Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0mTj_HkHZWS8sAic96pR6yF0wFE.roa
File:                     0mTj_HkHZWS8sAic96pR6yF0wFE.roa (raw, json)
Hash identifier:          IdovYIW7Eb9Xw270rzE4aQKO4THYA//WZgUGdJVxCAA=
Subject key identifier:   D2:64:E3:FC:79:07:65:64:BC:B0:08:9C:F7:AA:51:EB:21:74:C0:51
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0mTj_HkHZWS8sAic96pR6yF0wFE.roa
Signing time:             Thu 15 Sep 2022 02:45:53 +0000
ROA not before:           Thu 15 Sep 2022 02:45:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.8.192/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D264E3FC79076564BCB0089CF7AA51EB2174C051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:c6:4b:94:22:6e:28:e1:75:8b:c2:c4:1e:
                    31:15:a7:67:93:9f:27:70:62:43:3f:16:24:8b:f6:
                    5c:69:5c:84:58:bc:9b:13:f9:21:46:89:8e:88:be:
                    ec:9d:5c:56:b8:d3:41:63:8f:f9:6b:00:5e:7e:53:
                    c5:95:e6:cb:33:70:d3:af:35:51:33:73:b7:73:81:
                    57:4c:f7:78:fe:c6:18:47:da:dd:7e:67:77:09:a3:
                    01:14:52:ee:35:18:1a:bc:21:11:5c:2b:21:ad:93:
                    28:1c:5e:02:34:48:c9:47:fb:bd:52:52:0e:ae:de:
                    80:85:21:95:4f:e5:d6:9e:c0:32:1c:29:c0:dc:06:
                    a4:1c:5a:7d:eb:34:52:d0:74:e0:1c:ea:73:06:e8:
                    14:d1:88:a0:cc:f5:3c:dd:14:bd:93:7c:a6:30:72:
                    36:57:70:04:60:45:21:c8:ec:71:17:92:1b:b2:a5:
                    54:d4:8d:cf:35:20:df:38:29:12:b1:5f:24:2f:1b:
                    0c:51:ce:92:01:2a:04:f0:12:cb:11:34:87:21:de:
                    f5:61:fe:b2:3f:ad:02:68:58:b0:4b:52:2d:b3:1c:
                    32:e5:af:cc:a4:7d:c2:2e:5c:5b:bd:c9:f3:5d:49:
                    69:41:14:dd:76:36:24:31:80:15:0a:65:23:b5:b9:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:64:E3:FC:79:07:65:64:BC:B0:08:9C:F7:AA:51:EB:21:74:C0:51
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0mTj_HkHZWS8sAic96pR6yF0wFE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.192/26

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:b8:7e:1d:02:ff:9d:e2:77:be:69:09:e4:6f:c5:40:fe:
         a4:e6:69:de:08:d3:b3:12:67:dd:9d:5e:bc:90:b8:3b:fa:32:
         11:fe:cf:9c:b4:3f:33:79:86:cd:80:70:a3:aa:54:8e:6d:eb:
         80:87:98:78:23:46:d5:83:4c:44:f9:1b:84:dc:97:2c:d8:a3:
         95:d3:68:58:be:99:88:bc:44:fa:bd:5c:89:dd:d0:9f:49:50:
         e5:78:df:db:9b:11:03:f9:3c:e6:dd:94:30:a7:c0:fb:fc:11:
         68:13:0f:0b:f1:9b:94:18:69:d0:21:11:ed:6e:11:9c:75:9b:
         b7:53:24:24:89:c4:e5:ce:bf:fe:98:97:32:29:22:6d:8e:1f:
         3c:b7:2b:65:56:69:9a:e8:2c:db:62:99:3c:e7:c9:03:61:e0:
         62:92:a9:dc:6e:22:0e:7d:4f:2d:dc:75:b1:68:cc:cf:e1:41:
         c4:b2:ff:41:67:d5:4e:86:7f:54:61:4b:ed:0c:4b:e1:bb:0c:
         23:e1:53:93:af:5a:94:bf:8e:8a:8b:22:25:1a:ac:d9:61:36:
         76:b2:37:76:67:42:6a:f3:94:ed:d5:29:dd:d6:0f:5a:9e:9c:
         bd:d6:dd:ff:6e:09:6f:f4:cb:ae:9f:68:88:1d:c1:13:28:81:
         2b:54:d3:4a
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1NTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQyNjRFM0ZDNzkwNzY1
NjRCQ0IwMDg5Q0Y3QUE1MUVCMjE3NEMwNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxXsZLlCJuKOF1i8LEHjEVp2eTnydwYkM/FiSL9lxpXIRYvJsT
+SFGiY6IvuydXFa400Fjj/lrAF5+U8WV5sszcNOvNVEzc7dzgVdM93j+xhhH2t1+
Z3cJowEUUu41GBq8IRFcKyGtkygcXgI0SMlH+71SUg6u3oCFIZVP5daewDIcKcDc
BqQcWn3rNFLQdOAc6nMG6BTRiKDM9TzdFL2TfKYwcjZXcARgRSHI7HEXkhuypVTU
jc81IN84KRKxXyQvGwxRzpIBKgTwEssRNIch3vVh/rI/rQJoWLBLUi2zHDLlr8yk
fcIuXFu9yfNdSWlBFN12NiQxgBUKZSO1ubYlAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU0mTj/HkHZWS8sAic96pR6yF0wFEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBtVGpfSGtIWldTOHNBaWM5
NnBSNnlGMHdGRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wwjAMA0GCSqGSIb3DQEBCwUAA4IBAQCDbrh+HQL/neJ3vmkJ5G/FQP6k5mneCNOz
EmfdnV68kLg7+jIR/s+ctD8zeYbNgHCjqlSObeuAh5h4I0bVg0xE+RuE3Jcs2KOV
02hYvpmIvET6vVyJ3dCfSVDleN/bmxED+Tzm3ZQwp8D7/BFoEw8L8ZuUGGnQIRHt
bhGcdZu3UyQkicTlzr/+mJcyKSJtjh88tytlVmma6CzbYpk858kDYeBikqncbiIO
fU8t3HWxaMzP4UHEsv9BZ9VOhn9UYUvtDEvhuwwj4VOTr1qUv46KiyIlGqzZYTZ2
sjd2Z0Jq85Tt1Snd1g9anpy91t3/bglv9Muun2iIHcETKIErVNNK
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org