Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hBXk2h9PMijX6RGbY8dSaTDaj04.roa
File:                     hBXk2h9PMijX6RGbY8dSaTDaj04.roa (raw, json)
Hash identifier:          PlbRo/nYQiKfkWcN0CqutM0kWBVuaunkZAbWHh2lGrs=
Subject key identifier:   84:15:E4:DA:1F:4F:32:28:D7:E9:11:9B:63:C7:52:69:30:DA:8F:4E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AF0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hBXk2h9PMijX6RGbY8dSaTDaj04.roa
Signing time:             Wed 29 Sep 2021 02:45:56 +0000
ROA not before:           Wed 29 Sep 2021 02:45:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6896 (0x1af0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:56 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8415E4DA1F4F3228D7E9119B63C7526930DA8F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:c1:69:65:72:8f:52:6e:91:fa:46:a3:8e:
                    95:ea:2a:95:8b:c9:d7:0e:d1:bb:4d:9a:34:de:39:
                    ab:93:4a:6b:5f:d1:cc:b1:82:00:31:ff:a4:3c:a5:
                    5a:60:e3:4f:f9:ba:0d:f9:d5:a1:cb:c1:56:22:b3:
                    31:a5:24:d1:04:99:90:f3:9f:77:09:45:80:ae:6a:
                    00:5a:7e:eb:5c:c3:b3:e1:5c:ad:97:0c:43:f4:f4:
                    91:aa:0d:aa:02:6d:38:62:cb:4a:d1:9f:84:8c:67:
                    fd:18:4c:c6:f8:cc:19:81:d1:8a:07:c3:02:b4:7c:
                    5f:8e:97:c9:7f:23:d9:8f:f5:82:1b:a7:a1:de:17:
                    e4:9c:63:c6:f6:9e:76:34:63:a3:6f:eb:5c:9f:71:
                    dc:36:2f:be:54:1a:eb:70:3e:f4:1e:96:a4:59:e7:
                    72:90:37:d5:15:85:45:75:7e:c1:c8:02:b7:6c:4c:
                    77:99:46:81:fe:fd:1e:1f:2f:4b:a2:75:64:e3:3e:
                    07:78:d0:1b:60:fa:87:08:93:75:86:fc:bd:7f:2c:
                    6c:4a:dc:a3:11:f9:d1:ca:96:ab:a0:55:b2:df:16:
                    73:de:e9:4e:bb:e0:c8:71:93:15:e3:cb:f7:df:d9:
                    67:d9:65:be:8c:39:8b:45:15:94:e8:32:a7:12:84:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:15:E4:DA:1F:4F:32:28:D7:E9:11:9B:63:C7:52:69:30:DA:8F:4E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hBXk2h9PMijX6RGbY8dSaTDaj04.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:2e:11:4f:77:cc:ce:8d:d7:7d:b8:52:22:18:85:c1:df:7e:
         d3:b1:0c:e8:f9:08:a6:bf:a2:dd:44:56:a6:a4:24:c0:ee:7b:
         d0:f0:d0:d2:b4:36:5e:fd:79:3b:27:be:09:36:62:bd:cb:78:
         09:6c:c3:fd:2e:05:ab:37:e7:2b:c5:3d:1d:ff:5a:34:b5:12:
         6a:6a:d9:38:8f:eb:69:07:48:51:bc:ab:90:75:c3:79:d4:ce:
         be:ac:1a:cb:3b:e1:a8:72:da:cf:3f:82:31:ac:c8:4e:e2:dc:
         e4:d7:9d:d7:0c:d1:cb:83:b5:bc:76:5c:be:59:72:78:cf:38:
         0a:75:9a:dc:74:15:b1:50:2a:98:29:62:f3:d5:cf:2e:53:b0:
         84:63:26:d0:27:55:b0:ef:bb:2d:59:1e:ed:66:a4:df:f5:57:
         82:76:ca:37:0a:e4:72:7a:e5:c0:e8:2e:2a:08:08:26:f4:32:
         6f:69:01:0a:fb:ff:3c:86:8d:58:2b:79:b5:a2:59:1f:18:fe:
         fe:dc:89:2a:2a:91:f1:5c:21:76:90:e1:c2:27:ac:ce:46:ae:
         83:e5:01:39:0f:98:e0:cc:bc:62:90:23:86:71:8c:61:18:15:
         cd:e6:59:b8:0d:76:c8:14:d6:e4:73:47:75:75:83:d0:ee:11:
         2c:4f:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org