Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wDDdAAX_dLpRSYZJbkLSXLDf-Ss.roa
File:                     wDDdAAX_dLpRSYZJbkLSXLDf-Ss.roa (raw, json)
Hash identifier:          SOwgCU91p6TxM+jk3u4ydm73XLdxy7YsOYonpFfr6+o=
Subject key identifier:   C0:30:DD:00:05:FF:74:BA:51:49:86:49:6E:42:D2:5C:B0:DF:F9:2B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F33
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wDDdAAX_dLpRSYZJbkLSXLDf-Ss.roa
Signing time:             Tue 29 Sep 2020 09:56:38 +0000
ROA not before:           Tue 29 Sep 2020 09:56:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3891 (0xf33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C030DD0005FF74BA514986496E42D25CB0DFF92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:fa:94:7f:cc:55:9b:3c:1d:de:c1:a0:f0:
                    57:e6:23:5a:d7:e2:56:e2:61:56:ce:a5:52:27:9c:
                    85:ab:0b:ab:8e:89:6d:37:96:93:05:83:05:ad:2e:
                    0d:c5:ec:1c:8e:7c:b3:c2:2d:cb:2d:71:b2:98:35:
                    12:83:90:fe:aa:53:fa:3f:1a:95:52:cf:4e:e8:08:
                    ed:5b:1e:68:fc:03:22:d7:1a:77:3b:4c:b3:b2:1c:
                    61:c0:36:1d:57:81:3b:1d:24:9f:ab:09:a3:d4:46:
                    51:8d:14:ee:5a:92:2d:f8:66:1a:6a:85:78:f1:6e:
                    7e:bb:37:a1:51:77:67:28:28:21:30:36:60:4a:60:
                    50:e7:2e:13:90:bb:3c:0b:e7:61:94:e0:77:d8:49:
                    db:f2:8a:e2:4d:56:bb:8d:a2:44:cc:d3:75:ae:b5:
                    ef:93:a0:13:a2:47:3b:4f:51:59:f9:eb:a4:6f:7a:
                    9a:01:8b:4f:4e:c3:92:c7:65:71:ea:99:3f:dd:03:
                    13:67:74:28:62:3c:ec:52:1d:a7:88:f4:00:5c:ad:
                    4c:86:21:7f:b0:27:3f:87:a9:b0:d7:4e:f0:db:35:
                    79:fb:fc:07:89:e2:e9:47:cd:6e:8a:d7:b0:fd:d9:
                    a1:5b:ec:7b:6e:8e:24:dc:5f:25:4d:1e:87:40:ef:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:30:DD:00:05:FF:74:BA:51:49:86:49:6E:42:D2:5C:B0:DF:F9:2B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wDDdAAX_dLpRSYZJbkLSXLDf-Ss.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:45:ce:0c:3e:55:16:ea:c0:d9:79:33:da:8a:9a:9b:39:3c:
         6e:98:1b:6a:f4:60:c4:53:0e:ee:3d:82:fa:e0:fd:ce:3d:89:
         76:a0:eb:27:4d:9f:cc:dd:19:c9:7e:9c:d7:b4:fe:02:5f:c5:
         93:bd:b8:f1:35:fa:97:f5:9b:e7:63:85:6b:b4:36:95:bc:c2:
         5e:09:c2:eb:fb:a3:c1:84:4d:db:a9:96:3e:1a:b2:b2:a1:e2:
         cb:8b:4b:c3:9e:06:8b:3e:96:11:e8:64:1c:b3:70:8e:7b:51:
         0f:47:ee:77:d6:ee:46:59:92:d4:23:93:fb:cd:4f:e1:13:eb:
         92:af:09:c6:12:0f:69:96:df:ea:1e:30:a0:3a:9a:1e:bc:8d:
         9a:4a:01:69:0e:ff:c0:c7:74:eb:3f:83:17:1e:8b:51:f9:7d:
         54:52:c6:08:00:d8:47:cf:94:80:bd:cc:38:eb:8b:f5:cd:11:
         f5:6b:3b:2c:29:8d:c0:19:b2:03:54:e0:34:6e:07:b4:35:2c:
         39:9a:01:4e:28:97:ff:6d:2a:19:e0:93:7a:6b:66:56:5b:e8:
         1d:c4:36:b8:94:9e:67:5a:b9:dc:3a:9e:18:56:a8:00:09:8f:
         83:32:8d:c5:95:8c:c6:dd:c4:ce:36:b4:bf:ae:8f:e1:bc:dd:
         d2:0f:e3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org