Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/td471MifDm908yNISR9UM2DgoRM.roa
File:                     td471MifDm908yNISR9UM2DgoRM.roa (raw, json)
Hash identifier:          L3xbJH2HwvtysmYfOhhpXsytsCG422whXY0xbsIdJwE=
Subject key identifier:   B5:DE:3B:D4:C8:9F:0E:6F:74:F3:23:48:49:1F:54:33:60:E0:A1:13
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       175B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/td471MifDm908yNISR9UM2DgoRM.roa
Signing time:             Sun 07 Feb 2021 12:18:37 +0000
ROA not before:           Sun 07 Feb 2021 12:18:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5979 (0x175b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:18:37 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B5DE3BD4C89F0E6F74F32348491F543360E0A113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:2a:98:cc:40:1c:52:33:f7:32:8a:78:7d:
                    00:53:7b:e0:6e:36:a5:36:71:80:f9:23:ba:e7:56:
                    26:5c:9f:44:19:8f:e7:89:50:51:de:d2:84:de:05:
                    63:03:df:b5:33:2b:71:d5:56:c0:76:c0:f2:5f:89:
                    94:89:bb:76:1a:99:c6:35:0a:f6:a6:bb:75:17:e8:
                    aa:b9:df:fe:50:84:0e:0c:98:18:20:04:4e:25:18:
                    22:9c:f5:b5:b8:bd:89:da:39:4c:83:c6:cb:37:69:
                    a5:e3:74:2f:57:24:73:2c:2a:09:a5:3e:5b:87:ab:
                    c3:19:ed:10:03:a9:e1:67:4d:2d:2c:ca:32:6a:ad:
                    e5:ce:8f:a5:07:57:ac:a0:86:fc:c2:0e:4c:c1:30:
                    86:6f:d1:a7:16:92:d4:cc:08:f2:c1:3f:41:e1:b8:
                    2d:be:1b:db:53:fd:d8:f6:6f:6e:63:27:e3:a7:d9:
                    34:64:a1:ac:e4:63:0a:5e:e2:81:46:31:92:39:61:
                    45:54:a2:3e:96:40:13:ef:4a:89:5f:5b:2a:ef:14:
                    3b:7b:3d:65:f9:ca:21:86:9a:6c:04:0d:fd:ab:b2:
                    b5:ec:23:3e:64:0f:72:a3:d6:27:98:ac:1f:10:e3:
                    a3:7f:e3:c1:f0:16:28:71:dc:a4:d2:b8:19:df:bb:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:3B:D4:C8:9F:0E:6F:74:F3:23:48:49:1F:54:33:60:E0:A1:13
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/td471MifDm908yNISR9UM2DgoRM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:34:a0:0d:a6:5a:04:ac:5d:53:60:fd:ed:10:d0:71:38:b2:
         e6:e0:50:05:ff:81:da:c5:84:c2:50:1a:e6:d7:b1:b7:24:e7:
         cf:80:df:2c:e4:08:64:73:ee:2d:2b:67:54:23:c7:02:c8:20:
         83:e3:2d:3d:9b:46:af:fe:74:ec:1a:e5:3c:2d:37:6b:62:86:
         a2:a4:52:43:22:d1:ae:5b:40:36:ee:01:79:45:de:b6:85:98:
         08:8e:31:8d:1b:e9:81:75:b9:31:3e:16:cc:5d:bd:f8:46:64:
         36:5f:cf:e3:c5:f6:64:63:1e:c8:f1:7a:92:83:ea:73:dc:64:
         64:65:f1:48:d4:f2:33:84:83:a1:96:a7:d1:2f:f5:07:99:6e:
         55:3f:85:13:b8:ad:08:23:0c:67:4d:81:5d:ea:96:40:ac:15:
         f8:f4:4c:be:ba:13:4a:d7:13:a7:ca:e3:54:67:ad:0e:6b:cc:
         f4:e6:49:cc:61:96:20:87:0a:39:1c:de:bc:ef:05:41:ef:87:
         63:a8:e0:19:a4:62:a5:7b:60:53:f4:5e:76:3c:07:74:11:01:
         16:42:39:14:f7:6e:a9:92:0c:93:8f:f7:b0:58:b5:d7:79:1c:
         d6:ad:5e:af:f1:4f:7c:26:da:a6:ea:c1:ee:f9:ef:a3:45:83:
         c1:29:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:30 2023 by rpki-client on console-ams.rpki-client.org