Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6-vBtAhXQFK6JLWPlDD76c1KShc.roa
File:                     6-vBtAhXQFK6JLWPlDD76c1KShc.roa (raw, json)
Hash identifier:          FX9aXajzcV7uut8FKlYPMx538nt9mx1q1NaXOqXeXcc=
Subject key identifier:   EB:EB:C1:B4:08:57:40:52:BA:24:B5:8F:94:30:FB:E9:CD:4A:4A:17
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F0F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6-vBtAhXQFK6JLWPlDD76c1KShc.roa
Signing time:             Tue 29 Sep 2020 09:56:27 +0000
ROA not before:           Tue 29 Sep 2020 09:56:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3855 (0xf0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EBEBC1B408574052BA24B58F9430FBE9CD4A4A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:e3:39:09:8b:c0:bd:a6:40:0a:69:91:00:
                    65:f5:89:ed:cf:84:e4:ef:27:b4:79:aa:b7:c3:fe:
                    e1:b2:6b:6c:a1:6a:51:82:d7:3a:f8:c7:78:f2:66:
                    0c:89:3c:bb:fc:14:2a:e4:d6:62:a7:d1:f7:4b:f7:
                    10:b1:e7:f2:d0:4e:da:2b:ff:17:5a:b2:6b:da:57:
                    bc:71:f8:cb:17:6d:a6:63:b2:fc:af:e7:af:1a:f8:
                    6a:00:6c:b3:ec:e5:f5:83:5f:0f:9f:f6:40:58:73:
                    2d:73:c7:d1:78:48:eb:aa:8b:ca:4b:b6:a7:3d:dd:
                    a8:3b:e3:9b:ed:7c:dc:38:77:b8:96:72:2b:91:36:
                    94:8f:99:15:4f:e1:f6:1f:5a:ce:85:28:05:fd:10:
                    53:ec:f1:bf:04:46:6e:4a:2c:13:3b:78:42:10:61:
                    51:e5:9a:e8:ec:e7:58:d6:86:b8:3d:67:64:bb:fd:
                    05:5c:87:34:b2:33:c0:5d:cc:76:da:87:f8:4e:96:
                    cc:58:5c:16:c8:9b:71:af:64:f2:77:15:ce:74:2f:
                    05:81:a3:8a:d9:76:48:cd:f5:ad:31:8a:08:e5:81:
                    00:42:59:bc:28:6a:fa:06:6e:89:b5:c7:21:e3:98:
                    1d:37:64:22:54:8d:ad:a8:37:13:cf:b9:59:14:5d:
                    51:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:C1:B4:08:57:40:52:BA:24:B5:8F:94:30:FB:E9:CD:4A:4A:17
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6-vBtAhXQFK6JLWPlDD76c1KShc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:34:c3:ab:79:7e:c4:3e:bc:66:b7:1b:71:db:a6:7f:5a:a5:
         7a:ae:c9:b0:86:dc:42:1d:ab:80:78:28:8f:ec:e7:ef:3a:61:
         20:48:33:91:a2:fd:b8:b0:09:38:99:ac:07:6a:3c:78:2d:c1:
         2b:2b:01:18:5a:a5:25:a3:1f:99:74:f3:7c:ab:1b:7c:d3:3e:
         e7:85:4d:d5:16:02:98:c7:d7:a9:05:37:5c:c7:72:5b:3a:21:
         7b:ac:1f:7f:97:75:42:d8:d6:5f:40:33:66:b5:ba:87:dd:4a:
         d4:a9:32:a2:6d:0c:f3:2c:5d:97:d3:94:c8:b1:50:88:a7:e3:
         15:cf:f5:7b:d5:64:9b:49:f5:c6:ec:7b:7a:09:3f:56:6f:ca:
         db:a4:68:72:32:77:b8:a0:e8:67:1f:40:93:45:7a:83:32:d3:
         00:6d:2d:86:0d:06:48:58:8d:89:23:f9:60:37:af:71:95:1d:
         ca:24:74:f4:aa:23:23:ea:51:8a:e2:fa:1a:26:65:18:7f:4c:
         a0:56:47:57:ba:24:65:c2:42:79:b0:9d:a8:e7:87:1e:2b:e0:
         17:03:8e:97:47:fe:0f:e3:4c:6d:71:6c:ec:61:97:d4:78:5b:
         3e:54:3f:3d:9f:02:03:17:57:6a:c6:a6:20:33:89:d9:cf:56:
         64:13:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org