Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uo3uB0nzF3GHS3UHa_tETKZ2Ug0.roa
File:                     uo3uB0nzF3GHS3UHa_tETKZ2Ug0.roa (raw, json)
Hash identifier:          kqsjJZQT6xTZ3dzYzCR0fpyKc1rizszVop8z9QO6QTo=
Subject key identifier:   BA:8D:EE:07:49:F3:17:71:87:4B:75:07:6B:FB:44:4C:A6:76:52:0D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14E9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uo3uB0nzF3GHS3UHa_tETKZ2Ug0.roa
Signing time:             Sun 07 Feb 2021 12:00:36 +0000
ROA not before:           Sun 07 Feb 2021 12:00:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5353 (0x14e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:00:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BA8DEE0749F31771874B75076BFB444CA676520D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:80:85:1d:f5:62:b1:db:9d:4e:f7:f9:a8:
                    09:49:aa:a4:2c:db:d3:28:be:3c:41:09:9a:cd:87:
                    09:12:1c:c2:06:42:c3:5c:75:8e:1f:54:86:9d:ed:
                    d7:13:5e:ae:17:c0:21:86:e0:1f:e7:2a:4b:43:b9:
                    8c:3f:00:96:ba:3f:b7:20:a7:bd:e0:54:1a:fe:55:
                    d3:88:20:3e:33:c2:66:5c:c8:5e:a7:9c:88:bd:ce:
                    4d:7a:7c:01:e0:79:cc:ad:04:c8:d5:18:90:10:32:
                    e7:4a:d6:cb:f7:2a:00:ab:9b:8f:00:c4:f7:43:a6:
                    50:3d:3b:20:0a:d2:62:62:3e:4b:20:46:f4:6d:78:
                    e9:14:f2:f5:17:43:29:a1:b4:de:37:a9:25:0f:9c:
                    94:90:19:55:f5:a2:e3:7a:80:de:b2:f0:dd:90:5e:
                    94:67:58:80:95:81:0b:f2:86:53:e3:2d:2d:e2:5d:
                    33:a2:d6:34:f5:5e:e2:2f:c1:0a:7f:3d:a8:11:5e:
                    79:5a:83:88:7e:b5:f3:e0:4c:f4:b6:23:49:0e:ba:
                    4b:ba:b7:2e:7c:ca:22:13:f5:05:65:bd:d3:fe:9f:
                    e5:b3:2a:3a:96:cb:71:bc:77:58:76:aa:a0:ed:d7:
                    87:ac:d9:13:43:81:f3:79:d4:16:e4:e7:37:79:70:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:EE:07:49:F3:17:71:87:4B:75:07:6B:FB:44:4C:A6:76:52:0D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uo3uB0nzF3GHS3UHa_tETKZ2Ug0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:48:cf:78:ec:43:ce:35:66:20:33:03:4c:c1:47:44:63:ca:
         8c:c5:c2:15:e7:7c:66:24:f9:83:50:3e:42:20:34:f1:29:7c:
         00:27:d3:29:18:dc:83:7b:74:87:df:15:90:07:59:9e:d6:7c:
         32:4e:5a:7a:91:25:3d:b8:53:b2:8d:f1:73:df:f8:0b:a9:9e:
         f8:c7:ff:67:40:1b:f6:d8:4e:a1:9e:96:76:b0:cb:1e:dd:55:
         cb:fb:eb:4f:01:7e:87:da:e4:41:cf:f3:81:ff:51:2b:1b:de:
         4c:41:e9:7d:fc:49:95:56:d1:5a:98:bc:fc:53:4d:3b:89:ac:
         c2:0b:7b:ac:33:4d:2b:12:04:c0:42:7f:f9:da:8e:64:a1:ea:
         7d:fc:68:65:42:97:e2:ec:aa:84:3a:84:18:b1:d1:bc:fb:89:
         1f:47:57:0a:ed:a5:a6:e8:78:44:61:bc:c0:55:55:8f:84:55:
         95:64:bd:97:0a:e6:c4:5a:09:1d:d4:fe:39:c0:a1:62:ce:33:
         c5:0c:3c:6c:60:57:79:ab:d9:4a:a7:c3:34:f1:1c:4c:67:ac:
         4a:d6:53:0c:ae:45:d5:fb:db:e4:82:59:36:7d:aa:0a:34:70:
         15:f7:75:d1:57:86:89:32:c2:d9:0c:ec:ae:23:49:bb:11:ee:
         6f:c8:ab:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org