Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xMJw_0Zb4r4F30iSQE_ByxHt52Y.roa
File:                     xMJw_0Zb4r4F30iSQE_ByxHt52Y.roa (raw, json)
Hash identifier:          79Rqem90B2jpn0yoyMsqOPzb71u+GU/qoqp2FY/HkiA=
Subject key identifier:   C4:C2:70:FF:46:5B:E2:BE:05:DF:48:92:40:4F:C1:CB:11:ED:E7:66
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1469
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xMJw_0Zb4r4F30iSQE_ByxHt52Y.roa
Signing time:             Sun 07 Feb 2021 11:58:33 +0000
ROA not before:           Sun 07 Feb 2021 11:58:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.194.144.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5225 (0x1469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:58:33 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C4C270FF465BE2BE05DF4892404FC1CB11EDE766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:68:47:00:88:7b:43:0a:6f:4d:c9:4e:b4:94:
                    ef:8c:a0:2e:5d:10:2b:5b:43:e4:1d:9a:a3:d1:59:
                    19:60:ae:e7:69:86:97:93:32:64:83:f8:9d:94:ab:
                    13:ba:2e:d0:d1:05:91:19:aa:d1:46:a4:36:ee:70:
                    7f:94:56:93:04:13:30:c6:fd:8f:93:38:03:ea:62:
                    ba:25:cb:33:35:15:9f:20:31:c5:5d:14:85:f6:93:
                    fa:c6:35:89:0c:cc:6e:fb:ca:0f:2e:ff:1c:8c:52:
                    91:a3:80:f5:70:e6:7b:03:d6:43:65:19:68:92:25:
                    0d:52:2e:aa:e3:d0:c6:4d:a8:e2:a6:20:08:0c:57:
                    48:c9:fd:2f:fb:b2:25:1d:83:6b:ca:dd:4f:c7:2c:
                    0c:0e:88:ed:0e:c1:36:2a:0d:c0:97:2d:dd:af:37:
                    5c:b7:08:70:71:8f:30:2c:f2:03:55:61:42:f3:c5:
                    79:2d:4b:2d:87:e6:8f:2c:ff:7f:1a:e7:e6:d4:f7:
                    20:f3:55:29:58:a0:49:29:a3:25:55:b1:9d:e8:41:
                    f8:e1:2e:79:99:04:9e:09:c8:74:1e:99:45:07:67:
                    1d:6e:8f:b5:20:69:f5:b6:db:51:c3:40:85:23:87:
                    c3:cc:fe:3e:61:55:38:5b:26:8d:cc:bd:fb:f8:89:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C2:70:FF:46:5B:E2:BE:05:DF:48:92:40:4F:C1:CB:11:ED:E7:66
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xMJw_0Zb4r4F30iSQE_ByxHt52Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:da:d1:33:e9:1f:7f:78:bc:4f:a7:08:f4:16:35:35:38:92:
         0b:99:2f:ef:fa:ed:1d:89:81:d8:d7:48:3d:4a:eb:fa:df:1b:
         d7:f3:ce:db:70:69:14:55:37:45:a5:cd:ea:3d:3b:f1:ef:1f:
         77:0f:50:18:88:34:74:e6:e8:d5:b4:0f:d9:7d:db:e6:92:84:
         5b:59:c5:1f:ed:27:5a:68:e2:24:75:c9:c3:0f:61:02:ca:83:
         fb:76:b5:50:c1:58:1c:78:d1:41:a7:c5:ea:fd:55:6c:fb:bf:
         54:f7:bf:01:2c:44:ae:e1:ce:56:14:1f:bf:de:2f:30:08:e3:
         7e:45:88:b5:d9:2d:83:52:21:dd:e0:d7:5b:ef:32:96:08:e8:
         8f:b5:9b:20:07:33:73:31:1c:cc:ae:22:93:33:c7:84:f3:7d:
         c7:30:b6:90:4f:81:38:35:cb:1e:b1:5c:18:95:61:95:1a:6d:
         7e:22:ef:c3:a1:13:3a:74:37:e3:1c:8b:a3:68:81:5d:e8:10:
         a5:41:e2:bf:41:06:68:99:dc:9f:74:3c:e5:0e:01:96:80:df:
         4c:6c:19:92:7c:04:2d:2b:2d:6f:c9:c9:0b:65:e2:86:90:1f:
         50:0c:cc:74:a0:6e:03:bb:76:77:de:54:8b:9f:c9:7b:a4:ed:
         d9:5a:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org