Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dpq2YGsmYEcV52unE9psZJvIx9s.roa
File:                     dpq2YGsmYEcV52unE9psZJvIx9s.roa (raw, json)
Hash identifier:          FIO57Sl/0pCVR5nBFTQwGsqpvFmr8z0WYOaffKnxlxE=
Subject key identifier:   76:9A:B6:60:6B:26:60:47:15:E7:6B:A7:13:DA:6C:64:9B:C8:C7:DB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BD6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dpq2YGsmYEcV52unE9psZJvIx9s.roa
Signing time:             Wed 29 Sep 2021 02:47:04 +0000
ROA not before:           Wed 29 Sep 2021 02:47:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7126 (0x1bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=769AB6606B26604715E76BA713DA6C649BC8C7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:43:55:ef:6a:fe:7b:33:c1:ed:fd:5d:2e:
                    02:6c:e4:fd:d1:31:5d:53:3f:78:7d:f8:9c:b4:2e:
                    20:c7:2d:82:29:c5:79:72:94:de:af:d2:b8:ac:08:
                    7d:fa:cf:10:26:a1:32:7a:ec:82:60:37:9a:57:54:
                    ca:33:9d:7b:4b:e6:9a:b9:15:d5:b9:d8:46:71:80:
                    21:1e:78:30:26:97:6f:0b:96:c6:58:c0:45:04:df:
                    b6:d2:24:09:6e:9b:6b:e8:28:cf:d1:c6:25:06:70:
                    57:0a:67:6a:0d:fb:f6:9f:bb:72:ae:e4:f7:f0:1e:
                    da:4a:ff:33:54:f9:bd:2f:eb:ad:eb:4e:58:84:5e:
                    fa:f8:59:04:35:47:62:04:9b:d0:6d:11:fe:3e:03:
                    de:66:72:07:84:12:30:f1:b6:20:fd:91:70:96:a6:
                    95:b9:13:e7:ca:55:2c:ac:73:6b:d7:99:35:7d:3d:
                    4b:11:1f:e2:7c:17:93:9e:b2:37:8f:80:1b:de:85:
                    ef:df:ba:3e:60:f7:55:94:26:2d:cf:39:ea:a0:95:
                    3f:60:1c:5a:29:22:78:00:b6:4c:c3:0c:61:c0:5e:
                    3a:59:3b:82:37:c1:2e:be:50:22:9a:78:06:f0:d1:
                    a5:8e:1b:0b:8f:5a:ad:19:69:75:48:97:db:a4:bc:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:B6:60:6B:26:60:47:15:E7:6B:A7:13:DA:6C:64:9B:C8:C7:DB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dpq2YGsmYEcV52unE9psZJvIx9s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:2e:06:df:21:91:53:0e:e5:81:25:90:b8:ad:4a:04:68:ad:
         29:55:6e:65:f7:72:92:50:fc:84:ed:36:0c:e4:74:f0:f4:61:
         e1:e6:a4:13:a6:49:ac:50:0b:f9:53:d9:28:b7:c4:27:f6:79:
         f3:3b:19:b1:3a:30:03:44:0c:38:f5:03:36:8b:4e:a2:2d:96:
         70:bf:8d:70:72:b5:8f:08:27:76:a0:25:f9:28:0c:3a:10:90:
         72:d5:09:f2:eb:1b:2b:1c:14:8f:54:17:33:54:43:4e:47:e5:
         cd:9a:86:b9:c0:7b:5d:47:8a:9a:0c:b9:fc:ba:2a:40:5a:de:
         0c:5d:e5:5f:c2:46:aa:54:30:2f:69:9d:d8:24:52:59:b8:8d:
         d2:f6:90:9d:e6:47:c7:36:b4:f6:fa:38:f5:62:69:5d:5a:8a:
         c7:23:37:8c:09:04:d7:3b:fa:6d:ae:ef:42:42:ba:a4:a5:68:
         43:19:98:8c:17:d4:b3:5e:2e:f1:8b:0c:22:84:93:89:a0:ea:
         62:7a:53:1c:1b:b6:00:7f:09:31:48:0b:08:19:84:a4:87:fe:
         a3:38:11:8a:73:3d:24:4e:58:7f:fa:07:3f:52:ce:65:96:b3:
         ab:c1:b3:0e:d1:3d:f7:7d:12:2c:d6:f7:36:b0:21:23:1e:3d:
         d2:2e:33:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org