Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/tBZ3y_TduGmiPYWs7SoIs2iaCgM.roa
File:                     tBZ3y_TduGmiPYWs7SoIs2iaCgM.roa (raw, json)
Hash identifier:          1kshnrWQbUlu9a1B9Ufv53MfQ/0jElEw13QLWSdq/qY=
Subject key identifier:   B4:16:77:CB:F4:DD:B8:69:A2:3D:85:AC:ED:2A:08:B3:68:9A:0A:03
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0777
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/tBZ3y_TduGmiPYWs7SoIs2iaCgM.roa
Signing time:             Tue 29 Sep 2020 10:00:15 +0000
ROA not before:           Tue 29 Sep 2020 10:00:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        180.92.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Sep 29 10:00:15 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B41677CBF4DDB869A23D85ACED2A08B3689A0A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:f6:7f:61:8d:e0:e0:13:8d:41:e9:81:05:
                    13:fe:e7:82:1c:0e:ee:bc:25:d2:d4:f6:94:4e:83:
                    25:42:8e:d5:f0:b9:f5:a1:ed:a7:06:30:8f:23:32:
                    e1:69:c9:df:6b:2b:fb:6d:0c:0b:4e:13:2e:ac:00:
                    90:50:a0:18:b4:0d:f0:78:0f:7a:6a:91:b7:73:42:
                    03:2c:bf:56:2d:76:47:5f:80:d1:b5:dc:8d:6f:11:
                    20:46:6e:b3:8c:62:c4:89:0b:72:47:b4:1c:3b:e0:
                    4a:f7:7c:42:02:1f:9b:09:a6:9d:2a:79:6b:35:e9:
                    54:1a:19:96:3b:62:c2:49:fa:82:6e:2f:92:70:da:
                    de:6a:a5:ce:1d:f2:f6:32:fd:73:c8:42:e3:4d:4f:
                    d3:14:09:36:7b:70:0a:72:c1:6e:60:b2:63:be:a8:
                    5d:38:25:4f:63:11:5a:20:5e:5c:dc:68:59:3c:c6:
                    52:1b:c4:8f:63:b8:8c:b2:18:ec:bf:53:9c:bb:a7:
                    59:e8:70:fd:84:9a:19:3f:b8:e7:99:94:d0:2d:ad:
                    a6:75:1b:95:9b:05:27:1a:54:2e:9c:b2:5b:4f:65:
                    7d:51:6e:9f:69:7d:06:17:fc:80:9c:e2:60:22:a7:
                    ea:17:4d:fd:42:93:52:e5:1a:da:d6:82:10:75:93:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:16:77:CB:F4:DD:B8:69:A2:3D:85:AC:ED:2A:08:B3:68:9A:0A:03
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/tBZ3y_TduGmiPYWs7SoIs2iaCgM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.92.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:b2:65:4b:17:00:5b:8a:cd:ad:f7:29:2f:fc:08:46:2a:4c:
         10:d7:8b:d7:d4:76:5b:bd:06:14:d3:4f:ed:91:10:09:e7:11:
         e0:75:6f:ec:0c:94:99:f4:82:0c:2a:f1:6e:bd:f4:ab:98:02:
         da:bb:37:0b:23:9c:0e:75:a7:c7:e4:1c:bc:01:33:dd:04:8a:
         8c:37:29:86:60:16:da:91:10:af:66:c2:1b:1d:a4:e1:6d:8f:
         9b:bc:ad:32:2c:21:e9:78:5c:58:27:b7:81:06:f2:9c:ae:85:
         68:fa:c7:42:ef:ec:41:9f:c0:65:9a:b0:cc:a7:85:1d:5a:5d:
         cf:38:95:6a:d4:ef:f0:2b:7c:98:12:47:ae:1d:c6:ec:8c:c3:
         65:0b:05:74:6d:91:d3:18:1b:8e:ce:ee:75:e6:fc:70:02:f0:
         2a:bf:07:fd:8b:77:ea:e8:14:31:6e:c0:aa:c7:69:e8:ba:39:
         1c:19:1c:59:67:48:30:fe:fa:12:d4:6b:af:15:78:71:de:2c:
         24:2b:f7:31:9c:a1:50:95:3c:ce:6e:91:c5:21:2f:d2:7a:8c:
         1b:5c:53:8b:cd:54:c8:d6:84:90:3f:05:4b:c2:ba:25:23:e6:
         33:4b:8f:53:f2:e8:14:5f:dd:c3:86:b3:de:75:c4:71:2d:4e:
         26:7d:8d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org