Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-b3Hoer5dB1RWFBIZ1AyUJYQf9g.roa
File:                     -b3Hoer5dB1RWFBIZ1AyUJYQf9g.roa (raw, json)
Hash identifier:          IKx3mYO13P/or9JclSU63MEXMxxQZlqlbzC5m95SMF8=
Subject key identifier:   F9:BD:C7:A1:EA:F9:74:1D:51:58:50:48:67:50:32:50:96:10:7F:D8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F76
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-b3Hoer5dB1RWFBIZ1AyUJYQf9g.roa
Signing time:             Tue 29 Sep 2020 09:56:59 +0000
ROA not before:           Tue 29 Sep 2020 09:56:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.237.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3958 (0xf76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F9BDC7A1EAF9741D515850486750325096107FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:e3:b1:38:61:e3:19:1b:c1:60:a1:d7:01:
                    26:92:c5:a6:56:e9:8a:af:d6:86:32:98:66:22:42:
                    84:0e:bf:69:5b:a1:df:07:9c:f0:a5:f8:04:74:5e:
                    e6:97:06:c1:cb:7d:e7:69:1e:ce:f2:7b:44:6a:40:
                    8d:58:c4:6e:84:19:e2:c6:9b:06:f2:fb:ea:18:e3:
                    3c:f8:ab:a9:a6:1b:55:8f:f9:9c:c6:a8:8b:96:36:
                    59:63:77:cb:6c:eb:87:56:ea:5f:fb:7d:d3:70:a5:
                    11:fd:e7:07:f6:1f:eb:8f:9a:75:92:3d:b5:43:56:
                    dc:46:87:3a:8f:1c:db:c9:a8:b2:c2:49:00:7c:33:
                    13:fc:26:07:5a:1b:b3:5d:15:fb:fb:e3:f4:2a:e4:
                    96:54:45:32:51:40:50:1b:d8:fb:f1:58:b2:f7:d7:
                    8d:ad:3c:bf:c1:1d:dd:00:74:db:be:93:43:44:b0:
                    a7:03:44:d8:e2:15:38:6e:bc:78:f6:e3:f1:13:3f:
                    92:f0:38:b6:d1:8c:ce:3b:ea:85:94:e4:94:16:9e:
                    1f:86:be:34:d1:ff:dc:7f:a8:eb:d5:cd:a0:2b:c4:
                    e5:a2:48:68:13:c2:42:1e:08:65:67:81:77:ea:9e:
                    a9:3e:42:2f:c0:6b:82:32:c4:ed:d3:ec:a9:cd:f8:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BD:C7:A1:EA:F9:74:1D:51:58:50:48:67:50:32:50:96:10:7F:D8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-b3Hoer5dB1RWFBIZ1AyUJYQf9g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.237.0/25

    Signature Algorithm: sha256WithRSAEncryption
         26:b4:29:32:66:5f:a1:c5:49:81:9c:4e:df:d8:9a:60:50:41:
         57:53:10:47:0f:fb:68:8e:7c:d3:63:fb:fa:e4:cc:b6:ef:28:
         6c:ea:35:29:d4:38:8d:cf:6b:23:da:61:8c:40:92:0b:df:01:
         00:ad:f3:cb:b3:18:3d:61:05:cf:25:37:65:c8:56:05:cb:3b:
         f3:5e:8d:24:d5:16:f5:d8:a9:b7:68:85:93:76:7e:1b:91:29:
         ad:6a:e9:21:b9:3b:4b:dc:55:cd:45:43:51:2e:f2:da:c1:64:
         e2:6a:99:90:90:05:0f:3c:9a:1a:59:6e:03:1b:c5:07:6d:e4:
         20:cc:f2:2d:08:a4:fd:c8:53:9c:af:67:59:28:4b:f9:dd:55:
         26:1b:07:2a:6f:60:54:a6:a9:75:6e:a2:10:fb:4b:8d:69:d8:
         4a:5c:14:05:68:d8:c6:56:ea:69:41:e4:1a:13:8c:ac:e8:10:
         f1:eb:2b:42:52:57:06:05:e3:8e:e2:2e:c5:e5:c1:cf:6d:06:
         b9:56:eb:08:e7:5f:c9:cd:4f:bf:27:d0:27:85:40:b7:2b:87:
         09:50:47:50:57:83:45:0f:bb:a5:7c:d8:60:fb:c6:b5:f4:5b:
         ba:bd:3b:5e:19:5d:2a:94:aa:31:4e:d1:fa:4a:25:4a:97:05:
         1d:f1:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org