Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4_YUGo6_j6TXfBFQ3VVY3TZZSD8.roa
File:                     4_YUGo6_j6TXfBFQ3VVY3TZZSD8.roa (raw, json)
Hash identifier:          wBSbZwErowEwwtOpar6yYUTnsIisOlRC6dbR5Eh1AmU=
Subject key identifier:   E3:F6:14:1A:8E:BF:8F:A4:D7:7C:11:50:DD:55:58:DD:36:59:48:3F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4_YUGo6_j6TXfBFQ3VVY3TZZSD8.roa
Signing time:             Thu 15 Sep 2022 02:52:31 +0000
ROA not before:           Thu 15 Sep 2022 02:52:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E3F6141A8EBF8FA4D77C1150DD5558DD3659483F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:1d:b3:3a:6d:be:5e:08:ba:5a:e2:2f:b7:
                    68:41:2d:eb:fc:ef:0d:cf:b5:ec:16:e6:56:a1:d3:
                    96:ca:2d:47:59:5d:22:c8:69:56:14:2b:bd:46:6e:
                    ed:1a:c8:4b:13:25:dd:96:77:21:2b:36:f6:5e:ae:
                    52:c1:b1:70:99:62:a0:73:39:3a:e1:92:c3:6a:03:
                    3c:04:6c:26:6b:92:63:cc:c4:85:a5:f1:77:fc:8d:
                    b6:7c:ce:e5:ce:91:5d:b8:b3:6e:df:66:06:04:b5:
                    d1:db:71:25:19:f9:31:09:b9:9e:1f:79:24:34:cc:
                    a1:f0:42:c2:0d:77:08:8a:93:00:f7:09:92:b6:2e:
                    d6:f4:d2:7b:c3:f6:53:7a:aa:66:60:67:cc:de:f6:
                    89:89:46:f4:5f:ed:09:01:8b:d6:31:80:e9:d5:b2:
                    d9:22:5d:d7:fc:6b:4c:d8:59:4a:c5:da:e3:85:4d:
                    a2:65:80:a0:6b:87:56:2a:41:fa:34:1d:e2:fc:49:
                    03:80:30:83:c8:11:76:b1:9c:57:a7:75:81:6b:10:
                    66:d9:8e:c4:c1:f4:31:c9:eb:4a:b6:e1:5e:8a:e5:
                    8e:0e:77:a1:9b:5d:d2:fb:18:f3:3e:bc:c9:0d:d4:
                    45:2d:6d:5d:72:bd:19:24:2b:34:c5:cb:86:36:cd:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F6:14:1A:8E:BF:8F:A4:D7:7C:11:50:DD:55:58:DD:36:59:48:3F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4_YUGo6_j6TXfBFQ3VVY3TZZSD8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:05:cc:75:9b:78:f2:62:d1:45:8a:16:c9:cb:c5:5e:da:33:
         ed:bc:d2:e9:1a:9d:b9:38:8d:14:74:46:3a:7a:aa:2d:02:e8:
         85:51:67:05:20:e7:a0:41:b4:d5:21:b1:bf:ca:9a:31:6a:9d:
         6d:ca:c6:a3:7c:ad:62:3d:7a:5b:04:f1:68:1b:39:a7:56:49:
         20:77:6c:fe:a6:1e:9b:d0:fb:78:53:b6:10:fc:98:ae:8e:33:
         c4:8a:c1:eb:1c:95:2d:98:0c:5d:cc:6a:c8:73:e2:c4:0a:5f:
         7c:c7:6a:cd:ba:3e:5c:97:0b:5e:97:e3:16:ea:d0:73:ba:e4:
         ec:47:ce:3d:3f:ca:c4:a1:6f:c6:02:aa:2f:01:5e:b6:93:c6:
         c9:56:32:19:81:cd:d2:9a:1e:e3:45:2b:d1:09:11:ce:81:75:
         f8:fe:c8:60:62:03:4a:ba:fe:3d:47:76:d5:24:ec:3f:56:cb:
         c7:87:8a:99:dc:83:64:88:a3:79:a6:fb:14:79:b4:2b:17:fa:
         db:2f:54:07:fb:bc:5b:f5:a2:65:d5:9e:ce:2b:7d:0f:20:28:
         a2:7f:6e:27:13:c3:d2:c6:fd:65:8f:ea:53:6d:49:60:10:de:
         29:d3:5c:9d:69:77:e4:2d:e9:ad:0b:16:4c:f8:8f:2a:a3:9b:
         38:01:f6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org