Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1uifPg3meymVKwXcCJgXXi9IFaA.roa
File:                     1uifPg3meymVKwXcCJgXXi9IFaA.roa (raw, json)
Hash identifier:          d4fMTFVxqkdqSs7CnvIGW+aEeG0FW3QCNX1VLZDgMV8=
Subject key identifier:   D6:E8:9F:3E:0D:E6:7B:29:95:2B:05:DC:08:98:17:5E:2F:48:15:A0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16E3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1uifPg3meymVKwXcCJgXXi9IFaA.roa
Signing time:             Sun 07 Feb 2021 12:15:06 +0000
ROA not before:           Sun 07 Feb 2021 12:15:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5859 (0x16e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:15:06 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D6E89F3E0DE67B29952B05DC0898175E2F4815A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:23:f2:75:79:ec:f8:54:0c:4b:1e:4c:bb:
                    7f:48:cf:8d:54:ef:a5:24:9b:93:4d:c9:bd:8a:cb:
                    4e:28:d5:e2:31:0c:22:f8:ed:1d:70:9b:c0:8b:30:
                    fa:c8:b9:26:c5:44:c2:c0:ab:bb:ac:fa:4e:ce:a0:
                    67:76:ae:06:80:66:36:0f:ba:88:09:d8:af:b2:da:
                    f3:90:0d:e8:12:b9:f7:33:c0:ff:f8:d8:6c:97:8f:
                    a5:54:9a:fe:e8:5b:07:16:b3:92:e1:28:cb:23:f8:
                    22:83:27:24:88:4c:d6:01:28:6d:f2:76:fa:ad:c5:
                    19:5a:ff:8d:18:bc:48:68:e3:39:d3:a0:4c:7c:ac:
                    c7:66:71:2b:06:0d:3b:6b:70:cd:be:9d:a4:80:c6:
                    7b:0b:94:04:ef:45:aa:d1:91:ce:f7:df:4e:11:1c:
                    5b:49:cf:5a:b2:db:cd:af:f1:dc:98:ec:fd:d8:0d:
                    80:1e:db:dd:5a:17:6c:35:b4:ed:e5:ff:27:d5:18:
                    2a:01:d7:b9:bd:b1:3a:68:b3:95:d5:d5:4d:14:a0:
                    22:75:fb:4b:81:2d:58:3d:d7:81:71:1e:b9:7d:d1:
                    37:cb:95:d4:2d:f6:e5:13:9b:ee:4b:09:67:d5:a7:
                    8d:99:0f:2c:d1:fb:0d:b5:8f:24:61:0c:d1:17:8d:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E8:9F:3E:0D:E6:7B:29:95:2B:05:DC:08:98:17:5E:2F:48:15:A0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1uifPg3meymVKwXcCJgXXi9IFaA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:42:fe:db:44:53:2a:88:fc:70:c3:cf:fc:a6:6a:a0:f4:1c:
         6c:c7:be:72:64:09:b1:66:68:f5:46:bc:dc:95:da:1d:36:ab:
         3b:df:08:07:d7:77:a0:b1:97:d1:c0:43:7f:7f:02:87:da:50:
         5d:08:b4:12:b1:c1:01:f7:a5:a2:3a:28:b0:d1:53:23:82:67:
         a9:ed:40:be:62:55:d4:0b:a1:f8:35:01:b7:ff:0c:e7:b4:01:
         58:96:c5:9c:29:eb:e0:a2:43:7c:88:d1:f8:c7:51:5d:b7:28:
         c5:c1:8a:55:ba:d5:02:92:a9:a5:62:55:bf:63:84:30:bf:7f:
         dc:d3:db:22:11:90:ba:7a:db:f7:aa:81:c1:c8:ca:09:9a:f1:
         b2:0b:d7:86:62:a7:83:ba:84:bf:46:0d:97:ed:18:3b:2d:59:
         ac:af:9a:93:63:ef:c4:55:4d:45:51:d2:37:a1:9c:dc:ff:95:
         a9:0f:f9:a8:18:24:a8:b2:dd:fb:7c:7f:e8:1d:91:b9:59:5a:
         15:2f:93:22:84:40:c0:13:8e:89:b7:62:e8:72:4c:a6:26:92:
         d5:d7:8c:d3:67:8c:2f:02:71:e4:46:2f:7e:8e:d0:ed:53:1b:
         5b:c3:0e:73:6d:08:a1:fc:7a:63:bd:1c:ed:ef:03:ff:ee:76:
         09:56:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:20 2023 by rpki-client on console-fra.rpki-client.org