Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-QiIPqf7m4q02n1WQ4RoES_Z4ko.roa
File:                     -QiIPqf7m4q02n1WQ4RoES_Z4ko.roa (raw, json)
Hash identifier:          V7piXBQKbGEg00zjTARzyvrXZNfFb0Wu2wcKBDRjnJ0=
Subject key identifier:   F9:08:88:3E:A7:FB:9B:8A:B4:DA:7D:56:43:84:68:11:2F:D9:E2:4A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-QiIPqf7m4q02n1WQ4RoES_Z4ko.roa
Signing time:             Thu 15 Sep 2022 02:52:55 +0000
ROA not before:           Thu 15 Sep 2022 02:52:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.223.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F908883EA7FB9B8AB4DA7D56438468112FD9E24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:52:b8:d4:f0:ea:61:20:ef:bb:08:28:29:
                    d0:d0:1d:98:2c:dc:a1:87:9c:ca:25:88:82:98:7d:
                    8f:01:6f:89:d6:11:f6:1f:91:17:26:cd:9b:8d:80:
                    15:dd:5f:10:a7:4e:1f:30:69:ee:51:44:4e:ee:78:
                    52:35:be:a5:f1:c6:9c:36:e7:09:a1:56:99:c3:35:
                    b8:53:28:fc:71:d3:e4:b7:8c:b3:7a:29:ae:e4:10:
                    f9:9b:bd:d3:12:18:09:09:3a:47:65:d5:9c:fa:13:
                    a5:ad:88:4d:53:8e:48:dd:10:17:8a:eb:21:48:f3:
                    cd:bb:d8:d2:72:41:25:4a:f9:12:cf:c4:7e:64:66:
                    fd:53:96:21:b5:2e:ea:f4:ee:48:c1:81:8e:1f:21:
                    8d:df:b7:5c:32:0c:39:06:33:17:9c:cf:80:bd:4b:
                    3f:2b:ca:ea:bf:65:fd:04:fa:de:2f:81:82:97:ab:
                    83:2c:96:9f:7f:6f:56:de:71:bf:f0:0e:05:16:64:
                    6c:0f:9a:d5:f6:70:07:8a:d8:19:38:eb:f7:7c:a8:
                    50:51:32:af:79:40:ce:e5:a0:8f:af:1b:15:90:d2:
                    e3:9e:c3:8b:b3:da:48:84:97:1f:1b:61:5c:bc:69:
                    68:f2:cf:5d:ee:51:75:ea:8e:67:51:c7:7b:a3:52:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:08:88:3E:A7:FB:9B:8A:B4:DA:7D:56:43:84:68:11:2F:D9:E2:4A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-QiIPqf7m4q02n1WQ4RoES_Z4ko.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.223.0/26

    Signature Algorithm: sha256WithRSAEncryption
         7f:1a:7f:e7:8d:98:38:1c:0f:d8:2b:9b:5c:43:34:24:1a:3b:
         17:8e:26:06:14:5e:06:2b:32:1f:7b:ae:31:c0:57:a1:21:c8:
         c7:ed:e7:25:1e:c5:bf:42:b3:b6:d1:fd:46:2a:4e:ac:3b:a4:
         9b:73:96:21:75:8a:04:2d:dd:17:1f:05:47:ae:4f:a5:ff:81:
         cd:51:e5:fe:2f:40:f3:2c:60:1e:ff:27:82:a5:87:d7:44:54:
         7a:6e:01:92:93:6c:39:0c:02:02:49:30:c0:b5:2e:22:f8:30:
         11:4f:3d:87:c0:8f:0b:55:fe:be:3e:9f:3d:8c:6f:53:e9:98:
         97:e0:41:89:70:0f:4f:17:a3:a7:f9:7a:61:ed:90:9b:f3:99:
         71:b4:3c:e5:a0:16:e2:12:93:8d:22:5d:dd:73:ac:62:15:6e:
         30:82:6d:9c:23:46:ba:9e:41:e8:34:f3:26:56:22:1e:a2:1c:
         88:0f:cc:d4:bc:d0:a5:32:29:9a:0a:1c:1e:13:3f:2a:07:41:
         8c:90:41:36:49:39:09:78:56:2f:bc:36:a4:fe:3f:24:6f:e7:
         25:c0:fc:0e:87:2b:9a:f4:95:55:af:f9:41:64:1b:4f:9c:ac:
         df:11:48:12:1e:f5:3f:ea:d7:d1:78:86:eb:05:50:4c:56:e2:
         89:30:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org