Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gzlvxC8iLU788wYBTksPA-0dX_o.roa
File:                     gzlvxC8iLU788wYBTksPA-0dX_o.roa (raw, json)
Hash identifier:          vgNfp9UazCWozOrATnObskm7Y3ByN2CUX/2Ivlfi//c=
Subject key identifier:   83:39:6F:C4:2F:22:2D:4E:FC:F3:06:01:4E:4B:0F:03:ED:1D:5F:FA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E0C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gzlvxC8iLU788wYBTksPA-0dX_o.roa
Signing time:             Tue 29 Sep 2020 09:55:16 +0000
ROA not before:           Tue 29 Sep 2020 09:55:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3596 (0xe0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=83396FC42F222D4EFCF306014E4B0F03ED1D5FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:a6:f4:14:82:61:ad:54:47:0e:f4:e7:10:
                    a5:c3:93:88:17:97:87:98:7e:f1:a2:1e:53:0e:ac:
                    b5:b9:de:4e:c0:a4:47:ee:85:7e:02:3c:b5:a6:ad:
                    9c:8d:4e:62:62:07:4e:b7:6d:69:69:73:30:cc:6d:
                    0e:bc:c9:30:7c:b3:b8:42:e1:d0:c7:cf:5e:72:ad:
                    44:e7:3f:b5:fa:f0:ad:e3:e2:69:6f:90:57:f8:3d:
                    ca:c4:59:25:ce:2f:10:df:2f:63:e3:c5:3b:d1:5f:
                    4a:95:7b:50:86:89:d4:72:cd:5a:af:08:b7:65:93:
                    40:04:e3:86:5d:ba:3e:9a:cc:9d:36:aa:9e:7e:ea:
                    f3:03:da:2e:d4:53:18:36:3a:25:0a:4d:07:e3:56:
                    a4:d5:68:af:65:da:8a:46:42:ed:9f:e6:36:46:8b:
                    c6:82:ef:2a:3c:78:c2:c1:4e:5c:b4:6c:c2:e7:a9:
                    47:a7:e5:e6:e6:0d:08:6b:b4:08:c1:a6:2c:9b:65:
                    ba:ed:cd:c4:80:03:74:9f:61:8a:f6:91:63:39:3c:
                    5c:a4:c6:5b:06:2c:05:96:76:a6:c0:ca:21:4a:36:
                    e2:35:aa:5b:7e:61:c8:b2:39:b8:ce:1d:fd:da:93:
                    60:01:5e:cf:0c:0e:b1:e2:a5:d7:32:d8:f0:e8:5a:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:39:6F:C4:2F:22:2D:4E:FC:F3:06:01:4E:4B:0F:03:ED:1D:5F:FA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gzlvxC8iLU788wYBTksPA-0dX_o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:07:ec:22:e1:51:bc:5d:5d:c7:43:30:29:da:24:47:40:c0:
         c4:e5:76:6c:84:fa:43:23:88:7f:7c:9e:62:e6:a4:25:18:42:
         5c:31:67:5c:ee:31:7f:01:ec:b2:7b:74:a4:2f:d0:d4:e9:2a:
         c3:3d:0b:36:ae:09:48:f8:3e:37:82:32:e5:43:4b:3d:21:ce:
         ab:fc:2e:bb:52:77:19:99:e6:0d:a5:43:dd:b9:79:14:a8:4c:
         11:01:0e:d3:9d:de:0d:a7:b2:e0:0b:40:79:bd:88:d3:b1:10:
         7f:e5:bb:d0:30:00:1a:80:4c:a8:38:ac:c5:64:52:ed:b2:f9:
         5f:4b:15:9c:cf:80:2c:40:44:df:60:57:16:3e:90:c5:61:ac:
         0a:40:92:e5:16:64:a6:47:2a:9b:d3:08:1c:d8:97:7c:aa:6f:
         8e:f8:3c:c9:0e:73:de:d5:09:c3:38:a3:2a:50:b0:cd:d8:b5:
         cb:66:8b:63:20:b5:b0:d6:5d:a1:29:4a:6c:07:32:e5:25:ad:
         9d:51:ef:92:33:12:0c:7a:1a:bb:6a:b2:ff:f6:cd:49:08:95:
         a4:40:94:c2:f2:8d:c8:d4:c3:1a:a7:25:05:f7:c9:aa:cd:b6:
         cd:98:9f:5e:5c:a5:0a:e2:e9:78:b7:05:c7:d8:4a:95:f1:3a:
         9e:f8:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org