Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GH93KSSF19yMnkhtDtDJXfjf1Kg.roa
File:                     GH93KSSF19yMnkhtDtDJXfjf1Kg.roa (raw, json)
Hash identifier:          OdLOrCC+1V1JQd91lkzcqAoujU/7tu4EAv/lqz+qT+U=
Subject key identifier:   18:7F:77:29:24:85:D7:DC:8C:9E:48:6D:0E:D0:C9:5D:F8:DF:D4:A8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GH93KSSF19yMnkhtDtDJXfjf1Kg.roa
Signing time:             Sun 07 Feb 2021 12:00:09 +0000
ROA not before:           Sun 07 Feb 2021 12:00:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5327 (0x14cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:00:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=187F77292485D7DC8C9E486D0ED0C95DF8DFD4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c8:60:a8:a6:74:a9:bc:2a:aa:f4:fb:62:ea:
                    d5:7a:d9:af:b5:1f:47:94:aa:03:77:d2:27:0f:5a:
                    a9:49:25:ca:a4:f7:7a:16:0d:13:88:38:9a:b7:c1:
                    a9:1b:fc:24:89:3e:71:5d:0d:4e:49:84:a0:a9:e6:
                    21:76:fd:c2:6b:ca:94:fb:b3:2e:dd:f9:29:73:3f:
                    75:e8:dd:bc:52:d3:66:2c:49:20:37:95:71:99:52:
                    2c:b7:e1:5d:c4:92:3b:ae:00:dd:84:2d:e8:98:d2:
                    75:de:73:65:8d:d9:77:e8:9b:af:e7:3a:9a:0f:11:
                    94:8d:c4:a7:62:85:ee:63:ad:0e:99:57:23:a3:7b:
                    e3:fe:42:77:ef:75:5b:f0:c9:9f:ba:03:89:10:c3:
                    b4:90:dc:5c:15:e2:4f:b8:52:1f:f4:15:05:08:99:
                    e2:69:33:76:51:e2:43:f2:33:5e:86:04:65:31:1b:
                    ac:29:20:ad:a0:ac:a5:13:83:ff:81:8f:c9:49:e2:
                    92:32:c3:54:50:97:31:b8:24:3f:4c:a5:c3:1e:a9:
                    38:69:e2:9c:88:31:4e:76:81:f5:49:cf:fc:e4:c0:
                    b2:1b:55:cc:a2:32:00:a8:b5:9f:da:0a:01:18:71:
                    73:e8:7b:c8:3f:3d:4b:22:c7:7d:f2:b8:b7:bf:49:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7F:77:29:24:85:D7:DC:8C:9E:48:6D:0E:D0:C9:5D:F8:DF:D4:A8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GH93KSSF19yMnkhtDtDJXfjf1Kg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:6b:23:05:d0:05:6f:c2:bc:d7:58:90:bf:3c:25:6e:29:
         7e:bb:9d:6f:93:28:3e:65:84:36:20:fc:6f:38:ec:25:70:ba:
         bf:a4:b8:2a:dc:23:70:a5:89:6d:cd:7a:c8:33:96:30:bd:f5:
         e3:41:23:1b:c8:6e:b4:50:6f:15:5e:c4:3c:dd:9f:d2:80:92:
         a4:15:12:cb:af:7b:a8:3d:7a:3f:d9:07:6b:c9:98:64:2a:5d:
         54:7c:9f:bb:ca:5e:60:97:8f:ca:71:ed:eb:aa:02:06:f9:3c:
         fe:64:b9:04:01:74:68:c8:b6:ff:07:b6:1a:44:8b:61:78:69:
         87:cc:03:72:90:ec:07:43:17:56:fa:61:84:09:5c:b2:34:bf:
         7a:ee:4c:7d:d8:e2:f0:8f:11:f5:7b:87:43:cc:39:e5:5a:75:
         d6:fa:59:99:1d:0f:2e:b7:c8:da:57:a7:16:88:b3:04:d0:71:
         96:2a:03:6d:19:fb:b4:af:32:ab:d6:21:28:f9:b4:c8:e7:3c:
         09:6a:c5:aa:26:78:ff:34:ff:2a:11:4f:6c:01:c1:d2:7b:6c:
         d3:cc:60:d3:7f:db:5a:aa:3b:50:87:a7:1d:6d:f5:fe:0c:89:
         93:c9:7b:9a:86:ea:7e:a4:9b:65:96:d4:9d:16:38:0c:25:10:
         57:a6:ce:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org