Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/__KfzCqeVXBRP339WCc1HyOvhQU.roa
File:                     __KfzCqeVXBRP339WCc1HyOvhQU.roa (raw, json)
Hash identifier:          EZI8zqdpl6sejkmwUKzeSIY7Z0xkjbMAXxmXs1yHnXE=
Subject key identifier:   FF:F2:9F:CC:2A:9E:55:70:51:3F:7D:FD:58:27:35:1F:23:AF:85:05
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F60
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/__KfzCqeVXBRP339WCc1HyOvhQU.roa
Signing time:             Tue 29 Sep 2020 09:56:53 +0000
ROA not before:           Tue 29 Sep 2020 09:56:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3936 (0xf60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FFF29FCC2A9E5570513F7DFD5827351F23AF8505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:36:93:c8:47:54:a0:c2:a7:9f:5b:4f:a0:
                    6a:a9:a7:92:ed:66:84:29:1b:77:80:8a:4f:09:9c:
                    4d:5b:ea:78:57:10:b7:8e:de:84:1f:b1:70:65:01:
                    5c:e5:95:63:4f:fd:75:79:b6:12:cc:7d:49:ec:0f:
                    dd:fb:a2:9d:ff:71:7e:cf:84:44:7f:ea:79:c7:42:
                    d9:53:f9:dd:aa:29:2f:32:1a:9a:59:8b:ce:ac:83:
                    fa:bf:f3:da:2d:ea:ee:da:2f:7c:3d:57:3d:5b:3b:
                    25:3a:b4:77:8e:7a:7e:9d:ae:e9:46:15:8b:11:41:
                    47:fe:ce:a9:87:ec:26:95:fb:35:ea:10:dc:05:13:
                    a8:65:ac:07:b7:cb:88:2e:1b:14:b8:fd:68:8a:35:
                    d6:50:a6:ae:31:f3:d8:b5:47:62:0f:6e:70:8d:e8:
                    ef:52:4f:f5:a1:83:ee:a0:7f:92:1c:12:98:5e:99:
                    c1:84:4b:eb:08:0f:6e:a0:48:22:a8:98:f3:6a:40:
                    50:38:07:79:4f:a9:2f:e0:28:60:48:0e:f9:c4:b6:
                    5c:df:35:08:ec:92:19:b2:3e:5b:68:bf:8e:5a:26:
                    70:ae:3d:a9:9d:2b:d9:3b:03:13:fd:ef:40:44:97:
                    4c:07:8c:47:50:5c:74:21:45:25:14:c9:d9:4b:c9:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F2:9F:CC:2A:9E:55:70:51:3F:7D:FD:58:27:35:1F:23:AF:85:05
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/__KfzCqeVXBRP339WCc1HyOvhQU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:66:ce:cf:83:a2:e4:f9:be:28:b9:90:25:fe:d1:78:9f:01:
         03:b9:a1:49:81:b2:17:75:07:c5:50:7e:1a:21:4d:52:4a:54:
         0a:ba:b9:d5:12:3b:6c:74:21:71:2f:62:8d:b0:45:f0:f8:07:
         1d:71:d6:d9:23:81:fd:14:02:c2:50:dd:79:81:2b:a1:8c:54:
         83:a1:84:20:c9:92:f9:af:60:b1:22:c3:9c:82:f0:a9:69:71:
         a0:1a:dc:60:5a:ae:51:f9:6b:07:55:7e:29:4a:9a:d1:1a:93:
         6a:64:bb:6a:4f:c1:c8:b5:3a:cf:4c:6c:87:35:bd:21:79:b9:
         25:74:64:e8:ad:56:fa:71:be:6c:fd:48:df:a5:d7:b5:a2:8b:
         4e:62:51:f4:12:70:54:55:c5:68:11:4d:54:a7:93:f3:2b:28:
         b8:24:78:fd:b8:8e:ea:3c:a7:bc:b5:5e:aa:c1:c6:fb:4f:b5:
         d4:ff:66:30:0b:7a:11:d8:a7:07:49:77:b6:df:52:1c:45:92:
         f9:94:90:b3:57:f7:49:f5:2b:23:fb:53:55:6b:98:c9:34:61:
         2c:b1:ce:aa:b6:dc:0e:32:a8:42:bc:76:8d:63:b9:62:97:c1:
         9f:1e:35:56:72:bb:7d:52:c5:45:35:97:0e:6b:bd:5e:7f:47:
         ff:c3:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org