Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/M_EmrbP6Vk-B6jlvhEiv7kO6m60.roa
File:                     M_EmrbP6Vk-B6jlvhEiv7kO6m60.roa (raw, json)
Hash identifier:          ZhhW8HXVGaHq9i2+MOaTODJKF43IMulFbddVw24Yy/E=
Subject key identifier:   33:F1:26:AD:B3:FA:56:4F:81:EA:39:6F:84:48:AF:EE:43:BA:9B:AD
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0DDD
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/M_EmrbP6Vk-B6jlvhEiv7kO6m60.roa
Signing time:             Mon 23 Nov 2020 07:24:40 +0000
ROA not before:           Mon 23 Nov 2020 07:24:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:20::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3549 (0xddd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 23 07:24:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=33F126ADB3FA564F81EA396F8448AFEE43BA9BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:09:32:f3:36:7f:a7:37:ca:53:b4:51:e6:
                    f8:b3:55:cc:58:f1:1a:d0:31:44:88:bb:7e:0e:56:
                    26:56:77:7b:2c:ba:34:ac:9e:c1:6a:c1:69:b1:d5:
                    12:55:eb:01:28:8a:2b:9d:65:50:26:d1:78:dd:91:
                    7f:0c:d6:de:e2:e0:d2:bc:1f:d6:58:d3:96:9c:4a:
                    fb:57:da:dc:09:63:cb:99:26:2f:86:3d:90:0c:4a:
                    a9:62:24:f9:57:fb:63:ee:96:36:5e:10:1d:17:63:
                    d3:90:b1:a9:17:60:5e:fc:2c:91:48:75:b5:53:6c:
                    c1:16:af:a7:2a:fa:3d:4d:75:e8:01:65:c4:50:21:
                    9a:93:9b:75:c5:6f:57:26:77:78:c7:a4:d5:19:f2:
                    54:3c:3b:04:38:2b:98:e3:2c:92:bd:a1:fe:f2:9a:
                    ba:03:c7:91:48:61:bf:e5:64:87:6f:a5:74:d8:8e:
                    96:ef:6b:ae:f0:e8:aa:c6:99:0d:44:65:03:13:e9:
                    d1:71:45:67:58:56:0c:29:74:72:4c:d7:92:1f:ad:
                    ea:cd:fb:ca:bc:9b:62:bb:a8:93:5a:a6:14:bf:d2:
                    77:e8:98:62:7d:9b:3e:bf:dc:d4:1a:50:3a:27:1e:
                    0a:89:47:e9:48:82:59:a9:1d:01:6b:08:d5:90:d2:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:26:AD:B3:FA:56:4F:81:EA:39:6F:84:48:AF:EE:43:BA:9B:AD
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/M_EmrbP6Vk-B6jlvhEiv7kO6m60.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:23:0d:5f:55:16:99:17:0d:12:ce:34:d5:89:48:19:66:
         1b:f4:4d:aa:b7:45:2b:0e:77:d0:d2:fe:18:a0:20:ae:d0:3f:
         e3:05:38:cc:dc:04:21:e6:ff:ff:96:71:93:99:21:a6:0c:5c:
         d6:a0:db:e5:fe:aa:33:e3:95:4c:a7:5d:c4:3d:25:32:31:32:
         ab:7c:56:ba:01:56:59:2e:81:cf:22:ca:d6:22:97:91:a4:78:
         b8:d3:10:d2:de:cc:b4:74:1a:dd:41:36:61:b2:0e:a7:4f:08:
         18:3e:64:e3:cf:49:8c:ab:c6:99:2d:d3:29:9b:2d:61:cb:86:
         44:3d:b9:3b:48:fd:74:00:f3:9e:57:15:b7:98:4a:d3:c2:56:
         99:2b:9b:a4:d5:98:c9:0b:fc:53:9a:4e:dc:d0:b7:c2:05:14:
         e1:0a:ba:b6:8d:f4:74:3a:87:21:12:9e:74:c1:dd:21:22:ac:
         df:fa:49:4e:42:4f:84:75:37:56:b0:cb:6d:6e:aa:ee:a6:e8:
         63:99:4c:07:79:d4:15:9a:d6:ba:fe:82:80:8f:a2:05:d7:4c:
         b8:95:e0:40:21:65:92:30:f1:5a:7b:a9:1b:1e:72:0c:c9:af:
         2b:a3:86:b4:44:4d:bc:dd:e4:46:68:85:27:4c:91:b6:17:f1:
         0c:23:1a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org