Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J5g60OGtc1flNgAurkYQG1fC3q8.roa
File:                     J5g60OGtc1flNgAurkYQG1fC3q8.roa (raw, json)
Hash identifier:          DpZus9Fx3epQz6EyMHBk6btgpD/Sq+l5NRuX6D+0UG4=
Subject key identifier:   27:98:3A:D0:E1:AD:73:57:E5:36:00:2E:AE:46:10:1B:57:C2:DE:AF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18E3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J5g60OGtc1flNgAurkYQG1fC3q8.roa
Signing time:             Sun 07 Feb 2021 12:54:48 +0000
ROA not before:           Sun 07 Feb 2021 12:54:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.194.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6371 (0x18e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:54:48 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=27983AD0E1AD7357E536002EAE46101B57C2DEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:36:49:a1:65:40:2e:df:03:c2:df:61:5b:13:
                    15:5d:8b:41:6a:3d:52:4b:cf:30:11:2a:2d:8d:8d:
                    6b:3d:89:72:4f:70:ab:0e:eb:bc:64:89:64:f9:f3:
                    15:36:ca:17:73:fe:e1:d3:7e:74:22:cc:05:71:1b:
                    87:ed:cc:f2:fc:34:e9:9b:e4:bb:2f:3b:e7:e4:4c:
                    69:12:f6:1b:52:e0:68:be:ac:c9:fc:c0:ee:40:ad:
                    be:2f:2e:da:1c:8a:97:5f:f6:44:3b:34:ff:a2:4e:
                    d0:29:77:f4:62:b8:f9:2e:c6:c7:7d:ea:29:0d:d7:
                    fe:1d:9e:7a:31:04:df:24:34:7d:54:8c:bd:f4:42:
                    85:d7:b4:7e:53:55:2b:02:57:0d:c4:4c:c5:b2:36:
                    cb:e5:c5:e0:46:cd:c8:35:fc:ef:da:91:a4:d1:3c:
                    c3:06:77:30:90:ca:3a:4b:9b:4d:8e:b4:77:5c:5f:
                    8a:3f:9e:de:e1:95:b3:d1:e6:ef:3f:a9:2d:22:49:
                    31:ba:82:7b:75:25:95:0c:ca:8f:c8:9b:2f:8b:e3:
                    5f:36:5d:0c:fa:fd:9c:e0:e2:9a:3e:7e:a3:7e:ac:
                    47:db:11:c2:e5:d5:1d:12:5d:1a:7e:92:39:86:38:
                    dd:7b:f0:5d:2e:81:2c:40:3b:6b:4b:e3:90:f1:61:
                    e6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:98:3A:D0:E1:AD:73:57:E5:36:00:2E:AE:46:10:1B:57:C2:DE:AF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J5g60OGtc1flNgAurkYQG1fC3q8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:ce:f3:78:8a:89:08:32:1f:32:fc:43:3b:73:f8:5b:30:e9:
         61:57:bb:1b:73:f9:49:86:53:a8:53:62:dc:23:23:56:6c:46:
         fe:69:0f:4f:97:64:6e:b7:bb:28:5b:06:d6:80:a3:74:55:ce:
         42:a5:3d:ad:df:63:7e:e2:c9:be:37:29:a8:08:6e:50:08:ef:
         e1:97:c5:0d:dc:cc:2c:6b:f6:00:ac:2a:06:d9:e5:6a:f1:20:
         84:a9:89:8c:43:21:00:5c:90:97:d3:38:4a:56:45:ea:22:2b:
         08:ea:9e:28:ed:6d:48:fa:e9:33:c3:f0:1b:9f:04:28:7b:dc:
         79:2d:bd:26:ed:8f:04:83:4e:16:19:c3:46:2b:2b:c5:9a:c9:
         c0:e1:0a:17:b9:43:74:bc:8c:5d:9a:4c:dd:27:61:3e:05:a0:
         df:cb:40:a2:73:54:1e:8c:a6:b3:72:6a:73:6d:ad:db:68:2c:
         b7:c0:55:f2:98:86:48:45:74:fb:f4:e0:46:62:a1:02:65:9a:
         f9:33:89:50:5f:8d:af:f5:23:b8:69:0d:49:a1:13:42:42:a7:
         6a:60:a4:39:7f:3a:82:26:df:c8:72:84:dc:38:b0:9e:45:f7:
         48:06:6c:01:1a:e1:d1:b5:bb:c0:0c:7d:31:bc:b7:74:2d:47:
         a8:fa:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org