Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/TCd1EE7v49a2eikcFsNQT5H69cU.roa
File:                     TCd1EE7v49a2eikcFsNQT5H69cU.roa (raw, json)
Hash identifier:          QRtmhce+tMiOXJk1IE47JLi6+a+swy37v1yLic6mgIc=
Subject key identifier:   4C:27:75:10:4E:EF:E3:D6:B6:7A:29:1C:16:C3:50:4F:91:FA:F5:C5
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       07F6
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/TCd1EE7v49a2eikcFsNQT5H69cU.roa
Signing time:             Tue 29 Sep 2020 10:06:40 +0000
ROA not before:           Tue 29 Sep 2020 10:06:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18047
IP address blocks:        120.127.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep 29 10:06:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4C2775104EEFE3D6B67A291C16C3504F91FAF5C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:fc:39:d7:ec:bc:6b:96:ca:eb:71:3f:89:
                    17:a5:62:74:8c:9c:48:d8:86:9a:22:b4:34:86:32:
                    8f:4b:6c:10:88:77:d7:56:3f:73:2e:82:2b:cc:a9:
                    95:6a:41:ff:86:ac:b3:58:dd:30:2d:cc:49:19:c1:
                    f8:b6:4f:7d:42:9c:9f:37:43:9c:61:93:2c:cc:94:
                    eb:52:74:08:15:36:b6:99:03:09:be:08:b2:0a:c3:
                    2c:d4:9e:87:a7:c5:96:1a:a4:a0:fd:38:cc:5f:bd:
                    96:14:55:0c:f5:fe:41:53:73:52:8c:82:d0:9e:ba:
                    fd:b3:de:53:89:9b:34:50:91:95:1b:25:65:13:6e:
                    c4:95:78:f0:c2:bd:a4:f0:e7:e8:ca:bf:b3:7d:e2:
                    5d:6d:c0:cc:4d:76:5e:ae:66:9e:b7:8d:4b:d1:cb:
                    ff:8e:5d:5d:9d:4f:20:46:2d:fb:e1:b9:92:41:98:
                    57:ef:38:40:07:0e:b9:1c:0f:cd:c3:ec:41:a5:79:
                    48:35:6c:36:02:42:45:1b:93:57:0c:1d:86:0b:98:
                    a4:4f:b9:f9:4a:42:87:37:7c:b6:df:87:35:74:3d:
                    ac:69:e5:03:67:ed:fc:e8:49:3b:ff:e5:63:89:9f:
                    1e:18:f6:be:39:b0:bb:d2:14:91:ef:44:bb:09:23:
                    03:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:27:75:10:4E:EF:E3:D6:B6:7A:29:1C:16:C3:50:4F:91:FA:F5:C5
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/TCd1EE7v49a2eikcFsNQT5H69cU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.127.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:40:5a:1d:3b:e5:7f:c3:61:44:f4:9d:1d:00:dd:d3:cd:97:
         9a:4e:db:7f:ca:22:1e:9c:e6:c2:56:26:3e:11:2e:f2:e5:98:
         3b:d9:e9:54:8b:41:5d:e1:05:b9:5f:73:71:79:41:59:f7:38:
         bc:34:76:09:e9:eb:8c:bf:7b:de:f9:49:5c:a3:7f:67:c0:64:
         ac:0c:a9:b7:54:cd:b5:19:ee:00:c4:6c:ab:be:90:64:28:77:
         99:50:86:b9:c5:c8:a1:54:19:1d:34:18:ab:c9:d6:ce:6f:b3:
         1f:00:9a:fc:7a:86:20:12:ca:c0:97:2c:fd:bb:d5:1c:61:e5:
         fa:a7:f6:d9:d1:e4:b4:23:0e:db:e0:0a:f6:1f:75:4b:fb:00:
         cb:f2:ea:6d:a9:d4:4f:a0:38:17:d9:6c:50:04:77:67:13:e6:
         cb:5f:e1:47:f7:33:eb:40:b3:80:0c:3a:79:38:83:cc:5d:9a:
         4b:c1:1e:1b:e2:ef:6f:f9:51:ec:bb:e0:5b:31:ad:3e:fe:e6:
         b7:71:86:bf:10:96:ab:5d:17:f5:ca:07:53:0a:2d:dc:eb:77:
         21:2b:c5:fa:61:db:34:10:f3:97:ba:7f:05:07:fe:47:6c:ae:
         e5:9f:19:ca:d0:23:15:40:3f:90:17:ea:8e:44:ba:3d:57:29:
         25:3b:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org