Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zbwo3iy8G_QoGl5io-wnBNxiXJo.roa
File:                     zbwo3iy8G_QoGl5io-wnBNxiXJo.roa (raw, json)
Hash identifier:          zAxntsqQr1xCoHWSBHy0MCL+c7AWGk6T98uvsCk8Aq0=
Subject key identifier:   CD:BC:28:DE:2C:BC:1B:F4:28:1A:5E:62:A3:EC:27:04:DC:62:5C:9A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F2C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zbwo3iy8G_QoGl5io-wnBNxiXJo.roa
Signing time:             Tue 29 Sep 2020 09:56:35 +0000
ROA not before:           Tue 29 Sep 2020 09:56:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.52.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3884 (0xf2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CDBC28DE2CBC1BF4281A5E62A3EC2704DC625C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:d5:bb:e5:54:94:6e:08:fb:36:86:f1:6f:
                    76:bf:fb:3c:bf:71:ff:d0:15:0d:31:e3:93:d2:a3:
                    b4:25:31:c2:4c:b7:d4:27:e2:60:e6:fd:79:4b:66:
                    a2:0b:af:1b:11:24:37:4f:b3:3e:52:37:33:b1:fa:
                    76:6d:c9:5f:c6:8f:e3:a4:ac:b5:2f:5b:a9:b9:e2:
                    86:bb:35:f6:03:84:0d:54:d2:11:9b:4b:0f:f1:9b:
                    2b:aa:fa:e3:d9:f2:f0:78:6d:c7:f9:87:ac:6c:03:
                    f5:14:65:6e:b9:c8:52:5c:bd:bb:e8:d1:87:86:ef:
                    05:1e:14:5b:e6:3b:37:af:af:4d:94:ee:94:d9:c4:
                    07:66:ab:21:3e:d4:bd:6c:97:46:dd:ff:6f:8b:f0:
                    6d:97:79:34:ce:92:4e:40:2f:bc:f8:bf:52:1b:66:
                    c1:48:bc:59:56:77:9e:b5:81:44:d3:7c:0b:2f:93:
                    70:36:bc:cb:a2:99:d5:be:7e:d0:9d:84:fe:1b:ff:
                    c2:09:35:bb:c2:ee:01:30:61:97:e1:0a:13:a5:7a:
                    cb:da:c5:8f:6d:0e:e1:d5:de:f5:96:7a:47:d4:57:
                    13:66:8a:30:9e:24:8b:96:18:ce:67:17:80:d0:7b:
                    6d:0c:99:d0:e6:32:51:cb:a6:1e:8d:5b:63:11:84:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BC:28:DE:2C:BC:1B:F4:28:1A:5E:62:A3:EC:27:04:DC:62:5C:9A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zbwo3iy8G_QoGl5io-wnBNxiXJo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:c1:30:ab:a6:70:9d:99:46:2f:29:cd:93:0c:9a:05:30:27:
         97:b0:8b:cb:55:ee:2e:bf:2d:1e:1b:10:bf:f5:5d:16:97:4a:
         9f:65:2f:71:03:cc:fe:60:23:4d:f5:d6:73:88:9c:58:e0:ca:
         63:7f:2c:bc:93:3f:c2:4d:68:df:fa:b8:8f:a2:9f:cc:5e:aa:
         39:a9:19:5e:a0:c6:fc:48:b8:1e:1d:23:49:1f:5a:55:eb:9c:
         d9:97:bb:e7:d4:a6:65:91:62:7a:f4:ed:ce:6f:bb:ef:f1:63:
         90:75:f1:21:94:fb:3a:9f:85:22:61:79:c0:49:76:a7:8d:b1:
         3e:e0:47:11:cf:6c:0a:a2:b2:76:60:d1:23:29:28:24:e7:4d:
         00:46:c8:42:b5:32:bc:35:47:7d:30:fd:69:d7:69:30:ca:be:
         d2:44:f4:de:25:d9:82:17:a5:d4:8e:07:4a:30:59:b0:22:3e:
         39:44:fa:51:de:17:68:89:0d:7d:a4:49:6d:71:20:44:86:2f:
         cf:c4:3a:ee:e8:74:2a:83:7c:95:ed:bd:d5:57:0e:fc:18:af:
         65:2c:c6:d0:22:26:22:07:a3:f5:b8:2e:ad:a3:63:83:cf:79:
         7f:fb:08:4e:b6:41:f2:5a:bf:5e:5f:bc:4e:f6:17:b1:40:13:
         15:50:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org