Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/eISRO_Ac4YoXg7_1xpvNm31n5i0.roa
File:                     eISRO_Ac4YoXg7_1xpvNm31n5i0.roa (raw, json)
Hash identifier:          JiFIEwy8yKSV828V86Ug9Conv3UgzOWdvCJjEZiZzSM=
Subject key identifier:   78:84:91:3B:F0:1C:E1:8A:17:83:BF:F5:C6:9B:CD:9B:7D:67:E6:2D
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0790
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/eISRO_Ac4YoXg7_1xpvNm31n5i0.roa
Signing time:             Tue 29 Sep 2020 09:53:05 +0000
ROA not before:           Tue 29 Sep 2020 09:53:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     138145
IP address blocks:        2402:c340:cccc::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 29 09:53:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7884913BF01CE18A1783BFF5C69BCD9B7D67E62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:a5:c1:b0:f2:5d:07:17:a9:b4:0e:d7:d3:
                    28:18:d0:5e:d3:cf:57:9c:a9:db:c1:3b:c7:93:83:
                    1d:16:59:65:51:de:1a:6f:33:be:27:63:4a:d4:1c:
                    76:a6:37:70:45:bc:d9:00:f7:cd:b0:6f:3d:62:0d:
                    aa:32:09:d6:88:f7:f1:f4:5b:45:b6:45:08:fa:b1:
                    20:67:b9:58:3e:1f:04:86:4c:5a:b3:21:9f:f3:85:
                    f7:e1:76:42:9b:b1:02:61:e7:59:d0:bd:96:d3:fa:
                    39:db:f8:d0:f8:96:84:23:38:ff:75:29:bc:ec:8a:
                    16:9b:92:cc:14:11:fb:47:fa:09:1c:71:43:a9:ff:
                    2a:99:ea:62:b2:68:97:bd:f4:42:a9:75:c6:8f:22:
                    69:fc:1e:86:d9:99:ed:6f:04:51:bf:f7:98:46:4c:
                    9b:fa:a3:53:1e:6b:7e:2f:58:15:48:b6:a2:78:9a:
                    78:be:bd:b4:2f:5b:22:c0:cc:c2:1b:9d:82:f3:83:
                    c7:3a:51:50:ea:c7:5a:05:00:49:38:df:53:57:4a:
                    6b:78:11:69:95:38:ac:67:22:5c:77:9f:da:e5:ef:
                    19:fc:f9:97:de:f6:cb:cf:88:63:f5:ab:4e:49:92:
                    47:a0:01:d8:c0:53:a0:ba:a3:6c:0c:87:cd:63:5b:
                    ac:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:84:91:3B:F0:1C:E1:8A:17:83:BF:F5:C6:9B:CD:9B:7D:67:E6:2D
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/eISRO_Ac4YoXg7_1xpvNm31n5i0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340:cccc::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:26:9b:cb:d1:3b:64:df:0a:d4:7d:12:71:50:f0:29:e1:
         3e:c8:a6:c7:f1:8e:2b:64:14:38:46:42:f7:84:e1:95:75:9a:
         87:a0:fc:45:91:64:d0:ce:a1:80:16:20:fd:7a:9d:6c:7e:c1:
         27:7f:79:99:2f:cf:22:ad:b3:59:26:70:4a:e6:90:8b:7f:b0:
         70:91:0a:7d:47:10:8f:76:97:c3:d1:f4:6a:b5:a6:7c:c5:79:
         ac:49:71:03:85:f2:14:66:6c:f4:ba:9f:95:dc:64:16:d0:30:
         ad:6e:95:6b:bb:39:2b:a8:7b:19:84:28:6e:99:20:af:e3:ab:
         c0:8f:3a:ac:77:a2:e9:89:63:cf:a0:3a:b6:c7:e0:41:da:b3:
         cc:61:d1:a6:3f:40:8d:4a:33:35:ca:06:f8:90:6d:b7:a6:97:
         2b:ee:db:38:f9:e0:97:f5:ad:8b:ad:3a:ea:25:28:37:69:58:
         70:2c:7f:47:c9:89:e2:ab:c6:98:53:d5:00:db:33:ba:f5:55:
         38:cb:18:65:28:f9:d4:bf:ed:61:12:18:3e:f0:a3:2e:95:df:
         a4:77:7d:d4:0b:ce:88:cd:f6:93:5b:a0:61:5a:d7:57:14:57:
         b0:34:65:1c:25:2a:be:77:17:45:a4:c3:9c:a4:69:69:76:d0:
         fd:51:50:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org