Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sc7eu_KVhvDbeqzMvmzMy1fUmU0.roa
File:                     sc7eu_KVhvDbeqzMvmzMy1fUmU0.roa (raw, json)
Hash identifier:          t546314CQ7floDFwy28qloNq+9SRPMdBk810Mck9bak=
Subject key identifier:   B1:CE:DE:BB:F2:95:86:F0:DB:7A:AC:CC:BE:6C:CC:CB:57:D4:99:4D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sc7eu_KVhvDbeqzMvmzMy1fUmU0.roa
Signing time:             Thu 15 Sep 2022 02:52:16 +0000
ROA not before:           Thu 15 Sep 2022 02:52:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        211.76.115.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B1CEDEBBF29586F0DB7AACCCBE6CCCCB57D4994D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:e8:07:1b:c3:5a:a6:b8:94:b7:94:ca:e2:
                    86:f7:b3:04:0d:bf:b4:0c:16:40:59:a3:db:e0:9a:
                    f9:11:b3:41:26:4a:c4:d5:df:a3:82:3e:89:ed:71:
                    8f:88:49:51:84:d1:00:1e:74:0b:b1:5f:9b:64:cd:
                    57:74:bd:e4:e8:71:24:2f:b8:8e:fe:e7:86:f4:71:
                    8f:79:a8:fc:90:2a:b9:96:d5:63:9c:2e:c4:d8:a6:
                    69:e3:12:6e:30:f2:09:fb:ca:0f:ef:eb:f6:a4:ec:
                    19:a1:58:5d:e5:da:2f:c4:e8:d9:ad:97:ea:e1:95:
                    df:d5:75:bb:78:9b:4a:ec:b8:aa:e0:11:9b:09:9b:
                    13:95:fc:d8:cd:e2:df:65:b2:cc:f0:68:f5:af:00:
                    8e:e2:69:c4:40:73:2a:14:66:06:d3:54:e2:e0:d0:
                    99:ff:0c:aa:1e:b8:1c:c9:f7:d6:4c:3a:d9:23:52:
                    1a:4d:1d:80:95:d8:27:c4:7d:81:0c:b6:33:78:a4:
                    5a:6b:aa:31:42:16:85:83:5e:30:0b:02:cd:d5:90:
                    02:55:c5:ca:1b:6d:c4:38:c9:86:2b:ae:8a:22:4f:
                    af:96:ca:f9:cd:41:a9:35:33:c0:20:5c:c2:fb:62:
                    fc:c2:60:90:3b:ae:db:06:8c:b2:20:38:1b:d0:c9:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CE:DE:BB:F2:95:86:F0:DB:7A:AC:CC:BE:6C:CC:CB:57:D4:99:4D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sc7eu_KVhvDbeqzMvmzMy1fUmU0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:e5:a1:5a:8d:21:0c:20:89:df:1e:57:3e:7a:4e:c1:52:
         5f:fc:86:3b:d4:90:9f:0d:31:06:09:13:db:01:19:e0:c4:55:
         57:6f:88:b0:40:47:dc:93:1d:a6:f5:83:b4:9a:62:5d:9d:9d:
         be:fd:9b:93:d2:53:6f:fa:a2:72:1e:b4:b0:58:09:cd:3f:8a:
         20:50:25:38:c3:84:79:4f:1f:6e:61:8b:50:91:51:7f:55:90:
         f4:d1:33:07:27:fe:e8:8c:89:07:d5:3a:7c:de:27:7c:60:fd:
         07:72:7d:05:03:fa:6e:09:7f:87:d8:b1:23:78:be:43:c0:74:
         c9:3a:12:d8:42:51:50:b5:84:c0:68:76:29:fc:64:ed:74:fa:
         5e:cf:be:09:39:2c:e4:92:0c:78:8d:54:59:41:6b:16:95:11:
         36:3e:62:8a:1a:c9:26:8e:46:bd:dd:fd:c4:1e:57:01:8d:0b:
         92:77:46:9c:2b:26:43:81:c2:45:90:75:b4:46:a4:b2:81:af:
         d6:11:a2:31:5f:09:39:a8:16:06:c5:0f:cc:51:1a:dc:37:2f:
         1c:07:93:37:11:6a:d1:fa:a3:a0:85:36:74:2b:a1:5f:ac:b6:
         6e:3a:c7:29:7b:0c:f3:ce:08:c9:a7:15:0d:ae:cb:e5:42:37:
         5c:27:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org