Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gwKrWZVOc8jCezyj1mi0fnGKDm4.roa
File:                     gwKrWZVOc8jCezyj1mi0fnGKDm4.roa (raw, json)
Hash identifier:          AQRD5t+73bdF5H7JL/W4FwrPcB/MhepNBgasDpMC6Y0=
Subject key identifier:   83:02:AB:59:95:4E:73:C8:C2:7B:3C:A3:D6:68:B4:7E:71:8A:0E:6E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       15F3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gwKrWZVOc8jCezyj1mi0fnGKDm4.roa
Signing time:             Sun 07 Feb 2021 12:07:26 +0000
ROA not before:           Sun 07 Feb 2021 12:07:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5619 (0x15f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:07:26 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8302AB59954E73C8C27B3CA3D668B47E718A0E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:db:a6:b8:a6:9f:ef:bf:22:bd:82:e9:38:
                    93:49:d3:9c:f3:c0:72:21:0b:b7:ac:9a:99:d9:d6:
                    3d:97:3f:ce:4a:c2:5f:9f:d8:f1:76:56:43:ff:ff:
                    e0:29:e9:d7:17:03:fa:f3:96:3a:e4:91:da:ee:90:
                    23:dd:61:85:1a:0a:df:c1:54:80:e2:0d:69:20:82:
                    db:ba:76:8d:51:0a:b4:f2:f9:5f:f5:bf:85:41:79:
                    0f:fc:4e:35:a5:c5:b8:b4:32:8f:f1:c6:1a:4a:81:
                    ef:d9:38:18:96:74:2f:ee:35:cd:f9:3b:42:68:0c:
                    1c:e8:3c:3a:96:fc:54:e8:e1:d4:7b:25:59:0b:8f:
                    52:b7:96:7a:71:de:27:73:73:f1:68:30:75:13:b5:
                    47:7a:4f:af:b3:71:59:a4:fb:76:41:53:48:d6:d4:
                    2b:22:fd:f7:84:8b:92:15:28:8b:05:5c:60:1c:ab:
                    57:9b:81:62:64:74:cb:fb:bc:e0:62:91:69:cd:4b:
                    00:cb:00:53:61:42:2c:60:c1:53:b8:b8:fa:5e:3f:
                    dd:92:81:07:81:f6:f3:a6:27:0c:1a:60:1b:c3:9f:
                    02:3b:99:6b:17:65:ab:28:76:82:24:ad:40:5a:46:
                    76:52:0b:76:43:ee:ef:8d:a2:b1:70:0b:b4:85:34:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:AB:59:95:4E:73:C8:C2:7B:3C:A3:D6:68:B4:7E:71:8A:0E:6E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gwKrWZVOc8jCezyj1mi0fnGKDm4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:91:3e:d4:ea:cc:40:a4:8b:a0:36:be:65:ce:3a:e9:23:
         6e:9f:88:b3:fa:58:ee:28:7d:31:af:9d:8d:bb:bd:7e:e4:84:
         0c:ba:5b:4e:6f:4a:1e:37:c7:3f:de:bc:3f:be:79:49:15:72:
         7c:c5:55:64:9c:2b:0f:fd:cf:41:8c:ef:a1:c8:95:92:e8:50:
         c9:e7:ea:f7:3b:98:de:18:6a:bd:5c:65:84:6d:68:31:ea:70:
         97:e0:16:24:99:e5:3d:f8:77:5d:cc:23:e4:3c:c3:d5:f7:b4:
         83:97:6a:01:52:13:17:cf:44:31:2d:5f:ae:48:37:2f:ac:a2:
         6e:c1:b6:72:06:12:7c:de:bd:45:74:07:18:9b:52:46:cf:d1:
         9a:b1:12:18:7a:7a:f6:f6:28:50:06:96:3e:55:b6:6f:f8:8d:
         ad:39:22:ed:b9:c5:3d:2f:86:17:a0:85:15:91:0e:4d:42:90:
         5c:0f:c5:f7:36:63:6e:42:53:c1:a5:57:24:a7:b6:bd:04:4a:
         f2:51:5a:2a:3c:bb:5a:46:5d:db:66:4f:45:87:7a:11:68:f4:
         e4:64:78:0c:36:07:52:66:97:8a:d7:b2:5a:42:4d:01:0f:cc:
         6c:2a:40:54:d5:fc:49:15:08:01:0a:45:13:e4:99:18:01:6d:
         ac:f0:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org