Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R_6k1rFHjL6u6Qs6wF-M6iJWgsI.roa
File:                     R_6k1rFHjL6u6Qs6wF-M6iJWgsI.roa (raw, json)
Hash identifier:          2DrMJOrd7r3Dr6HhBfpW/5a0rrgSQf/MmwmIWsYlJlE=
Subject key identifier:   47:FE:A4:D6:B1:47:8C:BE:AE:E9:0B:3A:C0:5F:8C:EA:22:56:82:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       145B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R_6k1rFHjL6u6Qs6wF-M6iJWgsI.roa
Signing time:             Sun 07 Feb 2021 11:58:20 +0000
ROA not before:           Sun 07 Feb 2021 11:58:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.223.128/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5211 (0x145b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:58:20 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=47FEA4D6B1478CBEAEE90B3AC05F8CEA225682C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:a5:f6:a0:c1:21:a9:1d:d3:16:4e:39:ca:
                    e1:43:95:81:aa:10:5b:8c:62:13:74:8c:32:4b:f2:
                    4d:82:17:ff:e8:66:34:03:d2:0a:7a:81:dd:cc:ac:
                    f3:a9:78:50:8b:aa:6f:58:7f:e5:74:5d:d4:9f:ca:
                    4e:4b:67:71:8d:a8:0b:8d:67:55:37:84:0f:19:93:
                    fe:86:36:0c:68:7c:9f:4c:d2:06:ea:ff:a6:fc:7a:
                    21:63:b2:c5:42:48:fc:0d:60:95:96:c1:60:10:bb:
                    58:46:15:93:a0:b1:86:bb:3d:e7:90:d4:bf:ff:ae:
                    ef:44:4c:0f:f5:7d:17:74:33:de:b6:6e:47:b9:c4:
                    a0:ec:60:74:dd:8b:ec:5a:5e:0c:f5:06:09:1d:02:
                    3e:f5:3a:f0:ca:8f:ee:39:0c:10:8f:1b:db:a4:b2:
                    4d:1c:54:b9:4e:44:ce:45:3f:f5:c5:c5:80:6e:e7:
                    59:e1:eb:aa:08:64:9c:7d:0e:d7:60:34:cc:98:52:
                    30:95:75:07:1b:5c:60:d7:28:a0:61:b5:f3:f1:ff:
                    08:6b:fc:ba:87:0d:11:65:36:02:77:4f:05:64:60:
                    b1:ce:89:2f:fa:9e:e7:5e:2a:67:e6:2a:fa:a2:2f:
                    b6:f3:29:a2:37:48:c8:fc:71:4a:f2:49:65:9d:d3:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FE:A4:D6:B1:47:8C:BE:AE:E9:0B:3A:C0:5F:8C:EA:22:56:82:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R_6k1rFHjL6u6Qs6wF-M6iJWgsI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.223.128/26

    Signature Algorithm: sha256WithRSAEncryption
         83:a8:fd:1d:29:a2:ad:cd:d3:3f:df:9d:a0:51:29:47:09:01:
         84:94:7c:db:5f:43:5f:14:ec:a7:f4:6a:b1:64:c0:c6:e3:94:
         16:fe:5f:e3:b8:71:ef:eb:ef:85:b3:09:b4:dd:3e:25:3a:c3:
         32:57:04:5f:0d:12:33:14:a3:c2:16:c2:17:e3:b6:26:b1:be:
         de:fa:15:99:c8:d0:7d:57:8d:8b:ed:26:ec:63:1a:26:7f:73:
         62:b6:9d:92:79:86:e0:f2:e5:e2:eb:6e:30:69:61:0f:34:62:
         7e:49:47:d5:01:3f:d0:da:7d:9f:42:38:00:bb:4c:81:76:9c:
         60:be:85:c4:c8:5c:28:1c:d4:d0:a3:38:ad:a5:b0:f3:97:33:
         ef:03:b0:60:3d:e4:1d:3f:c3:b4:49:50:9c:5f:5d:9c:65:1b:
         84:6c:b8:04:2a:55:6a:ec:45:a3:60:18:df:e0:22:6d:2d:5d:
         dd:d5:70:07:f0:44:00:87:c2:47:c3:6d:4d:6a:77:44:5e:61:
         b7:5b:7b:5c:61:a7:c7:fe:27:48:ea:86:a7:23:fd:7f:cd:e5:
         b8:2f:0b:b2:0e:20:dd:64:ce:e9:a6:21:33:ea:d9:ee:86:bf:
         f0:70:e0:0d:aa:23:09:dc:3f:f3:9c:50:bf:7d:eb:ec:0c:da:
         de:17:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org