Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mv8ubq5NEFLyuI27pM3bP2m1ei8.roa
File:                     mv8ubq5NEFLyuI27pM3bP2m1ei8.roa (raw, json)
Hash identifier:          K0k8rmj24TXuquLnjCjnvCN5QRn1Xb7Z7vo/o5w6i2E=
Subject key identifier:   9A:FF:2E:6E:AE:4D:10:52:F2:B8:8D:BB:A4:CD:DB:3F:69:B5:7A:2F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       184B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mv8ubq5NEFLyuI27pM3bP2m1ei8.roa
Signing time:             Sun 07 Feb 2021 12:28:02 +0000
ROA not before:           Sun 07 Feb 2021 12:28:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6219 (0x184b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:28:02 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9AFF2E6EAE4D1052F2B88DBBA4CDDB3F69B57A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:ed:79:75:64:ef:6f:0b:03:4b:01:5c:91:
                    75:92:17:5a:db:c4:38:01:67:55:19:d6:b7:89:0c:
                    91:78:6b:2d:9d:e5:63:c1:5c:26:91:b4:b6:82:9b:
                    8d:fd:a3:9f:a7:b6:b3:e4:c7:c3:67:9b:8f:5e:8b:
                    ec:dc:79:d4:13:2e:24:2a:be:7a:cd:a0:6f:ab:76:
                    64:01:d1:ae:65:b0:59:04:69:eb:6d:37:29:8d:5c:
                    5d:56:11:d4:d1:73:93:0a:6c:ce:c5:90:10:95:48:
                    d5:2e:67:96:88:89:75:ce:24:12:38:50:ad:3f:a0:
                    17:96:b9:4f:53:ec:70:44:5b:18:f3:33:c6:b6:bb:
                    8f:f9:7f:4b:98:bc:fb:bf:49:07:5e:69:32:c0:af:
                    1a:44:f6:24:2f:fe:9a:d0:fe:34:98:fb:ae:27:1a:
                    b3:e8:e0:79:b9:cc:9a:bf:9c:fb:ab:df:3d:fe:e9:
                    3c:3f:41:b4:7e:95:61:35:04:a4:74:6e:c3:24:c6:
                    31:7f:df:c2:c8:60:23:76:f2:8d:01:80:90:80:2b:
                    6e:bb:28:78:7c:35:c4:f2:ec:c8:71:c9:b3:be:c8:
                    30:a1:28:5f:18:b2:fa:08:91:1e:c6:cc:1f:47:d6:
                    73:0a:b3:ba:7c:d4:09:b0:e1:de:8e:25:1f:91:b2:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FF:2E:6E:AE:4D:10:52:F2:B8:8D:BB:A4:CD:DB:3F:69:B5:7A:2F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mv8ubq5NEFLyuI27pM3bP2m1ei8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:3d:fe:10:a6:5d:63:b6:02:ff:be:36:a0:6d:b8:08:99:b0:
         e6:cd:39:4c:a9:ac:95:c4:4d:95:f1:47:99:90:a9:cd:44:cc:
         5c:cf:9b:a7:ba:e7:fa:4e:37:41:11:10:ee:6c:a8:19:9f:87:
         2b:9d:22:e4:3c:c4:ad:d8:c6:52:d0:1c:50:0f:2e:36:89:5b:
         b7:3a:93:f7:35:0f:1b:a4:f0:d6:d3:ff:6d:50:ef:a6:ee:bc:
         b6:d8:17:97:af:9c:42:8b:6c:14:ae:03:7f:a6:7d:3c:d8:fc:
         a5:98:14:05:7a:cd:2c:8b:ab:bf:a0:db:05:4b:8f:1a:18:f0:
         32:5f:1c:3d:4b:45:a7:bd:ab:b6:26:06:41:1f:3a:de:96:96:
         4d:a9:50:34:13:f6:96:e3:1f:09:71:d1:a1:d7:4a:35:8b:3e:
         96:77:db:f9:c7:bd:45:5d:b1:65:67:50:85:a4:c9:63:95:4e:
         60:0a:25:b2:44:f6:fc:ab:9b:c7:be:a6:47:73:ea:76:bb:d5:
         ed:a6:0c:92:51:49:67:8e:18:7a:ed:06:f3:2c:5e:4a:20:6d:
         d5:b0:41:0e:06:76:57:09:9d:d1:84:97:3d:4a:3d:5b:bf:51:
         bc:ea:91:23:14:9f:f5:b7:cc:34:c6:56:4c:04:c4:d4:c0:74:
         6f:cf:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org