Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7E6PrMXm-zIB1ZR6faip5F4eyIY.roa
File:                     7E6PrMXm-zIB1ZR6faip5F4eyIY.roa (raw, json)
Hash identifier:          wz8ptASqQ0jFEGcI0Xs4SIHihElmZSkG+8sMZ5ow5FM=
Subject key identifier:   EC:4E:8F:AC:C5:E6:FB:32:01:D5:94:7A:7D:A8:A9:E4:5E:1E:C8:86
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2330
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7E6PrMXm-zIB1ZR6faip5F4eyIY.roa
Signing time:             Fri 25 Nov 2022 04:42:11 +0000
ROA not before:           Fri 25 Nov 2022 04:42:11 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        211.76.115.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9008 (0x2330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:42:11 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EC4E8FACC5E6FB3201D5947A7DA8A9E45E1EC886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:d4:a4:a6:dc:52:2c:0c:7a:16:a5:8d:10:
                    53:b0:a5:f3:95:78:32:82:73:e0:3a:24:79:0d:73:
                    d6:45:88:18:65:68:97:47:6b:e3:c0:14:bd:b4:21:
                    07:d3:f7:0b:9b:74:26:9e:0e:9c:da:a0:61:5c:2d:
                    a0:64:73:b8:61:a7:ee:ff:18:2b:c2:84:5f:d6:c6:
                    53:79:b2:0e:6a:33:f2:fe:ba:aa:a2:03:c6:6a:1c:
                    5a:ae:20:db:2d:d5:ff:c0:31:87:fc:8c:e2:30:f8:
                    65:69:fc:67:1a:5c:db:79:9f:c3:d7:db:c7:9c:cc:
                    67:5b:7e:bf:30:ba:b5:45:82:43:e3:2b:2d:c0:66:
                    70:60:fe:82:95:24:c7:80:c2:39:65:cf:f2:69:56:
                    86:da:1d:d1:04:d1:c9:30:37:33:42:9c:98:c5:b3:
                    a4:9d:42:32:27:92:00:39:1b:09:13:04:a5:af:6f:
                    7d:d5:e8:8a:39:37:92:62:75:5e:d6:17:2f:ed:0a:
                    1a:54:b1:90:bf:f8:2f:25:b5:a1:7a:3e:46:6c:ed:
                    6c:e2:de:0b:ff:38:a5:e0:65:e6:7b:7c:47:b7:a5:
                    40:92:26:9f:0a:91:e9:71:f1:a3:a9:85:7b:9c:d1:
                    f7:83:66:57:09:e1:81:26:ff:bd:09:c1:ff:b9:4c:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4E:8F:AC:C5:E6:FB:32:01:D5:94:7A:7D:A8:A9:E4:5E:1E:C8:86
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7E6PrMXm-zIB1ZR6faip5F4eyIY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.128/25

    Signature Algorithm: sha256WithRSAEncryption
         6e:d9:01:ad:b6:28:69:21:3a:c4:b4:3f:96:3e:95:9d:5a:5a:
         a0:b5:d3:9e:82:40:54:88:2d:6f:78:86:63:33:8e:2f:19:c5:
         ac:dd:f3:3d:9b:46:ff:a8:2f:3d:7a:e8:7e:2b:cc:f8:fe:73:
         4e:95:45:80:5a:3f:0e:76:5f:2d:17:1a:bb:45:65:ae:51:6c:
         d0:05:36:75:a1:c2:83:14:61:56:ba:61:44:26:b0:39:52:03:
         1b:8b:d8:61:f0:73:f7:dc:83:7c:41:be:18:05:43:70:72:b2:
         eb:6a:b3:1b:b4:da:c6:62:1a:09:78:65:79:7e:94:d2:34:95:
         75:3e:b0:91:8e:b5:e0:dc:1d:3f:48:30:c5:39:3e:3a:4e:07:
         74:56:0d:c4:f3:ba:65:97:df:6d:0f:1d:2b:19:e0:b9:06:72:
         34:b4:24:3f:53:1f:2b:98:62:b1:2d:a0:e0:b3:bf:93:f0:0d:
         79:07:2c:d4:4b:bc:a3:a5:e7:95:ad:f0:8e:2a:78:e6:81:69:
         a4:00:62:dd:f2:77:27:f7:90:ad:fb:ec:bf:51:a7:f5:6d:f1:
         e2:51:e4:12:6c:e7:5d:03:b5:e2:fb:a3:25:01:3f:5c:25:1f:
         bb:d0:9a:b9:ac:73:c3:9c:59:76:76:93:98:58:64:e7:76:37:
         03:60:cd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org