Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fwwsljBxEjafcwQHVC1FS0CMMAc.roa
File:                     fwwsljBxEjafcwQHVC1FS0CMMAc.roa (raw, json)
Hash identifier:          +/J2S5hIQVuloFx1KE0vv8xR3NxgRZ9PSBIzwB4S7Nw=
Subject key identifier:   7F:0C:2C:96:30:71:12:36:9F:73:04:07:54:2D:45:4B:40:8C:30:07
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D94
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fwwsljBxEjafcwQHVC1FS0CMMAc.roa
Signing time:             Tue 29 Sep 2020 09:54:43 +0000
ROA not before:           Tue 29 Sep 2020 09:54:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3476 (0xd94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7F0C2C96307112369F730407542D454B408C3007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:de:fd:92:3e:bd:9b:07:ee:fb:bc:2b:eb:
                    82:7d:4f:57:6c:bd:2a:65:86:c9:e0:bc:7f:14:54:
                    55:0a:c9:76:cd:fe:f8:93:9e:3c:48:d0:5b:d2:c7:
                    a5:6d:bb:76:d5:38:55:9d:83:80:bd:03:b0:3f:71:
                    4f:77:c1:99:1e:71:cc:47:97:3e:0c:df:a6:08:ed:
                    24:3a:2a:88:88:71:2f:6b:5e:31:0a:cd:8f:97:f8:
                    77:32:e3:5c:a5:7f:2f:23:2e:58:ff:2c:4a:b0:c4:
                    f3:97:32:2f:1c:3c:b1:cc:1e:ed:8d:53:9b:7c:b4:
                    bf:29:fc:bb:60:24:bf:ed:70:41:2c:64:6b:58:8d:
                    cd:e7:28:3d:20:2c:08:46:cf:e9:25:e4:4e:ae:ae:
                    07:82:7b:24:f2:69:0b:a6:70:cf:ea:5e:a4:e1:c8:
                    07:36:84:3f:14:f6:2d:6f:44:35:c3:97:4f:dd:a0:
                    5f:aa:5a:01:e1:75:ac:49:93:83:81:0c:e8:fc:59:
                    3e:8e:62:47:6b:1f:67:45:2e:77:57:8f:80:5d:be:
                    63:8a:89:39:b0:8e:38:9b:dc:f0:a5:c4:9f:dc:a6:
                    50:70:17:0e:7e:fd:2b:6d:0a:0d:d3:03:25:16:50:
                    4c:b0:00:4c:58:1d:44:d2:9e:ae:3c:3e:8c:44:67:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0C:2C:96:30:71:12:36:9F:73:04:07:54:2D:45:4B:40:8C:30:07
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fwwsljBxEjafcwQHVC1FS0CMMAc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:f4:aa:a6:6c:f8:c3:98:b6:9c:77:cc:d0:1d:20:98:15:
         84:2c:19:80:7d:b7:b4:d4:8e:44:d7:fa:64:3c:bc:6e:15:fc:
         f1:2a:10:de:b8:9c:d5:03:3c:6c:f4:60:16:a2:3f:28:c6:99:
         5d:11:b0:a2:5a:81:a6:88:95:f5:b3:0e:a7:04:a4:c2:ff:4d:
         f0:11:50:ca:27:05:17:e7:21:b0:f0:99:ad:67:99:ed:ea:4a:
         62:8e:fa:f4:f8:78:2a:30:e8:92:58:fe:b9:27:a7:b0:f9:fb:
         d7:88:3c:2c:9e:d1:1b:7f:8d:37:32:f3:8c:c2:dc:2c:d0:5c:
         0d:22:60:0e:5e:03:8a:26:ec:a6:30:8f:84:29:e0:a3:9e:fb:
         1d:20:94:c3:25:02:62:5b:3a:be:bc:93:aa:35:2a:63:67:eb:
         cf:ea:65:a1:9e:2a:cb:67:57:b6:29:9d:31:dc:48:cf:97:e2:
         27:1a:eb:ea:d2:fe:8b:29:f9:7a:45:85:68:92:44:cd:6d:be:
         4a:13:e2:cf:b7:99:2a:de:97:1a:d9:70:24:7e:56:eb:a2:1e:
         e6:77:d8:43:e6:25:71:0a:7d:bf:47:86:33:85:cf:61:52:05:
         a5:1a:1f:a5:df:a3:db:99:d9:a6:de:24:a1:0c:f0:ff:b2:59:
         88:c8:f1:3f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDZQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdGMEMyQzk2MzA3MTEy
MzY5RjczMDQwNzU0MkQ0NTRCNDA4QzMwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxRt79kj69mwfu+7wr64J9T1dsvSplhsngvH8UVFUKyXbN/viT
njxI0FvSx6Vtu3bVOFWdg4C9A7A/cU93wZkeccxHlz4M36YI7SQ6KoiIcS9rXjEK
zY+X+Hcy41ylfy8jLlj/LEqwxPOXMi8cPLHMHu2NU5t8tL8p/LtgJL/tcEEsZGtY
jc3nKD0gLAhGz+kl5E6urgeCeyTyaQumcM/qXqThyAc2hD8U9i1vRDXDl0/doF+q
WgHhdaxJk4OBDOj8WT6OYkdrH2dFLndXj4BdvmOKiTmwjjib3PClxJ/cplBwFw5+
/SttCg3TAyUWUEywAExYHUTSnq48PoxEZ0IxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfwwsljBxEjafcwQHVC1FS0CMMAcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Z3d3NsakJ4RWphZmN3UUhW
QzFGUzBDTU1BYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
Ac4wDQYJKoZIhvcNAQELBQADggEBAEoS9KqmbPjDmLacd8zQHSCYFYQsGYB9t7TU
jkTX+mQ8vG4V/PEqEN64nNUDPGz0YBaiPyjGmV0RsKJagaaIlfWzDqcEpML/TfAR
UMonBRfnIbDwma1nme3qSmKO+vT4eCow6JJY/rknp7D5+9eIPCye0Rt/jTcy84zC
3CzQXA0iYA5eA4om7KYwj4Qp4KOe+x0glMMlAmJbOr68k6o1KmNn68/qZaGeKstn
V7YpnTHcSM+X4ica6+rS/osp+XpFhWiSRM1tvkoT4s+3mSrelxrZcCR+VuuiHuZ3
2EPmJXEKfb9HhjOFz2FSBaUaH6Xfo9uZ2abeJKEM8P+yWYjI8T8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org