Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_3wE_SovugLn6-oTCNO1n3qPmKU.roa
File:                     _3wE_SovugLn6-oTCNO1n3qPmKU.roa (raw, json)
Hash identifier:          h0tEju+iMVfrEErspmP097vRdckDOHB9gz4o2eHFYxU=
Subject key identifier:   FF:7C:04:FD:2A:2F:BA:02:E7:EB:EA:13:08:D3:B5:9F:7A:8F:98:A5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DDA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_3wE_SovugLn6-oTCNO1n3qPmKU.roa
Signing time:             Tue 29 Sep 2020 09:55:04 +0000
ROA not before:           Tue 29 Sep 2020 09:55:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3546 (0xdda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FF7C04FD2A2FBA02E7EBEA1308D3B59F7A8F98A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:74:71:ea:cd:01:78:67:d2:f3:68:b6:c8:
                    01:c9:bc:d7:b3:3b:72:86:f2:32:df:a2:b1:49:54:
                    52:44:8c:74:21:2e:1c:c4:fd:e9:1e:69:7b:27:b4:
                    c3:9a:46:f7:d0:92:bc:83:e1:73:53:11:78:02:7a:
                    2d:2e:e0:6f:97:21:aa:50:fa:41:a9:7e:95:e1:a2:
                    c3:20:87:6f:43:33:d5:d9:2b:23:e6:d3:c5:64:71:
                    d4:40:dd:1f:a1:91:26:a3:cf:48:ca:c6:3c:12:0c:
                    a3:16:f0:15:21:54:9d:32:c7:45:83:b0:7c:a4:5b:
                    c4:81:44:8b:4f:fa:1e:3c:fb:a7:62:60:44:1b:be:
                    97:52:da:bb:3d:05:a2:e1:b5:c1:fd:22:03:87:93:
                    e9:a2:b0:13:09:d2:a0:ee:4a:e2:bb:d4:d9:fc:72:
                    1a:b0:8f:d7:e2:ac:e9:0d:3b:1d:c0:5a:90:c3:43:
                    1a:b4:3e:45:cc:14:74:d0:ef:27:85:fb:08:e3:6b:
                    82:1c:3b:fe:a0:bc:76:76:56:e4:24:24:48:67:1f:
                    ee:0c:db:5c:d3:a3:a2:77:d6:3d:84:1f:c3:97:4f:
                    89:b9:51:1f:c3:fd:50:3e:23:3a:70:dd:61:a1:3c:
                    eb:48:4a:95:1e:1e:5c:10:c2:d2:76:bb:2b:00:7e:
                    11:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7C:04:FD:2A:2F:BA:02:E7:EB:EA:13:08:D3:B5:9F:7A:8F:98:A5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_3wE_SovugLn6-oTCNO1n3qPmKU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         15:73:db:25:c3:43:2d:ff:6d:c6:49:02:a8:96:80:d1:c3:02:
         bb:40:6e:32:21:e0:a2:e4:af:7f:ef:9b:2e:57:89:b1:92:ab:
         c3:44:1e:e8:64:d0:3d:b5:93:28:9d:f9:89:7f:55:bb:a3:9e:
         4f:c8:29:ea:2a:e3:cb:28:b6:e8:b5:f4:3f:da:db:3d:dd:07:
         ff:6a:c6:1b:d2:82:a1:18:6a:aa:82:f5:01:da:cc:25:ac:4d:
         4e:05:bc:a6:59:13:ee:d3:ee:c4:14:d5:99:07:8d:a9:ae:bc:
         e6:fb:c4:ab:7d:f3:5c:f3:a3:c0:9f:4d:be:1b:2a:12:5f:22:
         f5:bd:d9:42:10:4d:21:3f:2f:ad:19:1d:a7:42:10:30:13:07:
         ec:76:90:f0:84:1d:9d:70:e6:f6:ef:9a:24:91:7c:48:cc:7e:
         99:ed:e8:27:4b:6b:72:b4:ab:bd:33:94:dc:22:28:b4:21:34:
         e0:f5:fd:b5:e1:b2:39:f8:c1:3c:f4:10:c0:d3:23:a5:b6:31:
         3a:f4:3c:bc:e0:59:05:35:4d:1f:00:82:17:83:8a:d5:32:13:
         dc:33:0b:0b:f4:7d:68:a5:11:82:5e:1f:ac:47:02:41:ea:52:
         67:f6:9d:b7:8c:a4:1f:2f:86:ff:58:37:88:04:5f:61:c6:c5:
         65:b9:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org