Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/EsfluiUVxmilBJAwjVsJeuNU7BM.roa
File:                     EsfluiUVxmilBJAwjVsJeuNU7BM.roa (raw, json)
Hash identifier:          c4FRiXHXPShNNHJwwpRx0AY9fwY932nQjqJ46xAICn4=
Subject key identifier:   12:C7:E5:BA:25:15:C6:68:A5:04:90:30:8D:5B:09:7A:E3:54:EC:13
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EsfluiUVxmilBJAwjVsJeuNU7BM.roa
Signing time:             Thu 15 Sep 2022 02:48:03 +0000
ROA not before:           Thu 15 Sep 2022 02:48:03 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     54994
IP address blocks:        61.221.181.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 15 02:48:03 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=12C7E5BA2515C668A50490308D5B097AE354EC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:e2:77:69:f5:17:e0:62:64:7b:36:7d:bc:
                    04:32:88:f3:a6:3a:99:a5:a1:aa:81:55:68:dc:38:
                    a7:29:cc:53:a0:bd:c8:d2:12:66:b1:cb:a1:2b:d5:
                    9c:51:c9:4d:c6:34:33:39:15:f5:c5:05:7c:9a:15:
                    7b:fe:27:ae:09:c7:7b:c5:4a:3c:ba:cb:1d:bd:2e:
                    12:1b:85:3c:f4:64:4d:25:a6:4c:79:9f:17:5b:df:
                    38:c2:da:3c:4e:4f:d0:7f:c1:20:29:23:64:38:e6:
                    90:b0:e0:19:21:11:c8:eb:e3:57:01:2a:99:6c:ca:
                    29:b4:a9:e0:bd:90:1b:03:10:0b:99:bf:3a:96:ff:
                    60:0a:38:d1:52:80:a0:02:c7:6e:6a:e3:31:60:bf:
                    d5:65:5b:63:38:83:e2:45:8d:60:3e:ca:f1:39:a1:
                    29:f2:9f:2d:03:94:78:6d:47:6f:76:6a:ec:13:5d:
                    1b:96:e0:4d:b6:b4:ff:52:b1:55:5a:18:24:de:ac:
                    5a:fc:af:cb:fe:01:b3:17:06:25:b1:bf:a4:ac:86:
                    cb:49:c9:00:01:fc:a2:0f:a0:69:a7:bf:51:42:4c:
                    0c:eb:c0:4f:26:93:15:cc:46:48:07:8d:69:58:dc:
                    5c:69:9d:00:e3:cf:97:98:3b:f3:e2:e2:3a:58:2e:
                    45:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C7:E5:BA:25:15:C6:68:A5:04:90:30:8D:5B:09:7A:E3:54:EC:13
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EsfluiUVxmilBJAwjVsJeuNU7BM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.221.181.128/25

    Signature Algorithm: sha256WithRSAEncryption
         7e:15:c1:54:9f:f4:9b:6f:6e:58:30:05:ad:c3:74:ec:dd:b1:
         08:29:5c:eb:12:a9:6c:67:99:5f:5e:bb:9d:5d:17:5e:ea:f8:
         45:31:91:87:12:44:64:57:1f:99:cd:da:19:fe:70:fa:03:81:
         62:9d:c5:3d:11:97:94:01:5b:e8:a7:78:92:38:a8:a0:6e:61:
         e3:66:87:34:40:23:b2:6e:27:84:81:22:c7:0a:91:28:73:e5:
         04:40:1e:c2:07:69:20:01:7b:f8:6e:05:f1:a4:57:57:2c:1a:
         14:81:b8:c4:6d:63:01:25:76:87:65:da:f6:75:34:6e:7e:00:
         9d:31:43:f2:04:81:94:7a:19:cb:f1:9f:12:4d:16:1a:91:59:
         c5:62:f3:d8:77:04:7a:cd:13:8c:11:6f:6f:b8:6a:66:c6:74:
         ec:1b:08:67:f6:e2:63:a8:e5:e6:12:7d:a5:31:fc:d5:ea:fe:
         32:1f:42:46:1d:13:63:24:33:c4:b0:c7:b0:99:c9:07:44:b3:
         62:29:e9:b0:80:37:19:4b:d2:20:f4:b2:e8:40:68:4f:cd:25:
         07:6f:4a:4e:42:fe:95:01:9f:0e:ee:47:6c:68:21:6b:77:86:
         2b:a4:b0:31:aa:1c:f7:25:bd:33:4f:9b:6f:67:0e:1a:6b:62:
         69:56:e9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:37 2024 by rpki-client on console-fra.rpki-client.org