Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vEwuKTogNTp-U8e_jS4XumLdIwg.roa
File:                     vEwuKTogNTp-U8e_jS4XumLdIwg.roa (raw, json)
Hash identifier:          mxdk4GKcKxZzxOzZZW+TrlVyHbgP3/ZB4EUw9bV79dY=
Subject key identifier:   BC:4C:2E:29:3A:20:35:3A:7E:53:C7:BF:8D:2E:17:BA:62:DD:23:08
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vEwuKTogNTp-U8e_jS4XumLdIwg.roa
Signing time:             Thu 15 Sep 2022 02:45:55 +0000
ROA not before:           Thu 15 Sep 2022 02:45:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BC4C2E293A20353A7E53C7BF8D2E17BA62DD2308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:03:dd:ac:09:a2:97:44:f3:25:a7:eb:99:
                    bf:5b:55:95:50:4c:b9:36:aa:1b:b4:a9:b4:fa:46:
                    d2:23:d2:60:9b:c6:72:43:f1:2e:a6:63:89:1a:57:
                    9c:e4:46:81:94:0b:3d:e2:15:ee:c4:5f:50:be:88:
                    f0:bc:bb:8d:e9:b0:b0:ab:b1:20:d3:09:20:32:e9:
                    dd:45:5e:0f:c1:5a:b3:fd:59:cf:fc:bc:20:51:c9:
                    44:9c:c4:59:6f:3c:a1:22:87:27:b6:75:51:32:2e:
                    87:03:41:8b:1b:ac:67:fa:52:88:06:4a:7e:6f:29:
                    f6:b2:76:9d:1d:6d:ec:c4:34:ed:74:3b:0b:93:6e:
                    90:cc:5b:e7:28:13:49:24:b4:98:37:88:cf:d7:ec:
                    ec:8b:e8:23:93:b6:dc:c6:21:b7:c3:fa:2c:d4:22:
                    ce:80:ac:1a:59:3c:25:91:51:62:d4:f8:cc:9c:37:
                    71:a3:38:8d:66:f3:7f:28:12:7c:bb:6a:82:0e:bc:
                    85:6e:d6:95:ce:6e:a8:30:66:61:95:6b:82:81:05:
                    bc:74:80:49:ad:33:ca:b7:b9:d7:08:8c:54:71:b8:
                    9d:03:f5:bf:11:8e:1c:d7:11:21:5c:9c:79:97:f6:
                    6d:8d:b2:68:64:0a:32:3b:f7:6e:82:bc:6f:55:61:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4C:2E:29:3A:20:35:3A:7E:53:C7:BF:8D:2E:17:BA:62:DD:23:08
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vEwuKTogNTp-U8e_jS4XumLdIwg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e1:1a:2d:6c:54:8f:5a:82:d8:4e:a4:5b:a6:7d:07:f7:2b:
         1e:23:e4:f8:59:11:9b:0e:b3:20:4e:7d:45:66:8d:74:34:87:
         43:da:79:3c:43:21:b8:f2:4e:9d:34:ac:75:aa:c1:9c:19:8b:
         24:68:2b:f4:d1:28:33:97:72:f6:e8:d6:74:16:de:ae:0c:fe:
         b1:b8:66:8f:f0:c2:4e:ce:2e:1b:e7:ea:d6:c1:65:ea:f3:bc:
         38:c3:28:69:b4:14:2f:13:31:3f:9c:ad:8d:a3:da:bb:e7:f3:
         b7:83:ea:16:d6:ac:03:85:7d:d7:ae:e8:cf:1c:73:d8:e4:e5:
         1f:03:76:2f:9a:d9:96:bc:30:74:96:7d:a3:08:9d:3a:d1:d7:
         f4:19:e4:c6:ac:10:3e:6c:ac:df:dc:67:4e:c7:c3:54:9e:0c:
         3c:48:ad:86:38:07:31:cd:51:69:4f:f1:56:88:8b:ea:91:ab:
         1b:40:01:94:b4:0a:46:9e:0e:73:ea:b3:08:f8:67:64:98:ef:
         82:fb:90:32:ad:c8:1b:98:2e:1c:32:85:94:16:3e:63:0d:de:
         b0:e4:a7:d0:13:7b:61:71:59:2c:04:90:f0:d0:37:35:d6:86:
         a6:dc:7e:f1:d9:f6:9d:8c:92:e1:28:19:59:6e:9e:93:24:d7:
         7c:35:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org