Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fe2wpei4vtg7Oo0dfunIR8ds1Jw.roa
File:                     Fe2wpei4vtg7Oo0dfunIR8ds1Jw.roa (raw, json)
Hash identifier:          oynDQIuPSoEQTU+DRvD59FM0XmASxyMWLU2SBYX8mH4=
Subject key identifier:   15:ED:B0:A5:E8:B8:BE:D8:3B:3A:8D:1D:7E:E9:C8:47:C7:6C:D4:9C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fe2wpei4vtg7Oo0dfunIR8ds1Jw.roa
Signing time:             Tue 29 Sep 2020 09:55:22 +0000
ROA not before:           Tue 29 Sep 2020 09:55:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3616 (0xe20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:22 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=15EDB0A5E8B8BED83B3A8D1D7EE9C847C76CD49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ef:3c:b4:48:05:90:82:89:10:bb:b5:23:29:
                    39:9f:b1:33:16:50:c1:ed:ed:fa:89:0e:98:ec:51:
                    e5:ca:cf:ef:d4:4e:de:b3:58:6a:e0:08:06:4f:6a:
                    22:63:73:c5:13:bc:ef:e9:2e:14:9f:d2:b7:81:b9:
                    f0:99:0e:a3:87:f5:c1:48:9d:99:99:77:1a:c0:cb:
                    69:9e:1b:e6:d2:c7:90:6f:26:0c:ea:22:d4:e4:6c:
                    a9:fd:23:c1:e2:42:19:0f:39:16:57:cd:77:dc:a5:
                    ae:8e:20:01:c9:33:1a:f7:ac:08:e1:fa:6a:b2:1b:
                    bb:99:6b:22:36:d6:57:e7:34:95:3a:cc:12:db:f5:
                    10:02:37:63:74:2a:63:b7:c6:0a:22:c3:24:f5:0c:
                    be:a7:97:13:1f:35:89:4c:ce:e0:15:49:a1:13:1d:
                    f1:86:66:93:2a:05:20:65:fa:8b:f0:0a:e4:7d:04:
                    3c:4c:8f:94:ba:9b:b0:e0:e9:2e:e0:a2:0a:88:81:
                    83:37:e1:4b:51:1b:60:05:23:6f:f8:23:0a:83:3b:
                    b6:8c:ba:30:6b:c8:e4:4a:2d:2d:b7:fc:73:27:45:
                    fb:c1:35:4d:3e:3f:0f:9d:b2:0d:98:2d:2e:1b:05:
                    1e:c2:f8:d4:90:17:73:24:5a:c0:2f:74:91:ea:e1:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:ED:B0:A5:E8:B8:BE:D8:3B:3A:8D:1D:7E:E9:C8:47:C7:6C:D4:9C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fe2wpei4vtg7Oo0dfunIR8ds1Jw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:f0:e5:18:37:76:cb:4d:f7:7b:9b:59:e6:0d:d9:e6:c2:
         bf:27:ff:13:36:ef:6a:5b:87:8d:ea:c5:5b:4f:10:e6:ca:35:
         72:78:ad:e2:1a:96:82:9e:74:44:14:e8:b1:18:1b:84:59:9c:
         5f:7a:04:ac:46:f8:75:01:0b:4a:f2:e4:30:9b:a9:e4:03:88:
         49:a5:48:d1:6e:1f:ec:5a:76:96:48:52:7b:61:48:d5:a7:b6:
         44:c9:e7:2d:2a:16:fd:e4:5a:54:78:2f:d3:c2:25:ae:67:41:
         c8:e1:c1:cc:f9:35:8e:02:cc:4c:5d:d6:ee:0f:8b:c1:50:cd:
         83:0c:35:91:94:f4:32:53:5d:2a:3e:5e:b4:a2:24:4f:6d:9e:
         e8:02:e5:cc:25:c2:fd:00:48:1f:0f:af:48:c2:dd:55:25:4b:
         4f:d8:0c:24:d3:1a:2c:ca:6f:73:92:ea:92:ae:7a:ac:76:d8:
         4f:16:4d:8d:17:b7:11:47:9e:c4:da:1f:22:e9:60:ea:24:a8:
         32:34:1a:a8:94:54:69:71:74:ad:c9:ad:09:6c:dc:ec:85:60:
         7a:71:84:53:b4:df:f3:5c:4c:d1:48:18:df:40:2b:de:b2:98:
         45:68:1b:b8:6f:61:22:dc:a6:f3:b6:e9:e6:82:ee:03:a8:1f:
         95:a4:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org