Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zTC45EG4nuUc-CF__fWTxIdHcc4.roa
File:                     zTC45EG4nuUc-CF__fWTxIdHcc4.roa (raw, json)
Hash identifier:          dERXZTp00EyGMmmLn/zvUACvh0NNVi2giz162hn+KDk=
Subject key identifier:   CD:30:B8:E4:41:B8:9E:E5:1C:F8:21:7F:FD:F5:93:C4:87:47:71:CE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       182F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zTC45EG4nuUc-CF__fWTxIdHcc4.roa
Signing time:             Sun 07 Feb 2021 12:27:02 +0000
ROA not before:           Sun 07 Feb 2021 12:27:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6191 (0x182f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:27:02 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CD30B8E441B89EE51CF8217FFDF593C4874771CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:8c:f5:01:44:8c:ff:6d:9b:34:1e:e8:cc:
                    35:bc:c9:15:48:fe:bd:74:2b:3f:9e:86:ff:9c:4f:
                    f2:b5:58:8d:42:75:9e:3a:bc:6e:4a:60:2d:fe:5a:
                    00:9b:33:61:96:aa:d9:02:23:f3:3c:9d:92:ec:15:
                    36:39:f7:e9:dc:0c:44:d7:e6:b7:d3:9f:c4:3e:cc:
                    3b:ac:2f:45:64:27:c8:73:68:1a:d7:d8:c1:9c:4f:
                    11:01:83:50:eb:fc:53:92:66:e8:58:55:fc:2c:cd:
                    f6:cc:a8:e5:2f:b7:d9:bc:60:17:c9:4c:66:94:dc:
                    cd:05:b8:d6:a6:e0:66:d6:1e:de:7c:4e:a7:a6:87:
                    67:cd:50:aa:01:d2:b6:b0:48:68:cd:b1:ad:19:b3:
                    01:28:2f:75:36:f1:39:b6:8a:c7:79:d2:ae:cb:be:
                    be:ee:99:54:1d:f1:67:70:4f:58:fb:20:c0:36:91:
                    92:9f:25:c2:d1:83:24:28:af:08:9f:5c:cf:7d:4e:
                    d3:37:03:5f:af:56:97:8d:de:23:cb:73:77:3f:01:
                    f0:73:a5:09:61:3c:78:ee:b6:97:2a:f7:4a:b5:48:
                    a6:6a:cb:14:11:21:9a:fa:03:f1:6c:f1:10:e4:ab:
                    0f:c3:07:3d:10:36:bd:cd:11:ab:3b:cf:45:65:a4:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:30:B8:E4:41:B8:9E:E5:1C:F8:21:7F:FD:F5:93:C4:87:47:71:CE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zTC45EG4nuUc-CF__fWTxIdHcc4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:28:77:24:de:44:05:49:24:1e:de:be:24:a4:3e:b2:ca:fa:
         25:82:e9:3d:8c:ee:d0:5e:23:44:49:51:60:70:f6:b1:e8:45:
         4c:4d:fd:2e:81:31:49:ce:96:b9:99:56:e6:84:2e:00:43:08:
         9c:0c:73:01:16:5f:21:32:a9:8e:b2:1d:ea:2b:6f:79:85:ef:
         a6:2c:cf:5f:b3:fc:3d:e5:08:ce:7c:53:4f:84:bd:ab:27:e7:
         a4:e8:2e:07:81:c7:0f:b8:b5:d2:25:ab:bc:67:5f:de:63:a0:
         04:da:0f:85:2b:0e:c4:80:b4:6f:82:a4:75:ef:91:3a:50:f1:
         b8:69:5a:ec:f0:4e:8b:1a:e3:a4:3e:62:9e:b8:20:4e:d3:3d:
         61:88:d1:39:cc:bf:c7:3a:f0:3f:d4:ee:46:1b:54:00:cb:c5:
         bb:87:40:8d:10:f4:dc:51:66:88:23:61:f1:72:63:54:f2:df:
         8b:7c:fc:7e:24:46:15:a1:cb:ce:37:b4:e6:21:05:1b:1d:20:
         a7:ca:ed:39:4e:37:95:e0:ee:a1:5d:fb:32:23:e4:95:3b:cb:
         2c:9b:12:09:82:0d:2a:cf:37:79:f3:22:cb:41:7f:a9:79:a8:
         3b:e1:53:57:d0:5b:fc:f2:aa:11:9c:26:b8:e8:c1:8f:22:23:
         a9:40:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org