Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4egwd9v1IhArHAv15pgwMfAzZrs.roa
File:                     4egwd9v1IhArHAv15pgwMfAzZrs.roa (raw, json)
Hash identifier:          eKlDYMPNc+FhG+2Wa2VYje6Q9jT5nHzZS8Y0nP5BHQQ=
Subject key identifier:   E1:E8:30:77:DB:F5:22:10:2B:1C:0B:F5:E6:98:30:31:F0:33:66:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BE8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4egwd9v1IhArHAv15pgwMfAzZrs.roa
Signing time:             Wed 29 Sep 2021 02:47:09 +0000
ROA not before:           Wed 29 Sep 2021 02:47:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7144 (0x1be8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:09 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E1E83077DBF522102B1C0BF5E6983031F03366BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:19:25:0a:e8:fa:60:e0:72:77:64:ca:90:
                    e0:5d:f1:db:20:94:4f:e0:11:4b:b6:c1:2f:6a:0e:
                    07:9b:cf:2c:95:da:05:d3:a0:10:e3:b1:c4:43:0c:
                    5f:ca:8e:fd:b4:61:4a:c1:74:7d:a1:5c:ca:11:e1:
                    3c:d3:f0:e3:49:ad:84:cb:31:83:97:cc:57:62:97:
                    8b:8f:e9:ac:25:77:68:36:4b:54:67:cd:67:31:68:
                    a6:a4:28:2e:b0:25:f9:f2:92:f8:22:19:68:2d:c3:
                    b4:cc:cd:1f:30:aa:ae:23:c4:de:99:90:f9:df:99:
                    d9:0c:6c:f1:2f:49:4c:92:20:d1:87:9a:43:6d:77:
                    32:1e:38:aa:14:35:29:9e:dc:13:bf:9c:41:77:c1:
                    0a:ab:10:5e:07:99:2e:c1:8c:dd:02:8a:20:09:56:
                    22:f2:e8:70:55:38:f3:ae:93:f3:f9:6b:09:18:c1:
                    40:6e:9c:34:ab:9c:28:a4:ad:03:86:f5:17:f6:0d:
                    34:54:a5:5a:5d:99:2a:30:ae:38:51:9a:9c:97:1f:
                    b0:11:e0:53:61:32:fb:45:98:3d:c4:f0:b0:1c:e3:
                    3e:3b:22:56:9e:4b:67:09:9f:2d:28:a7:74:18:85:
                    9c:c6:11:80:05:cd:cc:fa:20:fb:0f:3a:e0:97:da:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E8:30:77:DB:F5:22:10:2B:1C:0B:F5:E6:98:30:31:F0:33:66:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4egwd9v1IhArHAv15pgwMfAzZrs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:8a:bf:98:08:bb:2e:4c:54:07:37:36:81:3b:bc:b0:82:a6:
         5c:c0:90:fe:cf:fd:b3:bc:f0:db:49:ba:20:98:f4:d4:f8:e7:
         7c:cd:63:0e:9a:43:3d:35:7e:88:34:d5:7b:16:a4:a7:9d:d4:
         89:cf:c8:ea:f7:9a:9e:c8:6d:3b:d4:af:9a:ca:cc:9d:97:58:
         62:97:33:a0:9b:22:97:62:36:39:f9:ea:d5:19:24:95:20:18:
         a6:28:86:3e:3f:e7:4d:24:9c:73:5e:9d:a2:5f:cb:3f:e3:39:
         ff:87:65:71:f7:7f:4a:89:91:ee:a5:93:ff:84:dd:ac:06:b5:
         d2:80:1f:1c:08:01:f0:b8:cd:ce:a6:ca:d5:07:76:e7:bc:f3:
         11:b2:f5:e7:ed:61:81:37:65:e2:e6:89:d6:a4:45:d2:d0:18:
         31:3f:69:b2:73:86:d0:cd:7b:9d:bc:3e:35:9d:9d:5f:de:a0:
         85:7a:11:66:26:4c:5e:1f:e5:61:5a:e1:8d:7a:be:18:dd:e9:
         23:9e:5b:40:66:9d:e0:b0:89:8f:27:a2:de:77:b1:d0:45:75:
         0f:c0:59:57:56:6c:3c:bf:00:c7:ef:19:08:e6:3a:49:35:88:
         4a:94:6e:a8:d2:a3:7e:dc:51:dc:57:f0:ba:5f:fe:4e:22:a4:
         83:67:0d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org