Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W3fu4xRviNbRZkPGTraHNGVYHL8.roa
File:                     W3fu4xRviNbRZkPGTraHNGVYHL8.roa (raw, json)
Hash identifier:          wG81tvgToTXJ+Xqg9eXaN1+GnMbH2SOmrdL5GfP5ugw=
Subject key identifier:   5B:77:EE:E3:14:6F:88:D6:D1:66:43:C6:4E:B6:87:34:65:58:1C:BF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D8D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W3fu4xRviNbRZkPGTraHNGVYHL8.roa
Signing time:             Tue 29 Sep 2020 09:54:42 +0000
ROA not before:           Tue 29 Sep 2020 09:54:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.144.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3469 (0xd8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5B77EEE3146F88D6D16643C64EB6873465581CBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bb:ed:4d:d1:73:c7:95:ab:39:1a:5a:ab:87:
                    ce:45:a9:b5:8d:e4:5b:b2:ba:d8:84:6b:2f:0e:54:
                    e9:c4:0a:69:0b:42:53:86:a3:46:1c:83:16:71:f8:
                    59:32:18:f1:04:af:38:c8:a6:e1:09:2e:c8:8d:e7:
                    ac:6a:90:77:d2:02:7d:27:e7:dc:b4:2f:eb:9f:70:
                    14:af:4d:a2:50:c6:5c:9d:23:4e:a1:9e:a1:f2:29:
                    52:07:cb:72:31:1f:6e:de:2a:fd:ad:2e:5f:3e:ca:
                    c9:79:aa:ac:fb:9b:2a:8c:f5:b0:b9:26:9d:50:e4:
                    d6:5c:cc:1b:cf:85:af:b1:36:2c:97:71:6e:57:59:
                    02:c6:ca:bc:9f:59:6b:be:68:ae:49:c8:a9:cd:e0:
                    4c:3f:28:55:98:9f:bf:bd:d9:d9:c6:3c:50:cf:41:
                    fa:d4:d3:ae:51:fc:8b:bf:e8:4c:e8:02:48:9e:d7:
                    19:08:93:2d:67:2f:81:5f:21:ae:1f:9d:6f:cf:6c:
                    db:28:84:2f:dc:21:fd:f2:c2:4c:7b:c5:48:38:42:
                    e2:c2:65:09:b3:82:c9:61:ee:95:b1:2b:c6:ab:ae:
                    d5:ce:fb:67:5c:08:ef:1d:13:d5:7d:4a:42:e8:1e:
                    12:c8:2a:a7:b2:d2:72:71:66:8d:0b:e7:b7:3a:26:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:77:EE:E3:14:6F:88:D6:D1:66:43:C6:4E:B6:87:34:65:58:1C:BF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W3fu4xRviNbRZkPGTraHNGVYHL8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:f8:1f:12:af:b8:1e:78:71:53:d8:3e:f1:73:32:42:8b:2a:
         bd:a0:35:b9:b4:a2:a8:53:5c:55:1a:33:09:57:16:f8:71:9f:
         6b:1f:ee:ee:2a:cd:80:86:58:50:14:a1:06:17:99:29:45:ba:
         e5:9b:4c:ba:d6:8f:d8:43:bc:7b:1f:31:35:d6:05:41:e3:1a:
         0b:04:0f:42:ce:d9:56:87:ab:fa:89:d7:25:65:ba:4d:88:b5:
         ef:d3:ae:a9:03:22:c7:9e:38:aa:30:1c:7c:7a:f6:74:db:33:
         6a:96:9a:57:e8:6c:c3:22:f3:c2:52:ec:6f:d4:68:9e:22:8a:
         8e:0b:36:58:d5:40:fa:34:95:40:82:38:6f:45:65:7c:43:1c:
         d3:2c:a9:5f:90:c5:2f:cc:2a:fd:49:cd:4f:dc:5a:ee:75:9d:
         80:20:c5:a7:32:41:01:88:cf:cc:e9:a5:3f:01:1d:21:78:36:
         41:a1:7a:a1:42:db:34:e5:e6:fe:a1:42:f3:60:d5:58:8c:9d:
         90:8c:44:77:f7:6e:58:be:6f:6f:8b:ed:2b:aa:c3:75:af:98:
         93:24:9a:b4:76:ec:85:01:c3:02:d6:43:4f:e9:1d:64:ab:d5:
         28:c3:21:ec:90:d6:c2:21:4e:1a:af:46:d6:93:0a:80:93:05:
         bf:40:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org