Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eXlKfrAbAK9dPWoEl3gm87DFFgk.roa
File:                     eXlKfrAbAK9dPWoEl3gm87DFFgk.roa (raw, json)
Hash identifier:          WjFJ76huDsLbngyJau88LguWbhkILT7oxdlKAq4uof4=
Subject key identifier:   79:79:4A:7E:B0:1B:00:AF:5D:3D:6A:04:97:78:26:F3:B0:C5:16:09
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F0D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eXlKfrAbAK9dPWoEl3gm87DFFgk.roa
Signing time:             Tue 29 Sep 2020 09:56:26 +0000
ROA not before:           Tue 29 Sep 2020 09:56:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3853 (0xf0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=79794A7EB01B00AF5D3D6A04977826F3B0C51609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:30:f7:ee:64:af:30:b1:f8:75:92:d0:a8:
                    c6:e0:97:92:0d:d0:2b:99:5e:8c:c9:e7:b8:29:f6:
                    e7:9f:88:59:60:37:73:d0:25:3f:3d:8e:8f:da:f9:
                    57:0e:a8:b0:a6:fd:37:e9:a0:54:db:34:f8:af:e6:
                    39:48:07:45:9c:f2:a8:94:bc:c3:eb:06:b8:4d:07:
                    b2:51:71:6d:41:93:19:60:bb:33:34:99:b3:64:d0:
                    b7:5f:bd:70:39:85:83:91:2d:b9:3f:a4:72:bc:de:
                    4a:a6:68:fe:6a:c8:fc:21:71:ab:d8:ed:98:0f:e3:
                    d0:be:bb:99:8b:48:f5:24:b3:61:5f:d5:13:13:90:
                    21:ca:27:0f:bb:b8:a4:7f:93:58:47:43:1e:91:6a:
                    00:ef:cb:b1:0d:dc:6b:4e:e4:2f:52:44:bf:3a:d3:
                    3e:5c:d4:6e:69:e8:e8:58:43:86:37:c9:4c:29:b3:
                    07:e0:4d:be:fb:e3:f4:2f:64:3c:b9:5d:34:6b:b5:
                    ba:7c:a3:13:a7:c4:35:42:65:21:a0:02:56:85:94:
                    ea:0b:b5:b8:d9:80:57:79:99:ea:79:e6:f9:26:4b:
                    ec:3f:ee:26:47:a9:ec:b1:8a:cf:25:c7:84:92:49:
                    11:ec:bf:b2:6c:30:0a:af:14:f4:d1:ff:bd:cd:87:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:79:4A:7E:B0:1B:00:AF:5D:3D:6A:04:97:78:26:F3:B0:C5:16:09
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eXlKfrAbAK9dPWoEl3gm87DFFgk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:69:32:1c:e1:f1:06:1f:e4:da:3c:ac:c1:03:0c:99:79:51:
         6b:07:3b:16:fb:83:10:c5:de:67:65:db:02:6e:3b:b5:00:ce:
         b1:17:54:3d:9e:25:ae:49:99:e2:20:33:84:c7:ee:a0:a7:b6:
         1c:1a:d9:1f:b8:cf:e7:57:50:a2:e5:e8:95:10:4c:07:07:d1:
         86:aa:6e:17:8f:8a:d0:b6:8c:3d:9d:89:22:b8:44:01:a7:79:
         f6:eb:ac:4e:ae:0b:99:8c:47:59:3b:7a:76:36:fb:b7:b5:2e:
         2a:3f:f2:ce:ba:09:14:36:62:1c:76:b0:43:82:b9:66:3d:be:
         cd:79:51:67:d0:c5:21:88:c7:ac:98:8c:90:4f:da:5a:f5:dc:
         a9:bf:44:15:53:82:4a:81:cf:4f:68:60:6e:85:07:32:bb:0a:
         e8:94:a2:19:25:ad:fe:9b:66:e2:03:b6:56:a8:25:11:34:ad:
         3f:eb:8a:0b:0c:6d:c4:20:89:e9:f1:5e:6f:3c:19:e5:45:6e:
         7e:d2:d8:05:fe:f3:4a:a8:ea:7d:41:11:02:51:2c:b0:aa:85:
         f4:41:ac:30:7f:7e:c2:c2:33:65:6e:02:1c:48:f4:60:0a:0e:
         76:bb:07:32:a0:77:21:38:df:d1:0d:e0:32:ad:3a:e4:10:ff:
         75:f5:d1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org