Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/78u_B__U2YzceiyTSIxYoVMJPVE.roa
File:                     78u_B__U2YzceiyTSIxYoVMJPVE.roa (raw, json)
Hash identifier:          Bp5NRT7WfmfzpgAlicrFR75uDkwnewkwrp0xRrb8p88=
Subject key identifier:   EF:CB:BF:07:FF:D4:D9:8C:DC:7A:2C:93:48:8C:58:A1:53:09:3D:51
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/78u_B__U2YzceiyTSIxYoVMJPVE.roa
Signing time:             Fri 25 Nov 2022 04:39:06 +0000
ROA not before:           Fri 25 Nov 2022 04:39:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.194.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8393 (0x20c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EFCBBF07FFD4D98CDC7A2C93488C58A153093D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:51:a8:fc:e0:fe:b5:99:76:12:d5:11:71:49:
                    a5:b6:1a:f2:c0:60:55:6c:20:95:77:60:03:51:84:
                    f6:df:a8:42:6d:b0:ec:5a:b0:69:54:0b:98:d2:71:
                    98:3f:fd:a5:70:b4:5a:4e:ba:9b:40:b6:e8:86:e0:
                    cb:b4:ee:c3:93:86:8d:80:7f:2f:98:c8:02:c8:ad:
                    10:ad:be:ab:5a:55:39:f3:b9:a5:81:59:6f:25:5c:
                    3b:56:c8:7c:2b:db:bf:92:cc:5b:0c:1f:2c:12:53:
                    cf:27:80:98:1c:e6:3f:f6:e4:eb:fc:d7:3d:43:d0:
                    be:e6:27:5a:89:ea:60:28:70:50:15:b6:e7:bb:b7:
                    4f:a1:3d:fd:da:24:7a:7c:4b:db:3e:b7:50:b3:be:
                    e7:0e:15:58:68:24:3f:cf:ba:fe:6b:56:3b:71:4f:
                    78:68:cb:19:27:05:c4:c0:f5:c9:9c:bd:b1:c4:6d:
                    75:73:19:1d:fd:f5:db:f7:89:e4:ea:a6:26:ed:47:
                    97:c3:bd:08:e0:ca:49:8f:14:1b:7a:d4:a0:0b:cf:
                    14:68:0b:81:78:df:fe:e1:15:0b:12:4f:22:b1:d2:
                    58:be:01:92:39:68:38:1a:8f:fd:a4:13:ca:9a:ec:
                    32:2f:47:06:0f:97:53:26:33:a0:2c:ad:4b:cf:3c:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:BF:07:FF:D4:D9:8C:DC:7A:2C:93:48:8C:58:A1:53:09:3D:51
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/78u_B__U2YzceiyTSIxYoVMJPVE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:9a:63:4e:1c:35:37:c7:a5:fb:e4:27:60:bc:8a:0c:db:94:
         58:e4:9b:40:ef:06:e0:f5:47:38:1c:45:06:56:d6:da:45:42:
         c6:2d:5b:20:8b:28:f7:84:fc:8a:3f:9f:d4:41:f7:aa:16:c9:
         e8:eb:07:5c:a0:71:8b:81:2c:6e:3d:13:b0:46:38:c3:f7:ab:
         e7:5b:8c:cc:2d:e4:27:9f:39:a2:a9:f5:75:43:c0:e2:0a:65:
         30:60:83:0f:e5:a1:51:c5:1d:2e:c5:d7:56:57:7c:89:5a:ee:
         9a:b8:a0:fa:38:aa:b4:19:20:89:f4:d9:8a:4f:26:54:fa:ee:
         2a:01:9f:69:25:51:60:8a:18:be:35:55:21:4f:86:fb:4c:f6:
         5e:50:de:20:5b:5c:58:a1:61:20:90:20:9b:66:99:9c:b9:d8:
         ff:a2:58:de:ef:9a:e7:37:37:e9:8a:c6:2b:96:2c:d3:ed:c0:
         10:3d:e8:dd:1f:ee:99:23:6f:f4:73:2c:db:43:7b:09:00:f9:
         5e:47:67:2c:7f:b2:df:78:ce:e5:24:f7:8f:15:d8:06:18:4c:
         9f:fe:b2:c3:db:cc:ce:f7:be:d1:ed:0b:71:95:46:8a:5f:78:
         69:cb:12:e5:73:3e:06:64:b7:10:66:4a:af:be:49:cd:40:dc:
         88:35:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org