Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vvAd6j9UH9Sa9khhQdzeEIqZCWM.roa
File:                     vvAd6j9UH9Sa9khhQdzeEIqZCWM.roa (raw, json)
Hash identifier:          51gSDqH8l3J2SsCkqziSAL4CSsxz+arE/QYCpyUNDsA=
Subject key identifier:   BE:F0:1D:EA:3F:54:1F:D4:9A:F6:48:61:41:DC:DE:10:8A:99:09:63
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       165B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vvAd6j9UH9Sa9khhQdzeEIqZCWM.roa
Signing time:             Sun 07 Feb 2021 12:09:56 +0000
ROA not before:           Sun 07 Feb 2021 12:09:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5723 (0x165b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:09:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BEF01DEA3F541FD49AF6486141DCDE108A990963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c8:46:9a:4f:97:9f:4b:bc:77:45:87:47:5b:
                    3d:87:3c:f7:c2:df:b3:46:07:c4:e2:ab:12:ea:f7:
                    28:9e:df:ce:bc:48:7f:96:8b:df:62:74:f7:62:15:
                    5b:78:83:4d:29:ce:1e:6f:43:0a:fc:4e:c7:d6:6e:
                    97:e1:3c:93:b3:3d:b5:d0:6d:2e:03:05:b1:e7:34:
                    18:85:e4:a0:0c:3f:c4:da:50:69:92:7c:ff:21:69:
                    b9:85:b8:e8:1d:ff:6b:9d:7c:bc:38:ac:d0:1e:1d:
                    0d:0f:e2:e7:24:b4:53:10:76:69:5c:3b:82:40:3b:
                    00:00:12:e1:ea:04:92:81:bb:65:14:94:d3:20:38:
                    cb:6d:48:19:dc:ca:6d:ea:11:af:74:7d:2a:4b:10:
                    90:2b:d2:91:e2:4b:89:ee:fb:f9:e1:68:0b:f1:d0:
                    f9:83:3b:89:67:29:6c:db:a6:e4:e4:2f:3f:ee:f1:
                    2f:a7:17:ba:f6:3a:0e:d6:8e:b2:64:96:11:01:7c:
                    d1:47:4a:62:fa:9a:a3:00:aa:97:38:f9:36:3d:af:
                    5c:ac:56:f5:4f:24:14:33:5c:15:28:8d:67:8f:7e:
                    e8:d5:10:cf:bd:0e:31:f5:c1:0d:e2:10:75:4c:43:
                    9d:b5:59:5f:ab:2c:d6:95:34:c8:aa:e2:86:ea:48:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F0:1D:EA:3F:54:1F:D4:9A:F6:48:61:41:DC:DE:10:8A:99:09:63
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vvAd6j9UH9Sa9khhQdzeEIqZCWM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:66:f6:92:3e:da:cf:60:6c:ae:f3:80:27:17:d1:29:cb:2e:
         d1:ad:f8:a2:24:57:40:52:5a:86:96:00:cd:2f:cd:d9:e7:23:
         17:8c:f0:fb:ff:fc:4b:0b:a9:2b:5a:0d:33:56:27:99:65:44:
         7f:f9:b4:c1:1d:23:40:c7:d0:48:62:76:fe:27:e4:a7:5f:89:
         9e:0c:c2:da:a3:59:75:ee:67:03:55:47:86:e1:7f:49:ca:ed:
         2a:44:19:e5:4f:21:c9:96:b1:08:39:d3:15:3f:fb:6f:fe:5a:
         80:3e:fb:57:dc:90:bb:f6:3a:9b:72:0c:39:e5:22:b0:b9:3d:
         3a:00:6c:dc:42:45:6a:59:5b:a2:df:0e:41:80:c1:c3:18:ff:
         27:00:08:76:2d:38:91:cd:5a:cf:8b:ea:c1:d0:2f:92:01:d5:
         32:37:79:90:32:0f:a9:fd:14:d2:91:29:87:9b:8b:b2:66:90:
         7a:f6:7d:95:f5:52:fb:81:c9:a0:a4:cb:49:e3:ff:b5:8b:62:
         93:a2:08:b8:ae:19:7e:d7:e5:80:58:8c:a2:2c:75:bb:44:ef:
         62:37:37:36:c4:5a:c3:7d:19:5e:00:dc:3c:06:09:38:5a:86:
         ca:49:43:11:18:c5:6c:23:56:4a:9f:d7:f0:36:1d:78:8d:76:
         59:2d:f4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org