Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HrJHz_X5O64D6Ga_rcvHgkI74X4.roa
File:                     HrJHz_X5O64D6Ga_rcvHgkI74X4.roa (raw, json)
Hash identifier:          7tKewqgAiHYyzEb4khFQqIj6Il7lEtuw5FrAZbndemU=
Subject key identifier:   1E:B2:47:CF:F5:F9:3B:AE:03:E8:66:BF:AD:CB:C7:82:42:3B:E1:7E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EF5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HrJHz_X5O64D6Ga_rcvHgkI74X4.roa
Signing time:             Tue 29 Sep 2020 09:56:21 +0000
ROA not before:           Tue 29 Sep 2020 09:56:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3829 (0xef5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1EB247CFF5F93BAE03E866BFADCBC782423BE17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:3e:6f:36:83:ed:ca:b7:e7:16:51:71:ee:
                    b7:03:06:ff:65:1b:8d:fa:20:46:98:05:b6:f7:57:
                    2d:06:55:6d:25:48:ea:d6:90:2f:b3:15:b1:82:b2:
                    9a:94:cb:55:46:f1:3e:16:b0:60:81:cd:02:d6:d1:
                    05:d9:2a:e4:87:6b:b2:f5:5d:79:20:26:fe:c4:73:
                    c1:29:c9:ca:eb:cd:9b:96:26:a2:7f:ec:25:ac:2a:
                    4e:a9:6e:51:b3:a0:eb:9f:f8:4c:1b:34:63:8d:92:
                    0c:1f:b2:54:8f:96:c3:41:e0:ed:e3:a1:5d:59:04:
                    0e:95:ff:f2:a9:35:c0:89:33:ae:73:f0:7c:44:22:
                    a5:99:b8:34:d2:d7:1a:71:1d:f6:2d:7d:3f:9f:5e:
                    d7:e4:79:f1:03:52:8e:1c:c0:d3:26:c7:c0:85:46:
                    cc:57:27:f5:4c:45:13:48:0c:d0:42:19:f4:24:4b:
                    7e:1f:73:67:7d:d2:3b:9f:cf:3c:49:0a:2b:1d:f3:
                    2e:24:6a:9e:dc:77:e6:4e:a9:7d:a3:3f:ef:47:20:
                    4d:6f:74:2c:9b:37:38:6d:b1:18:87:01:1c:3c:48:
                    cc:6a:17:5d:94:ca:0d:44:6e:0b:c0:21:8b:18:b0:
                    14:28:3e:47:eb:12:6b:bd:1a:19:b1:69:5b:3d:da:
                    5c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B2:47:CF:F5:F9:3B:AE:03:E8:66:BF:AD:CB:C7:82:42:3B:E1:7E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HrJHz_X5O64D6Ga_rcvHgkI74X4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:63:39:e7:f0:45:a5:d9:6a:ed:14:44:4e:81:4d:cd:a7:
         1e:84:91:7a:7f:2d:7b:1d:72:ec:b8:f2:27:53:48:74:28:64:
         a0:76:04:e1:1f:9c:8c:6f:e2:a8:fc:a3:33:50:5a:93:4c:ae:
         6a:d1:ba:9b:e6:f5:a1:e0:37:a3:c1:0a:ef:7d:ce:0d:96:26:
         db:40:ef:cd:9c:3c:f1:4f:33:57:2a:28:cf:30:93:3e:5a:23:
         d7:d8:cf:58:ce:d5:92:d5:2b:6c:75:dd:c3:16:86:7e:b9:5c:
         59:43:b5:dc:d5:e7:ed:44:47:e6:7d:15:20:fa:d7:8f:48:5c:
         cb:06:f3:55:52:a3:a7:a3:e1:d0:b3:be:bc:67:82:a1:9a:2f:
         a4:a8:9c:97:db:0b:77:a1:8f:4d:9d:e0:f9:b8:9f:32:8c:f4:
         3f:58:46:46:9a:52:ea:aa:43:90:d6:ce:9b:07:22:56:41:61:
         4f:a7:14:28:59:f2:7b:2b:cf:68:86:59:d3:13:70:f7:34:dc:
         63:b2:d3:d1:7f:cc:25:ab:92:ee:ae:ff:3e:e5:19:c6:4b:f6:
         27:3b:a7:8e:35:cb:ac:37:5e:48:41:23:8b:70:8c:07:08:67:
         27:1b:9c:75:0e:20:3b:55:57:1b:4d:3d:3b:a2:4d:19:ab:26:
         57:58:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org