Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9ySiG1EGC8VcE1qEXUJC9G47AZI.roa
File:                     9ySiG1EGC8VcE1qEXUJC9G47AZI.roa (raw, json)
Hash identifier:          4XSCjt1HWiQzCuP1lR415VRKL7VLPwna7/NtOfclAc4=
Subject key identifier:   F7:24:A2:1B:51:06:0B:C5:5C:13:5A:84:5D:42:42:F4:6E:3B:01:92
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F0E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9ySiG1EGC8VcE1qEXUJC9G47AZI.roa
Signing time:             Tue 29 Sep 2020 09:56:26 +0000
ROA not before:           Tue 29 Sep 2020 09:56:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3854 (0xf0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F724A21B51060BC55C135A845D4242F46E3B0192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:ce:3b:15:53:c7:24:fc:c9:ce:fd:20:16:
                    f9:43:e4:ec:b3:e6:3c:27:f9:a0:e5:92:c5:d9:67:
                    3f:4e:ce:cb:30:bc:d9:19:04:71:ba:fe:10:25:95:
                    5b:41:80:49:9c:28:5f:64:ba:9d:8f:fe:ff:d5:c9:
                    2d:08:5f:58:4b:c4:fc:dc:60:92:0e:9c:8e:cc:b8:
                    e4:60:db:f2:17:3a:8a:8f:f0:aa:08:95:3d:7c:33:
                    f8:75:5c:26:e8:a5:e1:12:c9:87:65:6c:74:11:16:
                    d1:30:41:2e:12:42:9b:ec:f3:28:35:ae:55:4d:67:
                    8f:85:6c:65:b8:cc:d8:6d:63:73:5e:61:d0:ab:9e:
                    7a:f7:03:29:f2:37:a7:2d:31:bb:bd:cd:53:c2:54:
                    56:c1:0f:30:46:06:59:bd:8a:2d:d0:30:0c:ff:54:
                    36:a0:11:58:b5:31:a1:30:c0:93:89:71:19:bd:e9:
                    9c:5e:66:ff:f8:26:b3:5a:5a:2b:8e:fe:70:df:cf:
                    23:aa:0c:d3:7c:2d:c4:84:7c:c0:6c:71:a7:cd:73:
                    3c:d5:03:05:1e:54:95:b6:b6:b6:ce:3f:c9:3c:ad:
                    a6:63:2b:d3:73:8e:7c:93:f5:5a:51:0a:4e:1f:4c:
                    cc:41:ff:b3:46:07:12:18:ec:1e:12:21:e2:24:dc:
                    70:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:24:A2:1B:51:06:0B:C5:5C:13:5A:84:5D:42:42:F4:6E:3B:01:92
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9ySiG1EGC8VcE1qEXUJC9G47AZI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:21:1f:38:73:ca:75:15:8f:ca:1e:b6:ba:9a:7c:3d:b6:30:
         a9:2e:aa:85:32:f3:82:ab:3b:1c:77:f8:ae:08:f8:ad:09:94:
         8a:d8:1b:08:5a:68:71:f7:b3:8a:0e:7d:49:dc:2c:d6:3e:db:
         02:ea:e2:1c:76:db:a3:b2:0a:76:dc:ac:7d:34:9d:69:c6:7a:
         41:c7:ce:8b:b0:99:41:74:19:c7:1d:22:cc:4d:df:ff:7e:c8:
         a4:64:9b:c5:a0:d6:c0:16:96:79:00:e6:f5:ec:63:c3:d6:67:
         0b:51:e5:f5:8a:c1:d2:9f:fc:a4:8f:da:c4:9d:eb:08:6e:ac:
         a8:a1:0b:29:48:3b:75:1f:2f:12:1c:3f:07:f7:58:7f:e5:cb:
         9e:d5:ce:8d:ab:0d:26:d1:bf:7a:39:dc:de:27:c0:7c:d7:33:
         0e:e2:f4:ad:96:f4:bb:1b:d2:72:b1:63:8f:ad:74:ce:bc:41:
         f2:df:9f:21:ae:85:27:11:5b:77:1b:01:87:e6:5a:69:b6:90:
         bc:ca:dc:e0:be:9a:bf:4f:a7:60:64:7f:59:23:c5:37:17:3a:
         92:fb:21:b4:9a:be:06:ce:3f:fd:7d:db:22:40:21:8c:c4:d0:
         f2:cf:a5:c6:31:96:8d:b3:91:d8:b2:79:c7:06:9b:59:75:76:
         7a:9f:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org