Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/th98lYH0-o4vqTTKEg59jQ0nftQ.roa
File:                     th98lYH0-o4vqTTKEg59jQ0nftQ.roa (raw, json)
Hash identifier:          S5Anx2s6gXbN35haHwmbGXfA55B25h//wg6JdGbJHjQ=
Subject key identifier:   B6:1F:7C:95:81:F4:FA:8E:2F:A9:34:CA:12:0E:7D:8D:0D:27:7E:D4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0EA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/th98lYH0-o4vqTTKEg59jQ0nftQ.roa
Signing time:             Tue 29 Sep 2020 09:55:58 +0000
ROA not before:           Tue 29 Sep 2020 09:55:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3744 (0xea0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B61F7C9581F4FA8E2FA934CA120E7D8D0D277ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:5b:b4:39:c1:7f:d7:ab:c9:e7:5d:76:57:
                    ed:df:3d:a2:da:f2:c7:59:ef:6d:59:d2:cd:70:f1:
                    a9:05:c2:38:56:6d:44:b8:3e:69:a8:59:63:66:96:
                    f6:b0:35:4b:00:02:7e:2f:5f:3f:69:bf:cb:87:b4:
                    f5:29:2d:bd:75:9b:10:69:56:da:f7:8e:2c:73:2c:
                    6a:31:60:cc:5f:2c:1f:99:ff:03:75:41:44:66:d6:
                    2c:7d:ab:f2:1f:fc:85:db:57:42:0c:06:80:38:00:
                    30:7a:be:e0:b2:0c:64:b6:30:0d:1d:f2:3a:b1:e8:
                    ef:fc:51:22:84:9a:35:07:89:6e:b3:05:3a:d9:81:
                    dd:38:55:98:9a:be:5d:12:90:ef:cc:e8:00:2e:b8:
                    0e:4f:d7:38:06:fe:a6:5b:76:a9:fb:cb:97:70:31:
                    a7:8b:9e:57:19:82:74:17:c7:ce:6d:fc:6d:7f:32:
                    97:69:c1:39:fe:7f:bb:f0:b9:b8:2b:03:61:88:b7:
                    4a:e9:5d:55:f3:1a:57:6a:72:7d:4b:69:ae:02:54:
                    da:f8:af:f4:06:61:18:d3:21:16:58:bb:31:74:e6:
                    1b:4b:5b:05:c2:2d:f8:35:6f:24:e6:12:19:2b:d5:
                    c3:44:57:95:33:cf:61:4d:00:b6:0b:21:18:ad:a6:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1F:7C:95:81:F4:FA:8E:2F:A9:34:CA:12:0E:7D:8D:0D:27:7E:D4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/th98lYH0-o4vqTTKEg59jQ0nftQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:6d:1d:d1:8a:7a:28:f5:36:4d:f8:57:ec:b4:21:2f:94:3f:
         e2:ae:f6:15:0b:0e:7b:8b:61:38:5a:9c:ad:81:7a:7f:99:a1:
         d3:a0:e2:37:39:f7:de:a0:1e:f8:7d:de:0f:bb:cb:c3:5e:d4:
         ec:4f:d2:2b:a7:0d:44:d4:a2:a9:c8:28:20:61:5e:a6:e1:c7:
         44:bd:e2:50:02:db:a5:a1:1c:8d:b9:96:ba:d6:4f:a3:35:f3:
         2e:8e:da:b9:dc:a3:5d:ef:a1:8b:51:eb:76:8a:cc:1d:04:80:
         62:fe:54:ed:1f:48:68:09:9e:cc:24:c7:01:b5:5f:77:09:c5:
         e3:19:34:b1:c7:fd:af:58:0c:13:33:1b:f5:1d:89:5c:85:b5:
         ef:66:cb:07:3c:5f:d6:76:c8:b9:18:f2:73:60:33:45:e9:6b:
         06:78:c1:61:b8:2a:c3:47:e5:20:19:b7:89:17:c5:ca:0e:c1:
         07:b3:bb:f0:9c:e6:6f:4b:ee:96:6e:fe:32:ce:01:e6:b2:42:
         54:6f:54:fd:e7:67:1e:09:bf:0e:0b:1a:d7:12:af:f4:10:b0:
         92:b0:a0:94:77:49:9e:33:7e:6b:ba:85:34:76:17:e0:f9:ec:
         3a:bd:f0:fa:10:b1:6d:b9:26:a9:1c:0c:20:8e:ed:5a:20:8e:
         93:ac:20:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org