Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2W6nnEscfk88-ZIn_YuO2tbin9c.roa
File:                     2W6nnEscfk88-ZIn_YuO2tbin9c.roa (raw, json)
Hash identifier:          JU3GoDwS9SY3f7k8ePjm5Su/stCsp6Uv+Gkq3bU8nqM=
Subject key identifier:   D9:6E:A7:9C:4B:1C:7E:4F:3C:F9:92:27:FD:8B:8E:DA:D6:E2:9F:D7
Certificate issuer:       /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial:       077C
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2W6nnEscfk88-ZIn_YuO2tbin9c.roa
Signing time:             Tue 29 Sep 2020 09:58:54 +0000
ROA not before:           Tue 29 Sep 2020 09:58:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9680
IP address blocks:        168.95.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
        Validity
            Not Before: Sep 29 09:58:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D96EA79C4B1C7E4F3CF99227FD8B8EDAD6E29FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:12:6c:4a:a3:24:2c:35:0e:0f:ec:f0:b2:
                    30:ba:39:6c:2b:b0:9c:a7:67:c3:7d:df:6c:12:36:
                    72:41:00:ec:3f:a0:cc:75:84:4b:b6:38:3a:29:2e:
                    70:1a:a5:29:14:db:d1:23:6a:4b:c9:b1:be:15:f6:
                    c0:fd:44:fc:8e:9c:6c:ae:5a:e9:f7:85:91:62:5d:
                    3a:c7:83:30:cb:6e:60:0d:d8:9e:96:5c:5b:89:da:
                    3b:4d:ca:3f:86:2c:18:d9:51:dd:a0:a1:bc:b8:20:
                    7f:95:50:b1:28:fa:2c:8d:0b:91:ae:5b:7e:eb:af:
                    a3:54:80:ca:df:5e:4a:49:22:1c:ca:3c:9e:54:dc:
                    49:da:ec:70:26:99:5a:0b:59:94:44:de:6f:2f:ac:
                    d2:b0:39:98:71:c9:31:fb:1c:d6:76:a1:b3:c9:2f:
                    5f:5a:7a:2e:bb:c4:55:c4:8e:34:cb:a6:f3:22:8d:
                    62:11:c6:02:e8:27:bc:a8:53:1f:36:7f:49:bd:0b:
                    47:7d:a9:94:43:b6:6f:1b:24:ef:c3:bc:2c:ba:64:
                    99:e2:bf:df:61:26:b3:03:7e:77:19:70:73:2c:4a:
                    01:4e:e3:24:55:1c:c8:2a:91:05:0a:fa:ae:6f:60:
                    8e:fa:04:c6:3a:bc:0a:ad:4e:93:aa:6a:4c:ae:1a:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6E:A7:9C:4B:1C:7E:4F:3C:F9:92:27:FD:8B:8E:DA:D6:E2:9F:D7
            X509v3 Authority Key Identifier:
                keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2W6nnEscfk88-ZIn_YuO2tbin9c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.95.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b1:1d:26:a4:53:cb:f9:63:d1:18:a6:37:7b:15:26:7a:f5:
         77:c1:ad:9b:fa:25:b8:97:80:e0:0e:db:a1:ff:1c:58:3d:fc:
         43:6a:45:a1:77:15:57:f5:90:49:2b:0a:13:f9:c3:ba:51:07:
         c0:a0:4c:82:f3:fc:9f:9f:c1:aa:b5:c7:f4:5f:ba:c0:59:3e:
         56:0d:ed:e5:37:e2:a7:9c:27:5b:c6:6b:79:c7:ae:1a:42:b0:
         68:82:a3:80:fa:d0:e8:6b:60:90:67:26:93:5f:82:86:02:48:
         f6:26:f3:e6:6e:af:9c:57:d9:a0:b0:e2:74:71:25:4c:61:6c:
         b1:c6:a5:43:39:ac:d3:4e:e5:92:e3:45:c2:b5:d4:e6:b7:88:
         4d:92:b2:a8:d1:fd:76:24:97:38:fb:23:8c:33:9d:89:1b:44:
         7b:38:e2:ad:7f:dd:ee:fd:b2:82:0d:c1:02:76:66:57:7d:9a:
         12:31:85:7a:52:c8:7a:d9:76:eb:62:7b:d8:a6:18:68:2a:44:
         91:d6:98:6d:04:c1:d0:af:b7:0c:38:1d:9f:e0:a4:fc:1c:ea:
         6f:27:51:1d:e8:86:79:7b:14:2e:20:ff:4b:33:e4:18:0d:09:
         f2:85:78:7b:6e:82:c5:1e:d9:5e:e1:22:27:ee:35:9a:e2:69:
         27:12:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org