Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/f-EosEmhrTHG9igjiAcEtMY2UEA.roa
File:                     f-EosEmhrTHG9igjiAcEtMY2UEA.roa (raw, json)
Hash identifier:          iKhFtJK3j8jRgtLXc/bKRURj2ENMd7zGTNUD3ebD7wI=
Subject key identifier:   7F:E1:28:B0:49:A1:AD:31:C6:F6:28:23:88:07:04:B4:C6:36:50:40
Certificate issuer:       /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial:       0797
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/f-EosEmhrTHG9igjiAcEtMY2UEA.roa
Signing time:             Tue 29 Sep 2020 10:06:06 +0000
ROA not before:           Tue 29 Sep 2020 10:06:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18419
IP address blocks:        203.121.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1943 (0x797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
        Validity
            Not Before: Sep 29 10:06:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7FE128B049A1AD31C6F62823880704B4C6365040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:f7:69:76:4b:27:ed:f8:92:71:7f:ad:97:
                    20:cd:db:76:6a:12:b6:87:86:84:a7:f0:96:50:3d:
                    32:d9:d8:59:4e:ec:c2:6f:6e:ad:13:31:ae:aa:b7:
                    11:46:ae:8e:59:f5:ab:7c:1e:22:82:95:68:1a:c2:
                    cf:5d:58:87:7d:ee:d1:23:ee:5c:65:bd:5c:5f:25:
                    48:49:c4:fe:7b:6c:55:55:e3:4f:0e:91:21:11:5f:
                    52:c0:0f:45:ef:fb:f4:d0:71:d0:96:17:4b:f6:14:
                    e4:18:c0:b3:47:b4:87:96:19:d1:45:14:2f:aa:f5:
                    d3:69:86:d6:b1:a7:4c:97:f9:1a:3f:48:5f:7a:28:
                    4f:8e:00:2e:28:67:b9:1b:7e:dd:c5:26:ec:4b:8b:
                    d2:80:69:2d:68:69:66:78:ee:03:a9:bc:d4:64:11:
                    cd:ef:35:f7:4a:f7:84:91:da:70:8c:34:4b:34:f1:
                    d7:b3:8c:05:80:b8:2b:79:38:7f:da:ed:61:67:d3:
                    89:e2:0e:10:63:6b:6a:9d:61:a7:4c:ab:fc:cb:af:
                    2c:3f:72:79:b9:98:d5:24:8c:c1:ad:32:ee:84:06:
                    95:90:57:e5:0a:d4:a3:79:7e:94:28:9c:6e:3b:c5:
                    a6:ba:e8:98:77:31:1e:0b:d2:21:11:4b:6a:51:2b:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E1:28:B0:49:A1:AD:31:C6:F6:28:23:88:07:04:B4:C6:36:50:40
            X509v3 Authority Key Identifier:
                keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/f-EosEmhrTHG9igjiAcEtMY2UEA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.121.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:4c:4f:f3:ae:48:b1:33:88:cf:1b:4a:d9:01:3d:43:04:72:
         19:c1:9f:5b:2a:cc:17:b6:89:57:cf:0d:0f:08:81:ab:bf:fa:
         88:f7:13:57:1d:3f:48:13:8f:d2:b9:53:c6:00:fc:aa:e8:a0:
         fb:45:14:0b:ca:30:37:6d:ab:4a:35:02:a0:3e:3f:2f:5f:db:
         ff:0f:c4:06:4d:d8:09:11:aa:fa:91:6a:43:8d:c7:43:75:b3:
         e3:b0:1b:79:9e:ab:68:f5:2c:00:b5:d7:80:13:de:ef:21:33:
         a6:51:26:d3:11:a2:6a:62:bd:b5:ee:fd:67:c3:14:de:e7:86:
         c2:dc:80:67:41:83:aa:86:7d:bd:70:e2:00:a8:1e:33:c7:33:
         10:e3:49:80:87:3d:b1:9d:26:50:b7:1d:45:7c:48:7b:c4:32:
         db:6a:e5:30:0a:a3:80:df:30:d3:a2:e7:5d:9a:70:d0:41:cc:
         52:00:31:38:26:1e:7d:65:a9:53:cf:e8:3d:89:ee:37:0a:02:
         16:0c:a0:6c:6a:3d:83:23:12:47:e9:56:6a:18:1e:c5:37:bf:
         43:bf:20:41:bf:03:a8:f5:6e:de:a4:cf:20:86:d2:db:8e:8e:
         45:ca:de:61:bb:31:96:16:f4:30:8f:b4:ab:1d:16:33:af:5a:
         ed:b8:e1:8f
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yMDA5Mjkx
MDA2MDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdGRTEyOEIwNDlBMUFE
MzFDNkY2MjgyMzg4MDcwNEI0QzYzNjUwNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC1/dpdksn7fiScX+tlyDN23ZqEraHhoSn8JZQPTLZ2FlO7MJv
bq0TMa6qtxFGro5Z9at8HiKClWgaws9dWId97tEj7lxlvVxfJUhJxP57bFVV408O
kSERX1LAD0Xv+/TQcdCWF0v2FOQYwLNHtIeWGdFFFC+q9dNphtaxp0yX+Ro/SF96
KE+OAC4oZ7kbft3FJuxLi9KAaS1oaWZ47gOpvNRkEc3vNfdK94SR2nCMNEs08dez
jAWAuCt5OH/a7WFn04niDhBja2qdYadMq/zLryw/cnm5mNUkjMGtMu6EBpWQV+UK
1KN5fpQonG47xaa66Jh3MR4L0iERS2pRKyJRAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUf+EosEmhrTHG9igjiAcEtMY2UEAwHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+
q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv
Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS9mLUVvc0VtaHJUSEc5aWdqaUFj
RXRNWTJVRUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEy3nw
MA0GCSqGSIb3DQEBCwUAA4IBAQA0TE/zrkixM4jPG0rZAT1DBHIZwZ9bKswXtolX
zw0PCIGrv/qI9xNXHT9IE4/SuVPGAPyq6KD7RRQLyjA3batKNQKgPj8vX9v/D8QG
TdgJEar6kWpDjcdDdbPjsBt5nqto9SwAtdeAE97vITOmUSbTEaJqYr217v1nwxTe
54bC3IBnQYOqhn29cOIAqB4zxzMQ40mAhz2xnSZQtx1FfEh7xDLbauUwCqOA3zDT
ouddmnDQQcxSADE4Jh59ZalTz+g9ie43CgIWDKBsaj2DIxJH6VZqGB7FN79DvyBB
vwOo9W7epM8ghtLbjo5Fyt5huzGWFvQwj7SrHRYzr1rtuOGP
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org