Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/50uWZxFdX-039O6uFnhEyHRViCI.roa
File:                     50uWZxFdX-039O6uFnhEyHRViCI.roa (raw, json)
Hash identifier:          HXe3uDsw1zjWrADqIcposOu234DUWbWcJMF4lpnm9Uo=
Subject key identifier:   E7:4B:96:67:11:5D:5F:ED:37:F4:EE:AE:16:78:44:C8:74:55:88:22
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2013
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/50uWZxFdX-039O6uFnhEyHRViCI.roa
Signing time:             Fri 25 Nov 2022 04:38:18 +0000
ROA not before:           Fri 25 Nov 2022 04:38:18 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.174.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8211 (0x2013)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:18 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E74B9667115D5FED37F4EEAE167844C874558822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fc:45:3e:7a:0e:b3:e2:aa:0a:fa:73:e1:67:
                    99:4d:dd:51:34:98:1d:a0:e4:e0:76:c2:4c:5c:b3:
                    17:ac:fe:9b:85:c8:d8:4a:5e:18:e3:f0:50:9d:50:
                    d1:20:81:3e:8b:1c:95:e6:57:f0:1e:ea:6b:93:8a:
                    13:5d:4a:14:7d:bc:24:50:43:55:fd:ee:64:3f:57:
                    eb:b4:b0:05:4b:b1:17:ac:7a:7f:e5:a3:86:9d:76:
                    81:01:d5:ea:86:c6:7b:25:4b:7e:c5:04:1f:96:9d:
                    a4:ea:02:58:b5:98:f4:c2:12:76:51:df:88:b8:d1:
                    74:fb:f8:a4:d4:37:a8:ff:00:8c:23:32:5b:42:22:
                    a6:15:09:b4:3c:05:31:b2:f6:cd:72:9d:1f:49:ed:
                    d7:4d:0f:31:21:34:4c:73:4c:46:cd:83:8a:46:7e:
                    22:61:1b:05:62:a5:02:aa:2f:fb:3d:ea:6e:a2:d9:
                    40:a7:fd:aa:e0:90:47:ea:d9:46:66:49:bf:51:6e:
                    0c:c4:34:c1:60:0a:53:06:2f:09:9a:50:11:24:fd:
                    b6:0b:6e:6c:aa:16:7e:57:55:ba:4b:ba:d9:19:19:
                    23:c8:52:fa:7e:74:02:22:98:f7:b3:08:9c:0c:4f:
                    fc:35:10:f1:c3:cd:ca:d5:ee:d6:c4:e2:08:db:e9:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4B:96:67:11:5D:5F:ED:37:F4:EE:AE:16:78:44:C8:74:55:88:22
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/50uWZxFdX-039O6uFnhEyHRViCI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:54:9a:31:19:e1:e7:9a:ac:73:2f:7e:c6:58:78:bb:9b:
         43:02:2c:99:ee:44:42:a1:4e:0c:64:7c:2c:04:ad:8b:be:07:
         25:49:e8:6f:7f:8d:94:bf:51:4f:2c:73:3a:8d:e2:4d:8c:fe:
         16:da:58:70:05:9f:f4:68:08:ec:e4:11:e2:1d:88:fc:10:9f:
         a2:02:43:5b:a2:28:68:92:ae:62:ec:44:ea:58:54:a2:cf:58:
         85:69:90:85:7a:06:f6:b9:8a:9f:d4:fd:78:35:41:06:4b:b9:
         81:94:32:77:1d:aa:10:12:9a:71:43:77:be:d3:d3:ed:a1:e8:
         02:0c:ed:16:a1:09:2d:fe:b8:68:b0:87:9e:b8:63:c2:0b:7a:
         17:77:fe:e0:8b:62:d8:e9:8e:af:0e:03:dd:fd:83:06:92:c7:
         8c:7d:a1:85:3c:f6:d5:7c:2a:2b:65:20:30:a5:91:82:82:3a:
         b9:91:21:75:51:b3:66:b1:27:08:9c:ca:49:77:4a:fa:1b:05:
         69:4a:c9:da:04:4a:6d:0d:4e:b9:04:0a:d5:5a:31:03:84:ff:
         b6:f9:5c:cd:1e:31:ed:44:84:d5:da:74:39:46:96:ba:1f:1b:
         a3:68:3d:bc:fa:60:34:cb:01:13:93:f3:d7:74:b3:f5:5c:67:
         e0:47:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org