Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0eldpiY1xEhqRXKz-trI9h08Odw.roa
File:                     0eldpiY1xEhqRXKz-trI9h08Odw.roa (raw, json)
Hash identifier:          OUcDhtEjWMVlCNHfbbjeKpn6NnBQtFN5FU/EbA+D9GQ=
Subject key identifier:   D1:E9:5D:A6:26:35:C4:48:6A:45:72:B3:FA:DA:C8:F6:1D:3C:39:DC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18ED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0eldpiY1xEhqRXKz-trI9h08Odw.roa
Signing time:             Sun 07 Feb 2021 12:55:14 +0000
ROA not before:           Sun 07 Feb 2021 12:55:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.195.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6381 (0x18ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:55:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D1E95DA62635C4486A4572B3FADAC8F61D3C39DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:e3:45:b3:85:89:b0:f8:6a:03:cf:6b:3c:
                    ba:09:af:c4:e4:be:4a:22:7e:23:e5:8a:1d:d7:c6:
                    be:b2:04:59:4e:e9:4b:1c:a0:c5:c3:d9:99:c9:41:
                    8c:c7:e0:90:9f:f8:7d:da:f7:8c:4f:37:35:c0:48:
                    a1:3f:cb:13:4d:a1:88:d0:3b:a6:6e:c1:d9:22:44:
                    f7:8c:4c:30:27:21:56:14:82:2c:7d:90:51:b1:52:
                    84:57:56:69:e0:b8:e1:7e:b8:cd:73:fb:d0:9f:6c:
                    a5:e9:31:9d:a1:ca:c1:0d:8b:cf:83:e6:e8:7e:ce:
                    fd:94:90:9b:2d:01:a3:b5:9b:6a:1f:de:50:db:bc:
                    bb:d6:fb:d6:04:6c:3c:ad:5e:80:c0:21:58:4d:4b:
                    73:2f:41:ad:06:55:6f:5f:d8:c7:12:54:3e:50:66:
                    97:17:77:87:14:02:0f:c4:5c:93:de:e7:87:ec:45:
                    ce:fe:b0:fd:8f:56:95:55:11:02:bc:2c:af:c0:60:
                    46:4e:f8:21:e6:60:69:c2:43:d6:f6:fc:b2:52:63:
                    7d:4a:be:88:5a:23:71:b4:0f:4e:9a:a5:27:28:8e:
                    7e:37:cc:57:0c:84:1b:9f:df:7b:d6:49:d9:41:7d:
                    43:d4:c1:d4:8c:6d:6b:f7:7a:c9:ad:c8:73:38:c1:
                    95:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E9:5D:A6:26:35:C4:48:6A:45:72:B3:FA:DA:C8:F6:1D:3C:39:DC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0eldpiY1xEhqRXKz-trI9h08Odw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:85:aa:f5:24:59:54:72:5f:90:06:8c:11:6d:5c:6d:4b:8c:
         98:51:22:d9:22:11:89:c6:e3:ef:fa:9c:ee:14:e9:bf:10:54:
         f9:ca:06:ee:bd:4c:a1:9b:20:ea:51:c1:53:5e:c7:64:85:dd:
         f2:7b:9b:35:89:b3:5f:41:ab:55:01:58:d4:c4:99:fd:58:87:
         a5:94:2a:1b:a3:97:1b:83:8b:1d:d1:07:17:35:85:be:ef:59:
         80:c5:95:66:54:a2:92:1a:07:4e:06:cf:8d:9b:78:cb:4d:58:
         41:34:58:d3:71:cf:a5:4a:ab:06:b9:ad:df:bb:9a:bf:aa:9a:
         d3:51:30:32:a5:6d:dd:f2:3d:9c:49:41:7d:53:e9:76:f1:9c:
         48:e2:d8:b5:aa:97:fe:b6:c0:ff:e6:a0:95:a2:fe:3b:45:9a:
         84:03:93:ec:95:57:a5:60:c3:05:64:80:78:7a:fc:83:3f:6c:
         d5:06:09:63:24:02:32:a9:5d:c0:a8:09:a4:ad:b4:a0:a0:c0:
         66:e3:9a:56:55:62:1e:0e:b2:0c:c5:47:c0:25:05:bc:26:60:
         31:ea:14:49:0f:05:3a:ee:60:8d:43:79:04:c1:68:17:e7:60:
         d4:0a:69:42:e2:f6:7a:87:f1:d4:3d:c8:1a:ee:eb:9b:ae:6c:
         46:dc:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:19 2023 by rpki-client on console-fra.rpki-client.org