Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/HWTuhjSso8_dFb0s-Qd1nlGuVtA.roa
File:                     HWTuhjSso8_dFb0s-Qd1nlGuVtA.roa (raw, json)
Hash identifier:          uFOCmebOKRfj8WQHztk9eFVwQ7G1o3T2/qH4vl+G/ZM=
Subject key identifier:   1D:64:EE:86:34:AC:A3:CF:DD:15:BD:2C:F9:07:75:9E:51:AE:56:D0
Certificate issuer:       /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial:       0777
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/HWTuhjSso8_dFb0s-Qd1nlGuVtA.roa
Signing time:             Tue 29 Sep 2020 09:59:01 +0000
ROA not before:           Tue 29 Sep 2020 09:59:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24167
IP address blocks:        2400:4500:0:1::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
        Validity
            Not Before: Sep 29 09:59:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1D64EE8634ACA3CFDD15BD2CF907759E51AE56D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:cf:62:53:8f:8a:4d:f4:b0:72:e3:eb:6b:
                    6e:a2:74:8b:21:e6:b1:e1:95:bc:71:13:5f:78:c8:
                    bc:62:ff:17:1c:7b:20:5c:ae:20:54:5a:40:02:ae:
                    73:f1:16:ea:a3:0f:de:0d:5f:e5:74:8c:a1:95:23:
                    0e:13:12:ad:fa:ae:01:48:af:3c:34:28:9e:c9:82:
                    6d:6d:55:ca:70:d4:e6:b0:37:dd:3b:b8:0c:62:9e:
                    f2:4d:69:28:d1:db:0f:d5:ab:35:86:58:f3:f9:84:
                    f4:dc:d6:4a:64:41:f2:ab:91:d7:18:81:7e:5a:ca:
                    2f:6e:c0:62:6a:b5:64:d8:06:ae:bf:17:c5:be:40:
                    48:2e:64:f9:93:31:83:55:29:95:de:fc:67:d8:76:
                    0e:e2:79:8c:d3:e2:66:20:61:9a:49:01:56:db:35:
                    b4:e4:dc:ac:9f:b5:bf:89:83:41:81:f1:95:8f:e5:
                    9b:a0:dc:f8:82:a5:a4:76:7e:3f:26:fc:0d:f0:a2:
                    37:b7:e6:fa:5b:9f:92:bd:2c:14:ec:43:de:b9:47:
                    28:61:55:97:a9:34:bf:4b:54:b7:11:2b:44:4d:af:
                    4e:cd:a8:58:85:a7:87:33:07:92:1d:c7:06:d3:c3:
                    61:78:d4:7d:59:4c:3b:96:dd:95:b1:2e:a1:19:cc:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:64:EE:86:34:AC:A3:CF:DD:15:BD:2C:F9:07:75:9E:51:AE:56:D0
            X509v3 Authority Key Identifier:
                keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/HWTuhjSso8_dFb0s-Qd1nlGuVtA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4500:0:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         3a:12:bc:64:79:e5:48:e2:f3:4a:89:5e:87:43:5f:3c:fc:f3:
         80:5f:76:f9:66:57:eb:5e:20:00:6d:3b:98:38:64:9d:5c:b2:
         88:39:08:78:5e:2d:d8:69:f8:b2:59:bb:52:a7:3c:df:4f:87:
         23:af:40:1b:24:54:38:42:8c:a8:49:ed:ce:d5:99:0e:8b:24:
         02:42:cb:28:d6:93:d4:ff:a2:2b:97:de:3c:19:59:d9:52:2c:
         64:65:69:33:c6:47:da:d9:28:69:5d:03:c1:a8:3a:79:37:2f:
         27:57:74:18:42:9e:2f:59:b1:9b:88:2d:1c:1a:ac:a4:e1:be:
         7f:90:ed:15:d5:04:f5:7b:ff:e1:c6:c7:2b:5b:7e:00:7c:66:
         1a:dd:13:e1:6a:86:dc:09:5b:71:42:6d:d8:73:a3:3a:3e:6b:
         b4:76:b0:88:6c:84:47:10:e7:43:2d:d7:28:bb:45:d2:b5:f4:
         0e:0c:e9:67:9f:de:62:b8:f2:8d:71:f0:83:48:58:69:30:ba:
         02:28:78:42:f0:9b:80:cd:f1:aa:f2:46:82:d0:d8:9f:a1:66:
         f8:c9:18:23:43:b1:86:fa:7a:1b:ee:f6:92:e8:12:d7:d7:f6:
         71:a8:f5:62:94:17:29:c0:ae:65:d3:93:bb:c4:28:73:29:49:
         5a:50:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org