Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pKrPLfHHJzRFGfGwGn86r29ooVA.roa
File:                     pKrPLfHHJzRFGfGwGn86r29ooVA.roa (raw, json)
Hash identifier:          7bcS5QT6qfHoSC2cDgWv0NDIDDq4U38VRqcIy/4dec8=
Subject key identifier:   A4:AA:CF:2D:F1:C7:27:34:45:19:F1:B0:1A:7F:3A:AF:6F:68:A1:50
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F01
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pKrPLfHHJzRFGfGwGn86r29ooVA.roa
Signing time:             Tue 29 Sep 2020 09:56:23 +0000
ROA not before:           Tue 29 Sep 2020 09:56:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        211.76.118.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3841 (0xf01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A4AACF2DF1C727344519F1B01A7F3AAF6F68A150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ef:4b:04:63:af:95:58:f5:a5:bc:b6:f7:bd:
                    b4:90:4c:50:d6:7b:d1:93:fb:88:83:eb:d9:db:71:
                    5a:9d:c2:c1:b9:76:39:cb:cf:5d:f6:b2:4f:c6:3f:
                    ee:82:06:2d:af:a9:cb:4c:bd:9b:a0:71:39:b8:03:
                    c1:1e:d7:20:9c:f9:34:92:53:e0:dd:2b:9a:ab:f9:
                    54:f2:de:33:53:b4:59:15:c3:e5:1b:38:b3:b8:3f:
                    ff:68:4a:f9:47:00:72:0c:66:e5:76:c8:5f:92:0e:
                    49:d6:63:8d:b1:3f:74:04:10:ee:ba:d3:2f:65:a2:
                    05:96:d5:54:ee:4d:f0:9e:f5:19:5a:32:85:28:fd:
                    61:29:02:7c:c4:8a:18:2a:b8:5d:a4:ba:a8:19:82:
                    07:33:db:39:aa:cb:f9:a4:30:69:03:e2:bc:6b:32:
                    d8:20:e8:1c:20:14:17:95:07:44:15:1e:a2:77:70:
                    a2:0f:7a:ba:16:60:25:6c:ee:25:df:59:8a:dd:0d:
                    0d:03:4d:6b:0c:43:76:00:16:cd:18:cf:ce:62:b6:
                    a7:55:57:4e:18:4c:b4:28:ed:b8:20:76:93:d9:88:
                    f6:a2:79:32:45:e8:dc:78:1e:13:e0:01:e0:a0:78:
                    14:15:02:c7:d6:85:2f:33:1b:4f:01:10:ff:98:eb:
                    d6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AA:CF:2D:F1:C7:27:34:45:19:F1:B0:1A:7F:3A:AF:6F:68:A1:50
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pKrPLfHHJzRFGfGwGn86r29ooVA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:de:a1:81:94:23:1d:91:b0:20:48:73:7a:59:9d:d8:7b:
         49:65:8e:3a:e0:65:39:ef:4e:3c:f4:c7:7d:9a:d2:fa:cb:16:
         b2:de:51:69:22:53:d5:60:f9:cf:ec:58:ad:22:f5:d7:ba:ce:
         80:9c:78:f9:1c:27:eb:25:9a:76:ec:4e:ca:e0:7c:03:f5:7f:
         ca:a7:f5:bc:64:69:67:5e:5c:c2:0e:19:8f:d5:55:ff:b7:33:
         58:e7:8c:14:9e:70:15:5f:b5:ae:05:63:a1:37:e5:16:86:3a:
         31:bb:9d:97:58:56:73:b9:41:7e:ce:1f:29:24:f7:33:15:31:
         89:de:4a:66:8e:44:c4:58:71:aa:8b:c2:17:2d:ef:15:cc:4c:
         c9:08:fe:62:57:86:c5:81:d0:46:c2:09:c7:65:83:c0:86:78:
         d3:84:dc:ec:03:52:57:6c:60:b6:53:5e:dc:a2:57:f6:1c:ee:
         9c:19:b1:90:05:92:df:5b:3f:0d:dd:aa:c8:f6:51:2d:62:ea:
         f4:81:d0:f6:7c:7a:c2:80:b3:c2:91:8f:37:55:7f:13:47:79:
         b1:06:1e:be:56:51:51:1e:f6:94:33:2f:16:e3:83:90:9f:99:
         7a:22:06:10:46:c9:4c:bf:c3:57:2c:67:59:f5:cf:94:d8:c7:
         46:23:7b:54
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDwEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MjNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE0QUFDRjJERjFDNzI3
MzQ0NTE5RjFCMDFBN0YzQUFGNkY2OEExNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD670sEY6+VWPWlvLb3vbSQTFDWe9GT+4iD69nbcVqdwsG5djnL
z132sk/GP+6CBi2vqctMvZugcTm4A8Ee1yCc+TSSU+DdK5qr+VTy3jNTtFkVw+Ub
OLO4P/9oSvlHAHIMZuV2yF+SDknWY42xP3QEEO660y9logWW1VTuTfCe9RlaMoUo
/WEpAnzEihgquF2kuqgZggcz2zmqy/mkMGkD4rxrMtgg6BwgFBeVB0QVHqJ3cKIP
eroWYCVs7iXfWYrdDQ0DTWsMQ3YAFs0Yz85itqdVV04YTLQo7bggdpPZiPaieTJF
6Nx4HhPgAeCgeBQVAsfWhS8zG08BEP+Y69YhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUpKrPLfHHJzRFGfGwGn86r29ooVAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3BLclBMZkhISnpSRkdmR3dH
bjg2cjI5b29WQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THYwDQYJKoZIhvcNAQELBQADggEBAHr23qGBlCMdkbAgSHN6WZ3Ye0lljjrgZTnv
Tjz0x32a0vrLFrLeUWkiU9Vg+c/sWK0i9de6zoCcePkcJ+slmnbsTsrgfAP1f8qn
9bxkaWdeXMIOGY/VVf+3M1jnjBSecBVfta4FY6E35RaGOjG7nZdYVnO5QX7OHykk
9zMVMYneSmaORMRYcaqLwhct7xXMTMkI/mJXhsWB0EbCCcdlg8CGeNOE3OwDUlds
YLZTXtyiV/Yc7pwZsZAFkt9bPw3dqsj2US1i6vSB0PZ8esKAs8KRjzdVfxNHebEG
Hr5WUVEe9pQzLxbjg5CfmXoiBhBGyUy/w1csZ1n1z5TYx0Yje1Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:40 2024 by rpki-client on console-ams.rpki-client.org