Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/cMMOgyxM-85KXLLIcdAaKJ5RgSM.roa
File:                     cMMOgyxM-85KXLLIcdAaKJ5RgSM.roa (raw, json)
Hash identifier:          jkx9/911ma1bnU+iI46FWpRTZLVk0p2nM4vYQc/Dhv8=
Subject key identifier:   70:C3:0E:83:2C:4C:FB:CE:4A:5C:B2:C8:71:D0:1A:28:9E:51:81:23
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       09BC
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/cMMOgyxM-85KXLLIcdAaKJ5RgSM.roa
Signing time:             Sun 07 Feb 2021 12:38:36 +0000
ROA not before:           Sun 07 Feb 2021 12:38:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9916
IP address blocks:        120.126.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2492 (0x9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  7 12:38:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=70C30E832C4CFBCE4A5CB2C871D01A289E518123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:56:79:4b:c0:09:4e:27:5f:d9:6e:3b:e7:
                    50:71:70:3d:81:3f:3f:d4:1d:f3:a3:31:8c:21:35:
                    b1:00:f5:7a:76:10:5a:30:46:51:c2:af:da:aa:19:
                    46:5a:fa:35:a1:3e:dd:9d:8f:a1:a2:6d:54:a3:56:
                    ce:b7:6a:b9:52:7e:9c:85:b1:0e:30:98:b8:93:2c:
                    2e:a2:1f:07:98:f2:1b:e1:de:e1:9f:f5:bb:e1:c6:
                    1b:37:e0:b8:cc:d8:dc:44:b6:6d:52:62:a9:97:f9:
                    99:27:8a:a1:d2:95:99:71:da:b9:19:a3:5a:f5:86:
                    2b:b6:e5:eb:fc:1e:7c:10:48:64:e8:8b:95:3b:69:
                    b2:d6:c9:c2:ed:79:fa:7b:10:77:20:47:37:56:eb:
                    60:43:ca:df:7a:c8:83:69:e6:a5:ae:f8:75:c3:a0:
                    ad:1d:2d:a7:d2:02:ce:41:9d:13:f5:59:d6:43:65:
                    77:56:34:51:c8:9b:95:ca:e3:c7:73:ee:2e:da:aa:
                    ac:fe:a6:ec:b7:6a:1d:5b:d4:0f:2a:77:4f:89:31:
                    5a:4b:ab:ac:a5:90:fb:15:53:4d:d8:8c:1e:ed:49:
                    b8:83:65:db:db:23:58:28:21:ad:54:67:8e:51:43:
                    3a:a8:1b:b3:63:51:0d:35:69:c3:cb:4d:32:27:08:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C3:0E:83:2C:4C:FB:CE:4A:5C:B2:C8:71:D0:1A:28:9E:51:81:23
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/cMMOgyxM-85KXLLIcdAaKJ5RgSM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.126.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:c2:e0:1c:30:95:ea:b0:82:34:27:17:34:05:2d:ef:b3:92:
         ec:0f:c8:bb:9c:93:49:a6:aa:ee:1a:c7:4f:13:cf:ca:de:7e:
         f9:c8:25:35:f4:3c:7d:e7:f2:b1:cb:ff:f5:7f:9f:1f:7a:d3:
         13:ed:dc:65:8e:98:76:89:7f:ac:58:4e:19:2a:b3:34:c8:39:
         e3:14:83:4a:f4:79:a6:69:75:e2:99:f6:15:9f:47:02:93:d9:
         cd:04:9a:73:54:6c:ab:bc:7f:16:de:9b:12:44:f8:a6:b0:d4:
         07:dd:1e:83:54:e7:89:0d:5d:87:0c:49:5f:6e:42:87:8d:42:
         8e:1a:cf:b5:97:49:d7:59:c1:e9:58:86:47:28:7a:08:1d:81:
         45:04:d6:e3:fa:b6:e9:70:c5:67:9c:86:4d:fa:8f:ac:d1:8e:
         2b:e0:17:de:f8:77:83:d7:4d:90:cd:cf:39:9e:0c:0a:c6:fc:
         4a:50:de:87:f3:91:dd:a3:41:bc:17:ec:9e:f5:1a:43:a6:f1:
         3c:47:20:fe:99:4f:6f:d4:6e:c5:ab:c1:13:c5:98:d7:4d:9c:
         c4:fd:f9:7b:19:49:ec:af:22:22:e2:17:56:18:e1:dc:e8:3a:
         6b:46:cd:e9:dc:dc:df:07:c6:cd:01:a8:99:fa:ff:ad:8c:82:
         18:b0:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org