Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6YzRPHu3dy2ZzkYUxdxxT0UEdVY.roa
File:                     6YzRPHu3dy2ZzkYUxdxxT0UEdVY.roa (raw, json)
Hash identifier:          hK1etILetTIMmg4ECL9GUYABatInGCpEuUjh9iRXSvE=
Subject key identifier:   E9:8C:D1:3C:7B:B7:77:2D:99:CE:46:14:C5:DC:71:4F:45:04:75:56
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D4D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6YzRPHu3dy2ZzkYUxdxxT0UEdVY.roa
Signing time:             Tue 29 Sep 2020 09:54:25 +0000
ROA not before:           Tue 29 Sep 2020 09:54:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        103.224.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3405 (0xd4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E98CD13C7BB7772D99CE4614C5DC714F45047556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:bd:6d:14:14:fe:df:40:a6:d4:18:b1:8c:
                    8b:5f:3b:65:db:30:1a:1e:21:9a:c4:80:f1:90:3f:
                    82:13:cc:e3:a3:7a:6b:75:11:98:65:c1:e3:c1:80:
                    65:04:b4:70:df:8a:ad:d9:20:d3:93:b3:35:dd:c7:
                    92:f1:b1:dd:fc:53:b7:65:1a:0e:04:b3:98:b5:98:
                    ff:92:5a:42:c3:d2:58:9d:fb:c8:17:3b:65:9e:6b:
                    b2:04:64:3f:65:ae:a3:0a:21:3d:3f:0f:d9:5c:97:
                    69:32:2b:76:c1:e7:b9:cc:19:af:99:59:3c:ab:b5:
                    c2:13:8c:37:7c:cd:1f:e6:b1:41:5c:19:b4:b7:bf:
                    be:30:f1:b4:35:1b:0e:8d:28:15:a6:1d:c9:67:e8:
                    e3:b6:af:db:0a:20:23:31:07:4f:21:0b:ef:ea:a9:
                    cc:dd:98:f7:04:b5:33:f3:f7:de:13:19:2c:52:f4:
                    07:f3:6f:bb:89:9b:cf:d4:2e:df:d8:57:78:a4:f7:
                    d3:00:b4:fa:6b:b1:96:0e:4c:ba:7d:2d:16:5c:3b:
                    d6:06:59:db:cc:22:51:76:dd:a0:75:90:a8:03:77:
                    29:91:7a:45:5b:94:e4:97:c5:0a:43:31:4e:b8:89:
                    dc:a2:48:f3:3d:d8:d9:a9:3a:c6:cd:08:70:cc:f9:
                    33:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8C:D1:3C:7B:B7:77:2D:99:CE:46:14:C5:DC:71:4F:45:04:75:56
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6YzRPHu3dy2ZzkYUxdxxT0UEdVY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:60:fd:a3:be:63:cd:c9:08:22:6e:a5:7c:48:10:d9:a0:2f:
         bf:69:2b:f5:e8:d7:f0:31:6a:65:f1:74:d1:55:7b:5b:42:12:
         40:6e:45:ca:a6:17:22:f4:e2:bd:0a:89:5a:f3:f5:53:75:7c:
         7c:cb:74:b3:c3:52:34:92:35:1e:d3:f1:85:62:61:a6:50:ef:
         c3:6d:d8:f9:f7:b3:9a:05:11:24:d2:1e:7a:12:f4:9e:98:c0:
         92:d0:5e:3f:fd:63:eb:84:01:51:5f:17:cf:c9:07:c4:b7:51:
         c0:08:0b:46:d6:ae:47:26:62:3a:57:1b:01:6c:a7:08:a4:bd:
         e9:88:d3:35:48:a2:0f:d6:fe:db:b4:fc:13:cb:85:9c:14:30:
         0e:16:a6:b6:ae:e7:49:71:20:5d:53:ca:88:12:f6:3e:e9:29:
         7e:31:ea:76:99:19:ce:cc:14:57:59:28:3c:ba:fe:4b:c2:d7:
         10:7b:c2:41:38:54:d6:f8:cb:8b:5d:dd:17:04:6b:40:ee:8d:
         8b:e4:d1:9c:7b:3b:e1:8a:00:b3:9a:23:cd:84:fd:5c:0d:3e:
         9b:95:2a:31:10:cd:bd:fc:f9:f8:5d:3e:a8:97:21:c9:90:e9:
         bb:60:6b:f3:55:25:a2:62:14:4a:12:bf:3b:0b:61:ea:ce:f4:
         fb:f8:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org