Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dyp-RoBTclgUCWTTO46reStRY0M.roa
File:                     dyp-RoBTclgUCWTTO46reStRY0M.roa (raw, json)
Hash identifier:          0p6UuhoPPug8z7ftmExbhS+WQiONcLw+cWq2r7BvdGI=
Subject key identifier:   77:2A:7E:46:80:53:72:58:14:09:64:D3:3B:8E:AB:79:2B:51:63:43
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E15
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dyp-RoBTclgUCWTTO46reStRY0M.roa
Signing time:             Tue 29 Sep 2020 09:55:18 +0000
ROA not before:           Tue 29 Sep 2020 09:55:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3605 (0xe15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:18 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=772A7E4680537258140964D33B8EAB792B516343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:58:e3:ee:e2:4e:31:bb:80:86:b8:e8:0d:
                    4c:e5:3e:53:5f:1c:5d:67:0c:df:6d:f2:b9:24:58:
                    4f:71:3e:55:59:b2:25:ed:8c:66:c0:d8:48:94:17:
                    dd:31:3c:9b:e3:f4:4f:d0:a2:e7:8f:fc:d2:20:07:
                    30:66:e0:91:1e:14:5d:c0:a0:8e:62:d2:2f:48:94:
                    dc:d2:6d:c0:76:fb:4b:ec:bc:4e:d2:53:9e:e4:22:
                    80:8a:11:eb:b0:3c:c6:4c:bd:b1:da:57:56:fe:e2:
                    36:0f:4f:e1:c3:0a:08:38:46:25:94:31:37:81:bc:
                    e2:f6:ad:58:67:78:07:b9:10:1c:93:e4:71:92:05:
                    6b:42:b1:53:03:08:40:01:d6:b0:86:1b:63:17:a6:
                    b0:09:ae:a3:76:c2:95:f1:aa:91:8e:a9:7d:01:2b:
                    0b:38:0d:e1:39:77:2b:83:34:23:27:da:2c:aa:fc:
                    c0:38:37:eb:10:16:73:b8:09:99:49:05:ca:af:49:
                    b8:02:0a:c0:81:8a:f2:59:6f:4f:0b:d1:fe:e1:15:
                    11:e0:91:42:1c:43:16:1a:99:98:4b:ce:b2:b2:0c:
                    ee:c2:03:71:fa:93:47:74:4e:ee:3a:42:46:1b:e1:
                    df:57:e9:3c:29:99:55:e7:cb:c8:bb:71:5b:2d:d2:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2A:7E:46:80:53:72:58:14:09:64:D3:3B:8E:AB:79:2B:51:63:43
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dyp-RoBTclgUCWTTO46reStRY0M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:74:75:f2:ff:c3:6a:f7:c4:d4:00:7f:aa:cb:c9:d6:03:22:
         b2:33:65:58:62:79:70:11:11:af:2e:48:73:e6:46:65:a7:41:
         1a:fe:9a:46:04:bf:b8:15:59:1f:f5:5e:ea:76:99:50:66:30:
         8e:f0:01:c9:27:0b:61:7f:f1:e4:00:22:dc:15:7a:23:e9:90:
         fc:0e:3a:80:76:0e:4a:51:f5:fe:46:16:13:14:20:a4:79:a3:
         e6:88:4f:16:a6:40:28:ba:86:2e:1a:38:b3:bb:39:b9:e8:cf:
         0f:15:58:61:10:b4:57:6f:25:eb:3a:6f:5b:e2:f7:2f:2d:f4:
         ac:fc:5b:f2:94:dd:8b:fb:a2:99:88:18:de:31:fb:85:e4:11:
         88:ff:5d:bf:96:70:1e:4d:9f:33:e2:f5:7f:af:5a:92:79:fc:
         27:0e:28:d0:1f:9f:e8:2d:db:65:6d:f2:10:ff:72:9d:d4:46:
         71:50:2f:3d:10:b8:38:b7:86:be:fb:48:36:f3:fe:28:77:7b:
         4a:27:3c:3a:e9:6f:1d:29:81:72:f4:6d:98:33:dc:33:e8:a3:
         1e:e7:40:cf:75:64:08:62:a3:34:97:04:d6:ec:86:a2:f3:2c:
         07:6b:3b:11:8c:d3:ab:73:9f:6d:ce:81:54:85:7d:2d:54:74:
         de:75:4a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org