Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-sEFdHgI1ufc5mRNfT_OJC9OOVk.roa
File:                     -sEFdHgI1ufc5mRNfT_OJC9OOVk.roa (raw, json)
Hash identifier:          1JYrPeDrsYKRapXaBq9syMPhD1yyDagWMmNGw9d1B5E=
Subject key identifier:   FA:C1:05:74:78:08:D6:E7:DC:E6:64:4D:7D:3F:CE:24:2F:4E:39:59
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       177F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-sEFdHgI1ufc5mRNfT_OJC9OOVk.roa
Signing time:             Sun 07 Feb 2021 12:19:43 +0000
ROA not before:           Sun 07 Feb 2021 12:19:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.64.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6015 (0x177f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:19:43 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FAC105747808D6E7DCE6644D7D3FCE242F4E3959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:8a:ce:6f:ab:9e:c4:02:12:f8:59:ab:0c:
                    6f:bb:4b:79:9a:76:68:fc:78:41:fc:11:81:bd:3a:
                    99:15:a5:1e:c3:05:87:61:48:96:e6:d0:0c:16:b7:
                    31:08:c0:4e:a2:19:d2:42:3f:bf:c9:68:7c:8a:4c:
                    53:a2:96:09:10:c2:ab:2b:27:37:6e:d0:31:cb:b3:
                    ed:4c:78:36:71:d5:6c:06:e2:da:57:ef:04:45:4f:
                    c5:e0:6f:b5:3a:40:51:8f:16:3b:65:32:9a:b8:d9:
                    fb:3d:9d:67:ff:aa:e6:e6:ee:31:17:d2:9b:45:29:
                    35:6b:8b:56:49:64:c8:cc:e3:6b:4b:a4:77:d0:52:
                    11:c7:15:73:6c:d5:46:25:7c:d4:c1:2e:9f:74:e1:
                    5e:fa:8d:28:20:eb:99:3e:e7:1a:ac:6e:2d:c5:08:
                    a6:c4:57:be:e9:81:c1:10:bc:f1:92:d2:ad:c9:35:
                    25:9c:7f:9b:c9:8a:2f:39:12:c8:03:d0:90:40:4d:
                    e3:47:b3:9b:a3:bd:db:b5:d1:3e:e2:d3:8d:43:1b:
                    e3:e3:87:a7:9e:c3:73:1e:f7:2d:c5:16:fe:b5:e9:
                    e7:ed:da:1f:a5:8f:7f:97:12:98:98:ad:40:4e:5e:
                    85:2b:22:bb:30:d3:01:93:b8:44:ea:b2:f2:45:54:
                    b4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C1:05:74:78:08:D6:E7:DC:E6:64:4D:7D:3F:CE:24:2F:4E:39:59
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-sEFdHgI1ufc5mRNfT_OJC9OOVk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b9:8f:e3:ac:e2:3b:04:5d:30:e1:27:2a:b5:7a:62:2b:d2:94:
         e8:39:89:9c:16:86:39:1c:10:ef:bd:a7:31:76:28:e6:6b:a1:
         9d:3b:09:c0:3a:18:4a:e7:8f:01:e3:eb:10:a0:25:47:0f:3e:
         41:1f:53:a0:38:80:73:6f:97:58:a9:a4:30:20:c9:37:cf:1e:
         19:50:31:4a:41:8d:1d:ed:e5:48:67:6d:64:57:1f:9f:d6:91:
         06:fc:7b:69:1a:11:0d:53:f3:75:4a:83:ec:c1:16:c0:8a:ae:
         5c:62:b0:0c:36:41:a1:8c:a1:8a:f2:e2:13:db:54:8f:6e:dc:
         81:4c:63:21:48:8f:b0:88:95:29:f6:3c:a4:d4:4f:98:6d:4a:
         4b:89:58:59:01:de:84:84:d1:2c:53:40:1e:35:8d:35:75:fa:
         c8:55:ce:17:76:87:8a:7e:fc:8d:f0:d0:00:85:3a:77:83:a8:
         11:13:a5:de:37:06:f2:df:fa:18:df:e3:e6:52:25:67:11:ca:
         25:a4:63:51:ff:e8:9d:9b:e6:2d:c4:5c:e7:81:e0:c7:02:34:
         fd:86:cf:f7:67:c3:65:f1:74:41:33:c5:38:8e:70:30:82:1a:
         f3:c4:9b:c7:aa:b6:d8:88:ad:9e:aa:1b:a0:9a:be:46:d8:66:
         3c:32:e7:23
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE5NDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZBQzEwNTc0NzgwOEQ2
RTdEQ0U2NjQ0RDdEM0ZDRTI0MkY0RTM5NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9VYrOb6uexAIS+FmrDG+7S3madmj8eEH8EYG9OpkVpR7DBYdh
SJbm0AwWtzEIwE6iGdJCP7/JaHyKTFOilgkQwqsrJzdu0DHLs+1MeDZx1WwG4tpX
7wRFT8Xgb7U6QFGPFjtlMpq42fs9nWf/qubm7jEX0ptFKTVri1ZJZMjM42tLpHfQ
UhHHFXNs1UYlfNTBLp904V76jSgg65k+5xqsbi3FCKbEV77pgcEQvPGS0q3JNSWc
f5vJii85EsgD0JBATeNHs5ujvdu10T7i041DG+Pjh6eew3Me9y3FFv616eft2h+l
j3+XEpiYrUBOXoUrIrsw0wGTuETqsvJFVLR7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+sEFdHgI1ufc5mRNfT/OJC9OOVkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy1zRUZkSGdJMXVmYzVtUk5m
VF9PSkM5T09Way5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w0AwDQYJKoZIhvcNAQELBQADggEBALmP46ziOwRdMOEnKrV6YivSlOg5iZwWhjkc
EO+9pzF2KOZroZ07CcA6GErnjwHj6xCgJUcPPkEfU6A4gHNvl1ippDAgyTfPHhlQ
MUpBjR3t5UhnbWRXH5/WkQb8e2kaEQ1T83VKg+zBFsCKrlxisAw2QaGMoYry4hPb
VI9u3IFMYyFIj7CIlSn2PKTUT5htSkuJWFkB3oSE0SxTQB41jTV1+shVzhd2h4p+
/I3w0ACFOneDqBETpd43BvLf+hjf4+ZSJWcRyiWkY1H/6J2b5i3EXOeB4McCNP2G
z/dnw2XxdEEzxTiOcDCCGvPEm8eqttiIrZ6qG6CavkbYZjwy5yM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org