Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Orvd8qRA50bSoZZKg7jOyEGBw0.roa
File:                     9Orvd8qRA50bSoZZKg7jOyEGBw0.roa (raw, json)
Hash identifier:          hTrq6J5x6iOHHLiRV9SpqkXcc0GeUfHeTSSaMkjtJv0=
Subject key identifier:   F4:EA:EF:77:CA:91:03:9D:1B:4A:86:59:2A:0E:E3:3B:21:06:07:0D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1537
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Orvd8qRA50bSoZZKg7jOyEGBw0.roa
Signing time:             Sun 07 Feb 2021 12:03:27 +0000
ROA not before:           Sun 07 Feb 2021 12:03:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.237.128/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5431 (0x1537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:03:27 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F4EAEF77CA91039D1B4A86592A0EE33B2106070D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:7d:9b:c5:68:f6:72:86:e9:fb:06:8a:93:
                    e4:9b:89:6a:35:dc:b9:f5:76:25:35:85:76:99:10:
                    2d:60:71:4f:3c:b9:9e:19:a7:b9:af:4c:1b:7e:eb:
                    39:6b:28:3d:f3:67:34:27:4a:1c:da:78:be:48:59:
                    9e:89:e3:df:0f:12:e0:b6:19:c7:94:11:5d:fd:44:
                    0f:94:12:b3:bf:d5:08:c0:8f:de:d7:3e:89:7a:ac:
                    75:40:28:f5:d0:fc:2d:af:73:3d:2d:aa:17:cf:e2:
                    45:b1:bc:57:1c:2a:c4:ba:3f:c4:f0:53:4a:41:75:
                    cf:4f:06:63:d6:44:f5:26:34:dc:ad:cf:98:db:d8:
                    45:5b:1a:38:c9:9f:40:b9:24:55:d5:ca:e6:8c:f6:
                    6c:5f:8f:a4:76:20:4b:18:69:f1:b3:cd:ae:30:60:
                    4a:e1:11:26:eb:cc:ca:42:17:24:c2:10:c5:8b:26:
                    c0:47:3d:97:ec:67:d9:a1:3f:b4:81:23:cd:5e:6e:
                    5e:f9:90:90:f6:7f:2b:52:46:29:75:86:90:a2:3e:
                    84:c6:47:65:35:68:ad:66:b3:57:df:81:e8:59:9c:
                    2f:c6:04:be:34:e4:25:c3:a3:22:05:63:6d:9f:34:
                    55:fc:f6:e5:fc:f3:70:c0:7b:11:7a:0a:e7:37:7a:
                    54:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EA:EF:77:CA:91:03:9D:1B:4A:86:59:2A:0E:E3:3B:21:06:07:0D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9Orvd8qRA50bSoZZKg7jOyEGBw0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.237.128/25

    Signature Algorithm: sha256WithRSAEncryption
         15:89:18:aa:2f:ff:8a:c4:b2:6e:e6:1d:0a:e7:3f:9b:a9:d9:
         df:28:36:f8:86:58:c8:f1:fa:f0:f9:42:76:b5:3d:a6:3f:b4:
         24:26:e4:c5:82:73:33:38:82:3b:9e:7f:1f:4c:4b:6f:4b:74:
         7c:10:12:5f:ab:10:d8:3b:24:a1:be:da:15:fb:a3:5e:c0:66:
         50:0e:3f:0a:fb:f7:8a:bd:7e:fd:0e:7e:56:51:47:c7:4a:17:
         af:d8:2d:d0:2b:96:f3:b6:1a:68:b2:d6:42:af:88:7b:fa:47:
         3e:af:94:a9:a3:30:2c:87:ff:83:a2:7b:86:93:b9:e3:14:05:
         04:34:e5:b9:81:43:a0:4c:9a:93:6c:34:8d:89:ef:53:df:e1:
         99:2b:fe:80:a7:35:a4:4d:41:b8:0a:4c:1b:ad:06:f1:6f:17:
         a6:8b:15:e2:19:44:99:98:b2:44:c1:b5:dc:92:5c:27:cb:8b:
         47:9b:50:ba:bf:1c:af:b3:2b:72:46:2d:1e:f1:fa:ef:28:1c:
         f3:25:af:8d:04:fa:13:e0:d3:f8:3e:2d:03:6b:e7:ca:ae:d7:
         f2:5f:39:8c:6b:21:57:74:ef:18:a9:a0:b5:13:8e:aa:3d:e1:
         e4:e9:90:45:e4:1f:f7:bf:e0:db:cf:3a:32:0c:78:a3:9d:34:
         28:cb:fc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org