Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/skmRixefB-9RNKGvB7-ediqLuto.roa
File:                     skmRixefB-9RNKGvB7-ediqLuto.roa (raw, json)
Hash identifier:          HWtC2u8b3jlQzLXjqWl7aRW01KTkmfufKPpd0AGZ8C4=
Subject key identifier:   B2:49:91:8B:17:9F:07:EF:51:34:A1:AF:07:BF:9E:76:2A:8B:BA:DA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1497
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/skmRixefB-9RNKGvB7-ediqLuto.roa
Signing time:             Sun 07 Feb 2021 11:59:15 +0000
ROA not before:           Sun 07 Feb 2021 11:59:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5271 (0x1497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:59:15 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B249918B179F07EF5134A1AF07BF9E762A8BBADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:2d:a9:ae:d4:20:6c:99:f3:2a:43:68:78:
                    5d:e3:e7:52:06:f8:39:ec:d8:34:10:96:ee:f6:3f:
                    d2:a9:ae:68:04:f7:99:d2:2a:a0:27:af:f1:a4:3f:
                    b3:88:d4:35:fb:2f:1b:41:91:20:df:93:21:8e:23:
                    6c:c5:55:55:d3:8a:18:f1:dd:4f:5b:b7:f8:4e:eb:
                    2d:cb:81:d4:f3:22:a2:62:33:bc:fe:53:48:b3:f7:
                    04:82:6d:64:a5:47:ac:76:5d:89:30:a3:d7:19:82:
                    e7:45:12:3e:ea:1e:f9:d8:c5:d1:c7:60:02:50:ec:
                    42:9b:72:1e:3f:5f:30:e7:d9:67:b3:21:e9:88:cf:
                    14:68:97:8a:62:0c:8f:b3:8e:ea:8d:b0:ae:0b:70:
                    83:1e:3b:90:a4:b3:bf:49:87:fd:e8:3e:c5:f2:af:
                    7e:e2:a7:5e:de:9d:2c:36:ac:59:e3:b4:60:ac:84:
                    30:1e:4e:28:90:de:23:34:b7:e5:dd:19:7d:d9:00:
                    15:32:1a:c2:25:42:19:c0:78:3e:fb:18:87:65:3b:
                    f2:a9:91:e4:bc:e6:3e:9b:f6:b5:96:77:70:f8:f3:
                    18:71:77:76:10:87:83:3e:a7:bd:0c:26:85:15:2c:
                    f5:57:ac:c9:97:07:2d:24:6d:21:90:14:9e:d3:6f:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:49:91:8B:17:9F:07:EF:51:34:A1:AF:07:BF:9E:76:2A:8B:BA:DA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/skmRixefB-9RNKGvB7-ediqLuto.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:d5:2f:e1:b1:12:f4:cc:b3:46:1d:43:cf:a2:76:1c:67:
         f2:4e:02:51:c0:77:2c:79:f1:ba:7c:cb:c3:95:48:70:a6:5c:
         dc:59:2b:93:82:f3:df:92:a3:3a:26:28:06:63:22:2f:24:1a:
         9e:3b:66:35:e1:ca:34:a8:bb:19:51:fa:0e:aa:a7:c5:be:e0:
         da:c1:5b:e3:2e:30:a0:86:b5:8b:37:c8:ec:f9:7d:a9:5a:fb:
         ef:f1:f6:14:34:40:59:45:0c:b1:dd:15:79:54:8c:b9:16:0c:
         6c:22:b7:92:b9:6d:22:1c:69:c6:22:44:4c:f9:c8:e8:bf:4d:
         17:2d:e9:f1:be:59:83:1c:e9:dc:b3:f5:fa:b4:6d:18:be:99:
         24:da:90:73:e2:8a:45:e8:6f:91:7a:20:8d:10:04:55:bf:31:
         aa:b9:c7:83:d8:61:88:ef:24:27:1d:9a:84:25:51:3a:cf:ca:
         95:ed:ca:41:87:96:9d:25:cb:94:50:b5:f3:84:f0:ed:ce:f2:
         22:92:8a:87:64:93:d7:3b:d3:40:45:00:58:14:71:bc:01:2e:
         3c:2f:92:d1:57:76:39:27:81:df:bd:23:45:e0:5b:38:4b:91:
         b6:d9:b6:eb:a0:b3:f8:8d:15:7c:98:52:25:60:52:2f:6e:14:
         f3:75:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org