Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/_6Bqk7GKP4FndM_zMpceytgdFOA.roa
File:                     _6Bqk7GKP4FndM_zMpceytgdFOA.roa (raw, json)
Hash identifier:          Eysj8o9ek6v12Ht2D/t6kY4VBL5htw+4DjFmNudZLQQ=
Subject key identifier:   FF:A0:6A:93:B1:8A:3F:81:67:74:CF:F3:32:97:1E:CA:D8:1D:14:E0
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       077E
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/_6Bqk7GKP4FndM_zMpceytgdFOA.roa
Signing time:             Tue 29 Sep 2020 09:59:55 +0000
ROA not before:           Tue 29 Sep 2020 09:59:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131596
IP address blocks:        61.58.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1918 (0x77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep 29 09:59:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FFA06A93B18A3F816774CFF332971ECAD81D14E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:62:cc:44:5f:1f:95:e6:5c:98:48:36:63:
                    1a:23:31:67:3a:22:e2:ea:c4:17:ff:18:a0:5e:66:
                    d3:7e:eb:5d:2f:1e:dd:ed:3d:38:7b:f8:d6:92:95:
                    87:16:0a:c8:32:26:4b:f4:c5:a8:18:ff:c0:6e:0b:
                    79:d3:41:fd:2d:39:3d:17:88:7f:8e:95:78:0e:11:
                    68:7d:ce:32:1b:36:78:be:36:ed:a7:46:b2:6c:b3:
                    01:f9:e0:05:e7:fb:f2:90:82:a5:2e:b4:ab:d6:1a:
                    ef:34:6b:0f:fa:55:74:b3:bd:ac:44:ca:96:5f:fc:
                    8a:e1:41:5e:dc:6c:3b:64:84:e7:09:97:ed:c4:4a:
                    42:85:06:4f:95:17:49:1d:8b:bf:5a:e6:09:1b:fb:
                    cf:31:81:ee:8e:ba:cd:3e:f9:2c:7b:1d:0b:8e:14:
                    23:30:c2:b6:fd:09:7f:86:7d:df:f3:35:7a:8e:cb:
                    cf:5a:a4:1f:16:d8:ff:8f:9b:b1:67:51:ef:d7:78:
                    ad:21:3b:df:1c:5b:91:99:cd:0b:80:07:ef:9a:43:
                    62:c1:24:a1:54:87:9a:ef:70:c8:78:c7:01:8c:ff:
                    99:b1:c0:95:41:9a:5d:e8:63:a6:07:1c:e3:2a:ed:
                    bc:cd:4e:b3:56:3c:b7:60:e0:e4:05:bc:47:8a:ee:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A0:6A:93:B1:8A:3F:81:67:74:CF:F3:32:97:1E:CA:D8:1D:14:E0
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/_6Bqk7GKP4FndM_zMpceytgdFOA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:96:f4:1d:be:86:c3:af:e7:53:ea:4d:63:fd:50:8e:0b:f7:
         de:4c:16:b6:b8:ab:16:f1:53:55:82:63:09:e3:23:23:2f:c4:
         3a:36:23:3c:d1:a0:08:fa:52:87:6a:7f:35:4c:25:5c:23:4d:
         2f:84:4b:53:ba:18:62:5a:8c:74:e3:86:46:6a:c0:3c:13:c9:
         b7:3c:41:22:3e:78:97:b7:0b:0f:ba:a8:32:a4:1c:67:5f:4b:
         a7:c1:56:b2:ca:78:8c:ae:f2:21:2e:fe:a5:3c:b8:ef:ff:f6:
         10:1e:fa:37:14:23:b4:60:38:cb:3d:f2:33:de:ea:91:dd:a2:
         1a:63:ae:20:a3:1f:b2:e4:6c:0d:e1:1c:44:47:a2:1a:ae:53:
         91:9f:c2:d2:5c:4b:63:1a:60:c7:aa:90:d6:8e:a4:57:da:2a:
         5c:83:e1:e8:d2:ab:10:a3:b5:58:b1:2b:d2:a9:60:38:69:a0:
         e5:85:af:e1:1f:f4:ac:5b:9c:c2:41:c5:ba:39:96:d6:1f:6a:
         d1:9d:aa:d2:3e:9a:f2:a7:da:1e:0a:76:54:50:80:b3:7f:ce:
         46:2b:1c:88:7b:e6:55:74:0c:ab:92:f1:9b:af:ca:27:e3:f1:
         c4:5e:7d:2b:5c:c0:48:b7:8e:33:e0:be:80:b0:53:36:fb:8f:
         94:ae:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org