a8:5f:f9:d0:6d:72:fe:a0:d5:37:e4:86:ef:
                    2c:00:89:a2:cb:8a:e4:11:ea:f9:ee:11:c2:bd:e0:
                    8c:a9:b7:03:50:cd:d5:39:8f:eb:2b:99:fd:8d:df:
                    7d:7b:70:28:c2:5d:e6:bd:24:6a:f2:30:01:d9:fe:
                    ba:2d:94:bc:c8:7e:31:69:bb:24:6b:aa:57:c1:1e:
                    55:f5:74:d5:6b:df:4a:51:c1:13:ec:c2:1c:57:4f:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AA:53:EE:70:B7:AE:AF:61:35:4A:C7:3C:93:52:EC:EA:58:69:FE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dapT7nC3rq9hNUrHPJNS7OpYaf4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:5d:5b:37:87:76:bd:a8:f2:be:f9:e1:09:ed:81:38:22:f1:
         bf:97:62:f2:26:b9:77:74:f2:f0:51:0a:ac:17:bc:22:a7:e0:
         31:5a:02:fe:ad:c4:40:d6:b7:33:bf:c1:3d:1e:10:9c:c6:84:
         5e:6b:39:04:ba:60:03:0f:29:2f:3c:1c:f9:2c:c4:9b:47:c2:
         4e:97:8f:41:03:ad:97:75:ff:10:01:c7:6e:11:f4:84:a0:df:
         e9:67:63:d0:59:82:1e:bd:9a:b3:71:87:72:a6:78:0a:d4:9e:
         40:f0:6c:4d:09:df:d6:f2:a5:36:06:29:f2:63:9e:76:9c:72:
         cd:3c:70:93:b7:4c:2e:55:43:91:56:48:12:a6:da:29:b5:57:
         85:ee:7b:ee:78:c3:cc:5c:61:29:94:eb:95:27:ac:f5:7a:59:
         0a:27:2b:3d:54:46:5a:4c:85:5b:6b:f6:07:e6:6a:cc:82:cf:
         9e:6b:61:c0:55:82:0d:65:db:ad:f7:73:5b:b3:a5:a7:c9:51:
         73:6f:86:75:9c:9f:30:7c:a0:dc:81:63:cb:5a:9d:78:86:cf:
         34:43:e2:f4:fc:74:58:7e:63:82:21:8e:9a:d8:95:fe:8b:28:
         4c:cf:e0:72:a9:0f:74:18:26:6d:06:7b:f2:c7:c6:34:86:12:
         dd:5c:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org