Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-aYowF03KFrpcXnp0bAXuU6YGf4.roa
File:                     -aYowF03KFrpcXnp0bAXuU6YGf4.roa (raw, json)
Hash identifier:          GKTxYN86D9HT+UvHUgtgpzGiqsntaOmTpBWLtunJsVQ=
Subject key identifier:   F9:A6:28:C0:5D:37:28:5A:E9:71:79:E9:D1:B0:17:B9:4E:98:19:FE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1ACE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-aYowF03KFrpcXnp0bAXuU6YGf4.roa
Signing time:             Wed 29 Sep 2021 02:45:46 +0000
ROA not before:           Wed 29 Sep 2021 02:45:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6862 (0x1ace)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F9A628C05D37285AE97179E9D1B017B94E9819FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:60:24:b4:2a:9a:cd:6d:c8:76:33:c6:36:
                    b5:5c:52:df:80:15:f3:f3:41:d1:0f:a2:c5:d2:f1:
                    c8:57:49:6d:67:34:a0:73:f1:81:1b:a6:8f:9e:ce:
                    1e:78:47:66:f6:63:62:a7:35:4c:dd:cd:60:a3:ff:
                    63:63:32:6a:91:b4:e6:f4:09:b4:96:14:77:c2:31:
                    87:59:ae:3f:2d:08:d9:80:0d:9d:84:6a:eb:aa:1d:
                    cd:9a:f4:53:bc:04:22:63:59:a2:b0:7f:ac:91:6d:
                    41:88:52:57:d7:62:97:17:a9:30:0a:64:a0:e2:1b:
                    70:62:72:18:92:1a:8b:8f:a9:99:18:54:87:be:1e:
                    fd:3d:88:8d:f5:61:67:68:98:ac:53:fb:78:80:03:
                    3d:aa:0d:b2:77:24:f6:a7:15:c0:43:76:d7:b2:b0:
                    45:3d:a0:22:62:1d:00:cc:bc:c3:3c:8f:17:d5:c3:
                    3a:47:ec:aa:d6:fe:34:6a:cc:0a:87:2c:12:13:2a:
                    ec:e3:ae:fb:a0:d6:6d:7c:9f:c5:92:4c:6f:13:15:
                    3a:18:75:1d:de:84:0f:00:1a:53:b9:eb:15:9c:92:
                    d1:d1:6f:86:4c:bb:9f:2c:21:95:1b:a6:f3:45:48:
                    c1:5f:5c:41:ce:88:f5:46:e4:44:3e:ac:df:db:be:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:28:C0:5D:37:28:5A:E9:71:79:E9:D1:B0:17:B9:4E:98:19:FE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-aYowF03KFrpcXnp0bAXuU6YGf4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:6d:f6:b4:b0:5f:d3:c9:be:03:ef:93:ab:10:87:3d:46:54:
         f0:27:26:88:e3:2e:05:c8:99:73:c6:68:b0:60:2a:2e:71:b6:
         4f:b1:b0:44:3e:85:53:35:23:d6:0a:75:72:1b:e5:c9:07:9e:
         c4:74:8f:c4:e9:9f:37:f8:a3:da:10:e8:3b:a8:db:53:f4:b1:
         3d:fe:22:39:e7:d4:1b:1b:38:ee:22:b7:77:57:e3:fc:b4:38:
         a8:f3:4e:58:e0:45:a7:1a:2e:af:25:1d:df:7f:88:59:72:8e:
         02:33:8e:4e:fd:51:24:09:b0:db:65:d0:c8:cb:40:40:de:b5:
         9a:7f:0e:b1:77:bc:81:55:ce:96:93:89:3f:24:e8:ca:88:e2:
         3a:4f:6e:c3:02:12:a3:13:cb:57:0e:f1:2e:76:b1:b5:1b:05:
         0d:46:65:08:1b:b1:14:03:18:1e:70:72:ce:da:8b:b5:6a:0b:
         97:bc:dc:d6:2b:16:98:8e:39:31:a4:7e:de:19:e0:1c:ed:52:
         1c:1a:8d:86:eb:35:02:7e:13:5f:12:e7:02:b9:24:8f:79:42:
         25:8e:e1:1f:cd:e9:a1:c0:74:10:11:4b:da:fe:6d:8b:0b:61:
         f9:81:e0:de:e2:d6:77:6e:af:d7:59:7c:7c:07:37:fd:b6:09:
         12:fd:b9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org