Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ayq4o12GixDB2huzB9WFfnAzzAo.roa
File:                     ayq4o12GixDB2huzB9WFfnAzzAo.roa (raw, json)
Hash identifier:          L9JJoNKz2YGvpDLLDSsJ6Zt2VgBi1Bte1k6NphVExTg=
Subject key identifier:   6B:2A:B8:A3:5D:86:8B:10:C1:DA:1B:B3:07:D5:85:7E:70:33:CC:0A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ayq4o12GixDB2huzB9WFfnAzzAo.roa
Signing time:             Sun 07 Feb 2021 11:59:57 +0000
ROA not before:           Sun 07 Feb 2021 11:59:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5315 (0x14c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:59:57 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6B2AB8A35D868B10C1DA1BB307D5857E7033CC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:22:72:cf:d0:01:a9:f2:82:5c:da:ef:1f:
                    8a:14:d7:16:6c:e1:5d:59:60:a3:09:ff:d5:37:53:
                    49:f1:8c:b0:d7:47:ae:b9:42:a1:bc:a1:49:64:41:
                    65:81:2f:47:cb:1e:3e:c2:5c:cd:19:cd:27:f6:a5:
                    fa:d1:69:5e:66:c4:35:cd:df:57:e1:21:de:9c:62:
                    05:fd:57:3e:fb:ca:a4:c8:bc:ae:ea:23:51:5a:de:
                    9b:b0:8a:af:f3:9a:67:3f:05:7f:81:a3:01:b4:c7:
                    38:de:b0:b7:93:e4:03:58:94:e2:5f:e4:d2:14:a3:
                    0a:11:50:82:69:23:3e:83:4c:f5:48:84:a1:a3:6d:
                    da:c0:bc:ac:49:e5:d9:52:af:3d:13:72:cb:c5:78:
                    36:8e:26:70:c5:66:37:31:0f:5c:38:ce:c9:f4:b3:
                    25:18:39:11:89:a3:5d:5e:50:dd:b3:25:18:26:6d:
                    db:b5:3a:d0:93:45:fb:2d:73:e1:b0:cb:1d:24:44:
                    57:8e:06:4a:8f:01:bc:9a:71:a6:43:99:01:34:59:
                    bd:47:f6:28:ab:ac:9a:4b:cf:6f:f2:4e:eb:8e:db:
                    7e:8b:bf:44:c0:64:3a:e6:ef:92:7c:7a:57:8e:a0:
                    79:ab:e3:b9:30:d1:f5:08:47:98:78:bf:62:f8:aa:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2A:B8:A3:5D:86:8B:10:C1:DA:1B:B3:07:D5:85:7E:70:33:CC:0A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ayq4o12GixDB2huzB9WFfnAzzAo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:a8:86:95:dc:01:dd:5b:4c:08:39:66:99:50:5b:46:3a:9c:
         62:bf:6d:b2:b0:dc:c4:70:4e:46:c2:2b:ea:87:2d:0b:fe:6a:
         24:64:44:57:a1:3e:dd:51:49:21:0e:7e:42:7d:4d:2f:23:49:
         0b:68:f5:a4:43:cf:81:32:a8:52:f2:4f:d2:ed:1c:7a:0c:e4:
         c9:8e:fa:b7:12:db:d4:aa:76:a1:94:b6:fb:00:e6:c5:1a:4d:
         be:15:af:6a:9a:1d:8d:9b:12:31:7f:88:05:a3:61:cd:04:f4:
         fd:eb:5e:1b:0a:af:ec:00:c2:00:6c:43:a2:b9:eb:20:fd:ea:
         cf:5c:81:72:a8:b1:f7:5c:25:cd:47:75:47:b9:d5:59:4d:3e:
         c0:5b:b3:26:28:db:b9:44:f0:cb:02:91:86:3a:69:01:76:bb:
         ce:e0:16:6e:a7:34:0b:5a:df:ab:3d:58:74:d0:24:1a:fb:10:
         08:0d:42:71:22:78:ef:54:06:eb:21:86:7c:28:07:8e:74:bd:
         89:02:4c:a2:58:29:8e:97:7a:1f:53:a7:e3:2b:47:e0:48:d5:
         4d:7a:c9:6e:cd:76:70:34:13:41:15:84:ad:51:92:81:38:d4:
         10:e0:a6:4c:89:7d:51:5f:3d:ef:65:68:6e:52:09:2e:3e:98:
         d3:28:60:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org