Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/uMqe_-yJS8vetiJIGCnnQxrQK9M.roa
File:                     uMqe_-yJS8vetiJIGCnnQxrQK9M.roa (raw, json)
Hash identifier:          jEwJAwVqypgrjsiIZtglfyUN6EXkQqCn8bxec4g1QPQ=
Subject key identifier:   B8:CA:9E:FF:EC:89:4B:CB:DE:B6:22:48:18:29:E7:43:1A:D0:2B:D3
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0818
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uMqe_-yJS8vetiJIGCnnQxrQK9M.roa
Signing time:             Tue 29 Sep 2020 09:58:20 +0000
ROA not before:           Tue 29 Sep 2020 09:58:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     10126
IP address blocks:        114.30.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:20 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B8CA9EFFEC894BCBDEB622481829E7431AD02BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:6d:4a:c8:16:e3:f7:db:a4:95:3e:0e:dc:
                    c9:5f:8c:3a:45:aa:56:d4:da:cb:7d:f7:17:b0:7e:
                    92:1c:1d:1d:5e:82:f0:69:f2:87:bc:50:4d:66:6f:
                    38:a7:32:a0:3b:1f:55:bb:0e:1b:ef:11:13:42:72:
                    59:35:cc:81:26:10:20:1b:e7:a2:6f:c5:ff:bb:57:
                    32:51:47:7e:4c:1d:f6:8a:4c:df:06:a5:4b:ce:8d:
                    f6:f8:76:ff:8d:ef:a4:95:ed:91:16:17:5f:ef:fe:
                    5e:1e:dd:d8:59:45:59:e3:5a:60:26:53:c5:82:ce:
                    e4:97:e8:0d:86:8d:31:f7:07:11:d0:6a:54:57:7c:
                    92:14:2a:91:9f:33:95:a9:fb:1d:b3:c2:11:e8:44:
                    4c:ab:77:b0:0e:3b:c8:3c:01:4e:ef:64:b1:f9:09:
                    6d:de:f0:e6:8e:b4:54:e3:4b:09:e3:b6:17:39:2f:
                    b2:21:a3:18:48:99:cb:85:7f:17:f2:b8:59:88:fc:
                    f4:d6:16:1c:84:e0:30:d2:4a:aa:8b:22:2d:ae:93:
                    b7:23:67:3b:af:aa:6c:4a:b8:f1:73:d0:cc:cb:88:
                    1a:36:44:67:e0:18:d9:df:99:f5:fb:dc:93:4a:6f:
                    38:94:3a:2f:ab:f0:d7:37:8c:2f:53:a0:a2:b4:c2:
                    e3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CA:9E:FF:EC:89:4B:CB:DE:B6:22:48:18:29:E7:43:1A:D0:2B:D3
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/uMqe_-yJS8vetiJIGCnnQxrQK9M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:45:6a:2b:f4:65:c3:e1:37:7f:e3:46:e9:f6:ab:eb:ca:
         d4:96:1f:c0:1f:39:b7:be:d8:6c:8f:54:02:ec:57:7a:f8:5e:
         17:d0:ec:a4:39:b2:73:42:1a:a6:a1:b0:59:ce:b2:79:f1:c7:
         a5:dd:35:1f:8f:0e:da:5a:b6:d2:63:57:10:73:15:81:63:96:
         a7:60:16:56:e9:94:81:45:7c:9b:d1:a5:39:41:62:38:00:81:
         02:f0:15:f7:30:de:84:4d:2b:e3:06:5f:73:4e:7d:57:69:3b:
         56:f0:d7:d2:21:ac:5f:a6:84:bb:38:24:39:e3:a3:00:86:e1:
         7f:42:f5:d5:57:6c:02:87:e1:3e:dd:be:1a:73:45:de:04:c9:
         21:cf:be:51:16:ea:95:2f:c9:e5:75:39:3a:04:4a:ce:25:c0:
         4e:4f:59:9e:f2:b4:7c:69:7e:2f:bb:a0:03:e9:74:f5:05:7f:
         e6:5c:09:e0:ef:ca:fe:2b:e9:b8:d9:82:1b:63:11:d8:f2:4f:
         ae:b1:0a:cd:40:47:bf:6b:60:eb:55:c7:e9:61:7d:64:b6:77:
         1a:a1:bf:b3:83:a0:e4:1a:11:dd:78:8e:51:fd:2b:46:c0:fa:
         36:58:ad:7b:fe:40:e9:5f:83:8b:5f:24:5c:9f:9b:3b:06:a9:
         2c:79:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org