Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/47zaMJ26BIzHC7eocfCmx0uar-g.roa
File:                     47zaMJ26BIzHC7eocfCmx0uar-g.roa (raw, json)
Hash identifier:          2t1e7pizOvTEgRqEuj9tKkR82KfOr8fxU29Enb3HEro=
Subject key identifier:   E3:BC:DA:30:9D:BA:04:8C:C7:0B:B7:A8:71:F0:A6:C7:4B:9A:AF:E8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/47zaMJ26BIzHC7eocfCmx0uar-g.roa
Signing time:             Thu 15 Sep 2022 02:46:30 +0000
ROA not before:           Thu 15 Sep 2022 02:46:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E3BCDA309DBA048CC70BB7A871F0A6C74B9AAFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:fd:f6:bc:9e:ad:21:d5:7b:50:a4:04:96:
                    15:b8:28:79:b4:c0:e2:62:b7:0b:76:de:80:54:45:
                    bb:c0:55:6a:23:44:8d:89:8a:b1:c8:19:74:52:b4:
                    e5:72:fd:db:7b:5a:42:2d:0f:cc:8a:1e:c8:77:ea:
                    15:f8:c0:e3:df:75:88:85:9d:b5:cd:c0:62:e3:ba:
                    d3:d6:d7:b7:2a:f8:db:58:e8:72:11:bb:a2:16:eb:
                    c0:5a:19:32:be:8a:a9:2e:7a:89:38:95:a3:fc:c8:
                    29:f9:94:38:50:24:bc:ae:6d:09:eb:56:72:c8:42:
                    1a:c1:31:e0:8e:c2:40:d6:4e:13:d8:c0:51:f6:62:
                    87:43:18:f4:9b:cf:ff:a1:94:34:58:8c:40:a3:69:
                    6a:82:b6:ca:47:b8:11:ba:09:62:0e:cb:3e:92:b7:
                    25:b8:b7:12:10:d3:a9:7c:ec:dd:52:2c:19:1c:ef:
                    24:09:22:00:e9:35:50:4b:33:6d:06:19:55:c2:97:
                    6a:9a:bc:bc:1c:41:e9:21:4d:75:e1:92:f3:78:21:
                    36:4e:07:6d:e5:ac:f2:a7:d1:c6:65:95:a6:de:3c:
                    df:03:2f:1e:50:a5:ef:37:13:3f:50:f0:4d:9d:4d:
                    56:c9:4e:3e:49:b2:63:64:5f:2e:76:c2:33:1e:e2:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BC:DA:30:9D:BA:04:8C:C7:0B:B7:A8:71:F0:A6:C7:4B:9A:AF:E8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/47zaMJ26BIzHC7eocfCmx0uar-g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:92:01:40:57:b4:4a:27:54:9b:8c:52:1a:98:27:a6:da:42:
         77:a2:d2:8d:4e:18:97:00:92:62:11:16:a8:63:a9:82:13:97:
         ef:22:82:60:4d:33:56:55:fa:d2:65:3a:ba:a8:90:f7:57:f4:
         91:8f:a2:5a:d9:cc:52:34:47:14:28:80:dc:c1:cc:dc:3b:af:
         8f:9f:04:e1:36:de:ac:8f:71:86:c3:85:c3:45:5b:c6:23:34:
         56:d1:c8:d7:96:77:12:6a:25:9d:18:a8:35:68:d4:24:b6:43:
         98:bf:05:8c:c4:39:22:08:f2:5e:26:4f:3b:1b:f1:3d:ca:b6:
         7a:fb:fa:9a:70:06:ff:cd:b0:91:58:60:88:ad:7f:c8:58:e6:
         d9:7d:56:ee:c2:61:8a:8c:b4:3d:9e:71:7c:26:9e:8c:04:cd:
         68:b6:ea:ba:a3:af:fc:d4:a2:f7:df:1b:64:44:ec:2e:1e:92:
         e1:99:de:88:e4:f9:9c:e3:19:38:52:5f:94:6c:ee:65:7f:d7:
         d6:47:b4:34:9b:dc:27:43:ba:d6:e5:3c:22:56:a9:31:ab:e7:
         77:db:59:d2:13:1b:7f:ef:22:6d:37:82:48:e8:08:99:fb:d5:
         5a:6d:02:70:d3:18:6b:96:58:c3:c9:e5:40:59:d4:e6:6b:13:
         9e:43:4d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org