Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ByjznELAEg-1yPiKtC_SlrO-YGw.roa
File:                     ByjznELAEg-1yPiKtC_SlrO-YGw.roa (raw, json)
Hash identifier:          o5bSukjmzLEZyRffNw1ytQKHKEAqbqocoT0ALnc7VSE=
Subject key identifier:   07:28:F3:9C:42:C0:12:0F:B5:C8:F8:8A:B4:2F:D2:96:B3:BE:60:6C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D8A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ByjznELAEg-1yPiKtC_SlrO-YGw.roa
Signing time:             Tue 29 Sep 2020 09:54:40 +0000
ROA not before:           Tue 29 Sep 2020 09:54:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.128.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3466 (0xd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0728F39C42C0120FB5C8F88AB42FD296B3BE606C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:41:31:7e:f1:93:c2:09:d9:ae:b9:23:ba:
                    9a:e1:25:4d:22:15:54:b5:c8:4a:34:c7:d4:a5:5f:
                    d8:e1:da:6a:ba:12:f5:92:29:95:65:36:12:79:1a:
                    3f:63:c6:ba:53:5b:14:5f:8c:3f:33:d2:f3:e9:73:
                    ac:8c:f4:60:7f:d7:38:cb:18:f6:32:fc:ec:b7:30:
                    2c:85:ee:f8:e6:63:ca:1d:c6:e5:fc:b8:34:8e:06:
                    19:3b:5b:87:4e:20:b0:1e:eb:7c:1a:bb:1a:e1:c6:
                    9b:09:e5:52:ae:c4:40:da:23:5f:55:ac:c1:b5:a1:
                    9e:4a:0f:80:3b:b8:cd:01:6b:56:f1:84:4d:9d:d4:
                    42:18:64:cd:f0:37:94:b5:c0:40:1e:a0:f1:ac:68:
                    d2:bf:10:0c:e5:dc:32:73:54:6e:cd:dc:e8:b1:cb:
                    df:fb:e6:b1:f7:75:9e:ce:57:bd:8c:88:5a:ca:28:
                    f1:57:36:d3:b8:21:ea:f8:2a:4a:ac:b9:7e:90:ee:
                    99:68:e0:e2:60:7e:e1:98:2b:3a:75:24:58:43:6a:
                    fe:d6:cf:22:ab:7f:51:7e:f1:de:15:01:5e:69:7c:
                    0f:cb:70:93:13:27:94:f9:e5:d4:32:44:02:01:6b:
                    77:41:f6:94:66:06:ad:fd:04:94:09:8a:d5:7b:ad:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:F3:9C:42:C0:12:0F:B5:C8:F8:8A:B4:2F:D2:96:B3:BE:60:6C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ByjznELAEg-1yPiKtC_SlrO-YGw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:01:3f:83:69:23:5c:71:ea:46:b6:ed:7e:17:c9:5b:23:fe:
         cd:72:be:8b:41:74:cf:a3:fd:99:23:d2:5c:c5:b8:a0:10:50:
         b4:4a:3f:02:53:eb:ad:30:1f:bb:39:ee:94:bc:eb:d4:d7:8c:
         6b:32:4e:ef:b2:eb:b1:df:77:0c:5a:f5:29:32:13:6e:de:94:
         87:53:a8:71:b9:01:f1:b5:4f:c2:74:be:97:17:9e:44:ff:7b:
         26:67:d7:f3:22:b9:e3:8d:8b:93:a2:4b:fd:c8:7e:e2:e5:3d:
         76:d1:87:7f:a0:70:94:cb:3a:7a:9a:12:68:50:a6:d8:ad:d1:
         cc:36:f9:cb:e0:42:c2:fc:2e:3e:1c:28:2d:0f:09:9e:6d:51:
         f7:7d:fe:2a:9d:aa:26:9d:95:b3:d3:ef:3a:5f:c0:3b:74:24:
         fe:78:fd:3b:e4:bc:6c:e6:e2:70:9e:63:a2:d5:cc:3b:13:a8:
         7b:1c:6d:85:5c:9e:27:e3:54:35:06:ef:e0:f1:f3:7b:81:16:
         a5:66:56:f2:4c:22:c7:82:54:18:11:4d:5f:08:2b:a7:a8:3f:
         2e:ad:25:aa:c8:52:22:42:dd:84:c3:84:92:1e:5e:76:ed:4c:
         40:1f:76:f3:e1:1d:7b:7d:f6:a9:23:53:31:57:2f:1a:64:da:
         fa:f6:ad:20
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA3MjhGMzlDNDJDMDEy
MEZCNUM4Rjg4QUI0MkZEMjk2QjNCRTYwNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1JUExfvGTwgnZrrkjuprhJU0iFVS1yEo0x9SlX9jh2mq6EvWS
KZVlNhJ5Gj9jxrpTWxRfjD8z0vPpc6yM9GB/1zjLGPYy/Oy3MCyF7vjmY8odxuX8
uDSOBhk7W4dOILAe63wauxrhxpsJ5VKuxEDaI19VrMG1oZ5KD4A7uM0Ba1bxhE2d
1EIYZM3wN5S1wEAeoPGsaNK/EAzl3DJzVG7N3Oixy9/75rH3dZ7OV72MiFrKKPFX
NtO4Ier4KkqsuX6Q7plo4OJgfuGYKzp1JFhDav7WzyKrf1F+8d4VAV5pfA/LcJMT
J5T55dQyRAIBa3dB9pRmBq39BJQJitV7rTibAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUByjznELAEg+1yPiKtC/SlrO+YGwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0J5anpuRUxBRWctMXlQaUt0
Q19TbHJPLVlHdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
woAwDQYJKoZIhvcNAQELBQADggEBAGwBP4NpI1xx6ka27X4XyVsj/s1yvotBdM+j
/Zkj0lzFuKAQULRKPwJT660wH7s57pS869TXjGsyTu+y67Hfdwxa9SkyE27elIdT
qHG5AfG1T8J0vpcXnkT/eyZn1/MiueONi5OiS/3IfuLlPXbRh3+gcJTLOnqaEmhQ
ptit0cw2+cvgQsL8Lj4cKC0PCZ5tUfd9/iqdqiadlbPT7zpfwDt0JP54/TvkvGzm
4nCeY6LVzDsTqHscbYVcnifjVDUG7+Dx83uBFqVmVvJMIseCVBgRTV8IK6eoPy6t
JarIUiJC3YTDhJIeXnbtTEAfdvPhHXt99qkjUzFXLxpk2vr2rSA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org