Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/546cat7GSuxqZWFOmBnewE8f0sE.roa
File:                     546cat7GSuxqZWFOmBnewE8f0sE.roa (raw, json)
Hash identifier:          ibcJAnlX6ZETR4kFuUH7890pg4UniKiXQk5Vemmnk5U=
Subject key identifier:   E7:8E:9C:6A:DE:C6:4A:EC:6A:65:61:4E:98:19:DE:C0:4F:1F:D2:C1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D84
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/546cat7GSuxqZWFOmBnewE8f0sE.roa
Signing time:             Tue 29 Sep 2020 09:54:39 +0000
ROA not before:           Tue 29 Sep 2020 09:54:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3460 (0xd84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E78E9C6ADEC64AEC6A65614E9819DEC04F1FD2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:39:dd:6f:c5:5f:a4:d7:fe:77:3a:78:2b:
                    b7:3c:06:69:bd:bb:94:38:36:59:94:44:9d:1a:3f:
                    3b:9d:45:bb:ca:ff:ed:80:40:1d:e2:19:ac:ca:65:
                    10:3d:11:57:35:70:7a:59:2f:ef:a9:60:3e:f2:64:
                    a5:19:61:08:42:17:f9:c9:55:79:89:de:84:04:eb:
                    7b:c3:74:9a:70:b2:38:84:a8:9f:27:7a:15:b3:e3:
                    37:71:1c:22:75:65:5c:63:bc:44:99:29:0b:59:bb:
                    85:77:e9:6e:63:74:ee:dd:2c:d3:83:4d:b2:66:31:
                    53:cc:48:89:e0:ad:35:ea:b3:df:b9:74:a2:f9:9f:
                    70:06:b4:49:58:de:31:03:3f:bd:08:58:d6:ea:36:
                    7a:12:ee:48:d6:49:4b:63:9f:0e:d0:b5:60:7a:d7:
                    3b:a8:d6:ea:71:02:15:f9:4b:28:37:65:e2:67:86:
                    b2:e5:51:fc:7e:bb:33:0e:30:ff:32:f3:fc:59:90:
                    4b:86:93:fa:21:f6:aa:de:9b:66:5a:ed:a3:4c:3a:
                    8e:da:61:c8:eb:3a:68:21:90:e0:c8:5a:90:11:de:
                    94:58:29:6c:8e:0c:e6:bc:45:a8:ac:9e:bf:f9:90:
                    ca:3e:38:ce:31:f0:25:f5:16:d3:02:7d:59:72:ab:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8E:9C:6A:DE:C6:4A:EC:6A:65:61:4E:98:19:DE:C0:4F:1F:D2:C1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/546cat7GSuxqZWFOmBnewE8f0sE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:e9:ac:0a:eb:09:ac:6b:21:72:a5:ef:aa:c7:93:a0:d6:
         20:2d:b4:f4:5c:9d:69:c4:d5:5c:1e:10:38:72:1c:01:4a:d6:
         2a:d0:b3:48:a0:1a:e7:80:e3:72:06:98:8c:45:1c:78:aa:bf:
         78:40:c6:a3:23:62:11:56:28:e8:43:38:6e:14:87:2f:af:7d:
         58:78:ce:32:95:5e:19:b8:cc:8d:5b:3e:c4:d7:a5:f9:03:3b:
         47:e0:d6:1b:bd:31:2c:94:4a:7d:d5:86:b1:dc:af:1a:38:fd:
         08:9e:02:9c:72:11:d0:40:59:bd:4d:13:01:13:91:04:1e:14:
         fa:d4:0e:e1:c6:0f:ae:6a:2a:d0:20:02:9d:f7:7b:78:95:7c:
         90:8a:9d:31:e2:fc:b3:c4:de:24:ac:52:df:c7:53:3f:5d:40:
         d3:99:fb:ff:a3:85:ad:46:2d:47:4a:9c:17:8e:2b:d9:5f:b2:
         b4:e6:c9:c1:09:67:b2:a6:ad:67:89:4a:b9:74:e0:83:21:b8:
         c3:8f:cc:b8:de:52:85:c9:ed:14:8f:cd:12:21:4c:ea:5b:4e:
         43:4f:5e:6e:4d:b4:e3:db:23:77:2d:56:dc:ae:8a:72:c2:98:
         00:83:62:bc:20:8b:15:02:59:bd:79:2f:f3:93:50:81:0a:1c:
         b5:4d:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org