Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oAEB4DApv76_sZ1axTq5FUPBevE.roa
File:                     oAEB4DApv76_sZ1axTq5FUPBevE.roa (raw, json)
Hash identifier:          l3S8cnq8zz7Ykz23eJVtmBEoquja7DLONL8YEmV0bHU=
Subject key identifier:   A0:01:01:E0:30:29:BF:BE:BF:B1:9D:5A:C5:3A:B9:15:43:C1:7A:F1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CA7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oAEB4DApv76_sZ1axTq5FUPBevE.roa
Signing time:             Wed 29 Sep 2021 02:48:01 +0000
ROA not before:           Wed 29 Sep 2021 02:48:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7335 (0x1ca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A00101E03029BFBEBFB19D5AC53AB91543C17AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:2a:41:1d:ce:08:d0:97:27:b1:5f:dd:95:
                    99:95:89:60:7d:9a:98:00:a7:c7:ee:00:97:a8:ad:
                    ac:05:04:0e:70:f5:f5:ab:f4:82:0b:c9:21:4e:64:
                    79:3f:5b:42:08:b8:9c:36:98:f7:93:be:67:32:e4:
                    e0:1c:82:1a:90:14:fc:75:94:c9:f9:5a:e8:cb:9d:
                    b1:57:87:3c:5e:1c:fe:b5:82:d0:66:ca:86:51:5b:
                    5e:95:65:ad:f6:4a:cb:74:34:9d:39:4d:ec:b2:c9:
                    86:b8:28:a8:52:32:7c:8a:34:4b:3a:67:84:b1:6b:
                    b2:5d:b1:f5:17:df:cf:61:aa:18:27:bb:3a:f3:b5:
                    c9:a3:6e:b1:b6:80:2b:56:6b:8d:7f:63:f7:9d:40:
                    34:34:d3:e7:5c:9d:4e:18:5e:79:46:46:b6:b7:4e:
                    7b:3c:3d:80:5e:51:c3:d9:f3:a7:5b:ee:c9:c4:4f:
                    8e:cd:5d:57:41:76:78:70:50:92:85:1a:f0:cc:93:
                    d5:16:6e:60:3a:b8:3a:bc:9e:b6:ff:b7:0a:31:de:
                    17:ed:3d:9a:d3:ed:50:9f:f4:ee:2d:a1:a5:46:19:
                    07:87:8b:e3:22:b4:4c:3c:7d:f5:61:d3:d7:8e:d0:
                    6e:93:08:ff:23:ef:c7:76:a6:49:65:01:a4:d7:6e:
                    4a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:01:01:E0:30:29:BF:BE:BF:B1:9D:5A:C5:3A:B9:15:43:C1:7A:F1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oAEB4DApv76_sZ1axTq5FUPBevE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:59:b1:7f:be:cb:74:4d:0e:77:fb:65:25:60:63:e4:4a:ef:
         50:5c:0d:0d:9d:c5:d0:60:83:78:0a:e7:1f:62:67:fc:08:0a:
         4b:7b:52:4e:2c:36:25:67:c3:db:35:a3:60:9b:16:29:31:3d:
         63:70:50:6c:34:42:e8:f8:05:ba:ad:4d:df:d0:6e:1d:5f:c7:
         5d:da:a4:a3:81:7e:c7:e9:23:63:9a:a2:f1:67:81:86:20:69:
         5d:c2:67:9a:64:17:3b:80:5b:b2:ab:e8:c2:4f:28:3e:2a:73:
         ef:2b:33:e6:4c:78:39:92:a9:10:95:e6:59:21:26:b2:c5:a6:
         61:89:f6:15:b7:32:9b:1b:64:54:22:22:b7:f5:16:ed:0f:a9:
         8a:ee:50:34:4e:df:83:4a:c5:0e:d9:75:3b:56:c1:31:89:c2:
         8d:bd:a8:92:f0:75:85:97:c4:a8:1e:c8:66:4f:10:ce:3e:88:
         e6:02:58:0c:12:08:a7:3d:50:5d:b0:83:1d:64:2a:d9:16:75:
         91:5c:3b:46:15:a7:1c:2a:f9:32:4c:9f:29:4a:80:ba:dc:01:
         d2:ae:5c:c1:8e:00:07:25:86:c3:de:8a:d5:d1:ac:ac:96:6a:
         eb:6e:75:1f:b2:76:43:45:bd:6d:d2:1d:40:10:56:6c:03:8c:
         33:5a:e9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:40 2024 by rpki-client on console-ams.rpki-client.org