Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/e0kQ8Lr-5Cl92vCcvtPKJQU75tg.roa
File:                     e0kQ8Lr-5Cl92vCcvtPKJQU75tg.roa (raw, json)
Hash identifier:          7hnEsEibjvm3vSSxsvwT4k8GKmaip153xDVrfSOdFRg=
Subject key identifier:   7B:49:10:F0:BA:FE:E4:29:7D:DA:F0:9C:BE:D3:CA:25:05:3B:E6:D8
Certificate issuer:       /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial:       0791
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/e0kQ8Lr-5Cl92vCcvtPKJQU75tg.roa
Signing time:             Tue 29 Sep 2020 10:06:04 +0000
ROA not before:           Tue 29 Sep 2020 10:06:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        124.109.112.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
        Validity
            Not Before: Sep 29 10:06:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7B4910F0BAFEE4297DDAF09CBED3CA25053BE6D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:f1:8a:04:69:e5:51:7d:86:7e:79:22:c7:
                    eb:c0:bd:9d:90:28:22:03:4e:d3:3b:1d:45:a2:45:
                    f5:d9:fa:0c:0f:66:4e:fd:ea:29:27:05:f6:c0:af:
                    cf:9d:4b:a8:78:0b:1a:cb:b0:79:1f:c7:f6:86:b0:
                    07:01:3e:53:62:3b:b6:4d:d3:1f:4b:52:f4:f7:5c:
                    1d:79:aa:15:77:67:9a:fe:13:a3:fc:3d:19:76:04:
                    cb:de:7c:ed:21:e9:8d:a0:dc:c7:b3:30:d0:46:48:
                    75:de:12:cd:80:d0:4e:01:5c:c4:4e:e5:d0:20:bd:
                    11:68:74:b2:2b:00:a2:c4:ad:e9:38:61:36:82:e3:
                    cd:2f:83:e2:c0:aa:86:7c:97:9f:9e:f7:dd:3d:1f:
                    09:9e:ad:82:0e:d8:19:26:39:79:4d:c8:0a:d8:aa:
                    2f:c8:ab:49:35:2d:80:01:f6:53:01:5e:bf:f6:f9:
                    20:86:45:b4:bb:03:b3:bf:98:31:bd:51:bd:ca:fa:
                    15:12:7c:2a:cf:5c:cb:39:5a:55:a2:49:bd:ac:d8:
                    c8:75:71:5a:5e:88:86:52:08:7b:41:f8:12:73:b6:
                    d2:ff:94:bd:06:76:e0:9e:8d:28:84:a9:63:e6:77:
                    8e:ff:8d:87:ce:c0:f1:af:a3:bc:27:f3:16:09:ee:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:49:10:F0:BA:FE:E4:29:7D:DA:F0:9C:BE:D3:CA:25:05:3B:E6:D8
            X509v3 Authority Key Identifier:
                keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/e0kQ8Lr-5Cl92vCcvtPKJQU75tg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:65:ef:4d:ff:4a:a8:f5:58:12:72:04:0e:4c:27:5c:d9:
         f7:27:41:c8:ed:c5:d9:ce:75:43:61:58:53:33:fb:b8:35:09:
         ca:30:ab:7d:b9:02:4b:25:50:04:f3:e5:3c:5a:4a:89:bf:fd:
         52:79:43:a1:80:7b:3d:84:42:2d:1e:bc:94:6d:78:fa:49:0a:
         b8:8c:1b:84:5e:30:64:73:b5:ed:e0:02:7b:00:ad:b1:8c:ce:
         9b:e6:b2:69:8e:de:32:04:04:9e:89:2a:83:04:35:b8:29:40:
         12:29:47:5a:6b:d0:a3:e1:26:bb:27:e2:ef:0a:ed:1b:1b:4c:
         4c:4d:47:49:dd:a4:d4:d7:c3:cc:4b:11:a4:d6:b0:d8:08:5c:
         d1:74:7d:4f:9e:48:1f:3f:f0:30:30:86:56:f6:28:43:b2:e8:
         5c:5e:05:00:da:22:1c:9a:3d:dd:fe:dd:90:26:1b:13:47:a8:
         c5:c5:3a:d6:8b:5d:c5:0b:4f:a4:2a:3b:cb:6d:81:6e:6e:f6:
         1f:77:7a:d1:0e:e1:a2:09:09:c1:5d:f5:d2:36:9b:7d:9a:28:
         1c:1e:3f:05:cd:01:29:c4:71:22:1a:0e:1a:d4:04:06:23:c9:
         47:de:b6:65:43:95:48:0a:80:2d:fe:60:94:1a:62:6b:0f:a0:
         db:53:92:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org