Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8XK6j9V0WTJDCRe_Uz6xGo_FS8I.roa
File:                     8XK6j9V0WTJDCRe_Uz6xGo_FS8I.roa (raw, json)
Hash identifier:          0nTIULN0+ez3CZV7wwqAsXSgze9HLoHBENGoJpuTM5M=
Subject key identifier:   F1:72:BA:8F:D5:74:59:32:43:09:17:BF:53:3E:B1:1A:8F:C5:4B:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E84
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8XK6j9V0WTJDCRe_Uz6xGo_FS8I.roa
Signing time:             Tue 29 Sep 2020 09:55:50 +0000
ROA not before:           Tue 29 Sep 2020 09:55:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        45.64.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3716 (0xe84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F172BA8FD5745932430917BF533EB11A8FC54BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:d3:1a:d9:b4:ff:24:3e:95:c5:84:fc:44:
                    a8:59:7a:50:d7:17:37:d9:e1:f6:3f:d6:dc:90:62:
                    45:27:55:6d:5f:0d:e5:a3:ba:ac:d3:87:44:65:1e:
                    67:05:39:f4:45:ae:cb:2d:ca:c7:01:b1:4a:91:be:
                    db:db:fc:f7:5a:b3:d2:58:c7:ed:a2:63:b0:fc:6c:
                    00:91:9e:42:5b:0d:03:9b:42:37:f3:fa:75:58:2f:
                    62:f6:b9:4e:3f:be:d9:40:da:99:0e:88:18:92:6a:
                    33:8e:0a:43:73:ba:09:d8:cb:7b:5a:5c:0d:c9:8f:
                    62:a9:6a:45:fc:36:da:8d:d8:b7:f5:39:4c:84:a4:
                    10:93:db:75:e4:69:73:a8:d7:f4:11:40:66:a9:2e:
                    e7:06:08:44:39:40:69:e0:56:cb:be:7f:60:d1:75:
                    0b:e8:63:26:2f:af:44:58:fc:78:2c:de:d8:39:32:
                    1d:3e:b7:8a:ab:11:a6:1d:fd:00:9b:80:4e:5e:a8:
                    f2:5a:2a:26:c7:06:c8:d9:c6:1b:3f:81:44:ae:6e:
                    ef:31:39:c1:08:57:23:90:c7:dc:52:65:76:1c:64:
                    b4:9b:60:d2:0a:e0:5a:17:5c:21:de:0d:4d:5a:66:
                    f5:80:8c:f6:6c:d2:e3:10:d2:98:9d:f4:8a:7b:96:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:72:BA:8F:D5:74:59:32:43:09:17:BF:53:3E:B1:1A:8F:C5:4B:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8XK6j9V0WTJDCRe_Uz6xGo_FS8I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:f7:2d:98:d0:0f:f6:0b:97:59:5f:4d:68:3f:a8:09:9a:64:
         92:bb:ca:a7:1f:21:b6:95:b3:4d:b7:7e:01:20:60:d8:fd:bd:
         51:8e:17:63:5c:0a:b0:fa:bf:51:e7:98:00:a5:7c:a6:c2:33:
         3f:6e:d7:87:81:b2:6a:20:d3:fc:ee:d7:f5:7a:9b:04:ae:0f:
         92:c4:4e:a9:d1:e3:c1:96:3a:0c:73:26:ce:8e:ed:e3:58:f0:
         a1:ca:90:21:f7:8a:b9:0e:ca:90:cd:08:ad:5c:e2:57:41:6b:
         e1:26:d8:99:65:d3:47:c1:0a:f8:ed:5e:28:d5:91:03:29:fd:
         c5:ce:82:55:a0:62:90:4e:1a:56:6b:57:f4:7c:7b:9a:84:86:
         7e:01:62:fb:f2:c6:79:1d:97:f3:98:9b:0f:88:96:c2:e6:42:
         3c:8c:81:7f:7a:8d:a5:7c:81:a6:b1:2f:09:d1:d9:31:b7:b7:
         3b:b0:f9:7d:ee:6e:d1:62:c7:bf:be:e5:f9:ad:8f:4d:06:31:
         4f:c1:ff:7e:05:bb:64:77:b6:48:60:f2:19:b7:5e:f4:77:54:
         af:8b:1f:c5:8d:82:8c:1c:16:04:4c:e7:a4:87:7a:8c:6c:b6:
         ab:11:18:b8:a0:a6:e4:84:c1:54:b5:60:dd:ca:f0:7c:d9:c3:
         fb:c0:1b:4d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NTBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEYxNzJCQThGRDU3NDU5
MzI0MzA5MTdCRjUzM0VCMTFBOEZDNTRCQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+1tMa2bT/JD6VxYT8RKhZelDXFzfZ4fY/1tyQYkUnVW1fDeWj
uqzTh0RlHmcFOfRFrsstyscBsUqRvtvb/Pdas9JYx+2iY7D8bACRnkJbDQObQjfz
+nVYL2L2uU4/vtlA2pkOiBiSajOOCkNzugnYy3taXA3Jj2KpakX8NtqN2Lf1OUyE
pBCT23XkaXOo1/QRQGapLucGCEQ5QGngVsu+f2DRdQvoYyYvr0RY/Hgs3tg5Mh0+
t4qrEaYd/QCbgE5eqPJaKibHBsjZxhs/gUSubu8xOcEIVyOQx9xSZXYcZLSbYNIK
4FoXXCHeDU1aZvWAjPZs0uMQ0pid9Ip7ljzhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8XK6j9V0WTJDCRe/Uz6xGo/FS8IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhYSzZqOVYwV1RKRENSZV9V
ejZ4R29fRlM4SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt
QB0wDQYJKoZIhvcNAQELBQADggEBAJz3LZjQD/YLl1lfTWg/qAmaZJK7yqcfIbaV
s023fgEgYNj9vVGOF2NcCrD6v1HnmAClfKbCMz9u14eBsmog0/zu1/V6mwSuD5LE
TqnR48GWOgxzJs6O7eNY8KHKkCH3irkOypDNCK1c4ldBa+Em2Jll00fBCvjtXijV
kQMp/cXOglWgYpBOGlZrV/R8e5qEhn4BYvvyxnkdl/OYmw+IlsLmQjyMgX96jaV8
gaaxLwnR2TG3tzuw+X3ubtFix7++5fmtj00GMU/B/34Fu2R3tkhg8hm3XvR3VK+L
H8WNgowcFgRM56SHeoxstqsRGLigpuSEwVS1YN3K8HzZw/vAG00=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org