Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6KEcC5KYapIWDV6P5c_4TpdsKcs.roa
File:                     6KEcC5KYapIWDV6P5c_4TpdsKcs.roa (raw, json)
Hash identifier:          QjjntdwJspaxCQkYAZw4MySf1OmfHcyDkELLlC4TFGk=
Subject key identifier:   E8:A1:1C:0B:92:98:6A:92:16:0D:5E:8F:E5:CF:F8:4E:97:6C:29:CB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       214A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6KEcC5KYapIWDV6P5c_4TpdsKcs.roa
Signing time:             Fri 25 Nov 2022 04:39:44 +0000
ROA not before:           Fri 25 Nov 2022 04:39:44 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8522 (0x214a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:44 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E8A11C0B92986A92160D5E8FE5CFF84E976C29CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:98:a1:a2:54:7c:a7:47:13:e5:bc:ce:9e:
                    37:62:f3:dd:3c:9a:c3:da:3b:b6:cd:30:89:9d:92:
                    b2:1a:96:cb:67:1c:d6:13:50:e3:0a:42:42:2e:be:
                    2c:fe:3c:35:68:65:4f:6b:12:ab:bb:57:7c:fd:3a:
                    d2:79:4b:fe:73:02:1c:54:2a:c5:81:79:96:04:2c:
                    d9:3c:7f:7f:3a:c1:2b:74:85:fa:f6:b3:c6:c0:c3:
                    96:9d:98:2d:f8:0b:f8:e1:39:8a:7f:59:4e:3e:16:
                    7c:e6:08:81:51:0b:44:78:9e:46:36:66:aa:72:90:
                    6a:4e:4a:d6:0b:cd:cd:a8:a3:86:b9:4e:0f:d0:82:
                    3b:4a:d7:81:39:dd:c5:2e:af:ad:5b:db:da:a2:fe:
                    d3:3c:3b:fb:cb:2a:be:a2:d8:ca:9f:bb:a2:4b:19:
                    74:93:ea:85:35:7e:b5:0c:24:6e:18:cf:0c:46:fa:
                    60:b9:e2:05:13:c4:fe:e9:f7:3f:5c:79:d7:86:91:
                    62:a9:cc:94:7d:d7:ea:d9:5f:9c:63:24:dd:f4:0c:
                    29:d8:c6:ca:d9:7a:7d:4f:0e:2b:88:71:bf:ec:bd:
                    4c:e8:ef:54:69:3f:d5:6a:6c:88:3b:83:9c:a4:ab:
                    52:c6:b0:7b:d1:78:9e:a3:25:6f:2e:b0:64:8b:20:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A1:1C:0B:92:98:6A:92:16:0D:5E:8F:E5:CF:F8:4E:97:6C:29:CB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6KEcC5KYapIWDV6P5c_4TpdsKcs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:90:a6:e6:13:d0:ce:59:7d:1c:6f:57:76:f3:94:56:89:5a:
         7a:18:ed:10:6e:e2:f8:d8:0f:af:68:9c:f9:91:69:19:f1:a4:
         11:a1:7d:2e:ce:b2:4f:d1:63:aa:d7:6e:f2:17:a2:73:7c:cf:
         fa:64:97:8a:47:56:d3:9c:cb:da:7b:5f:2c:1f:61:a6:8b:7c:
         cf:db:9f:f8:a1:6a:87:a8:45:7a:76:1f:33:3e:e8:88:7d:b1:
         2e:2e:2b:3a:83:16:8c:cb:09:bc:88:8a:5c:97:5a:89:b9:50:
         2f:17:36:95:46:43:60:b7:19:46:ab:ab:b4:35:35:4a:ee:00:
         88:18:f6:c5:e3:42:53:b1:a4:7e:a3:1f:5a:a5:e9:e1:aa:15:
         e1:7e:97:65:b7:86:fb:5b:13:2f:c9:9f:12:e4:8c:9a:2a:c8:
         b7:17:b3:ad:f9:fb:8f:b5:92:5f:86:5d:02:68:8c:b0:ae:61:
         87:be:80:b4:97:7e:e8:a5:76:be:fd:1f:b5:12:a3:f2:89:79:
         31:b4:b8:35:8e:59:04:4f:ad:23:7a:3b:23:51:7d:1e:66:46:
         63:eb:b1:c3:10:5e:eb:d5:d9:9c:f0:e9:7b:11:a9:f3:3c:18:
         4b:dd:b4:da:af:af:91:56:96:66:f5:a0:57:7b:a5:f7:ba:28:
         8b:3b:18:c7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU4QTExQzBCOTI5ODZB
OTIxNjBENUU4RkU1Q0ZGODRFOTc2QzI5Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcN5iholR8p0cT5bzOnjdi8908msPaO7bNMImdkrIalstnHNYT
UOMKQkIuviz+PDVoZU9rEqu7V3z9OtJ5S/5zAhxUKsWBeZYELNk8f386wSt0hfr2
s8bAw5admC34C/jhOYp/WU4+FnzmCIFRC0R4nkY2ZqpykGpOStYLzc2oo4a5Tg/Q
gjtK14E53cUur61b29qi/tM8O/vLKr6i2Mqfu6JLGXST6oU1frUMJG4YzwxG+mC5
4gUTxP7p9z9cedeGkWKpzJR91+rZX5xjJN30DCnYxsrZen1PDiuIcb/svUzo71Rp
P9VqbIg7g5ykq1LGsHvReJ6jJW8usGSLIECdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6KEcC5KYapIWDV6P5c/4TpdsKcswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZLRWNDNUtZYXBJV0RWNlA1
Y180VHBkc0tjcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6XcwDQYJKoZIhvcNAQELBQADggEBABmQpuYT0M5ZfRxvV3bzlFaJWnoY7RBu4vjY
D69onPmRaRnxpBGhfS7Osk/RY6rXbvIXonN8z/pkl4pHVtOcy9p7XywfYaaLfM/b
n/ihaoeoRXp2HzM+6Ih9sS4uKzqDFozLCbyIilyXWom5UC8XNpVGQ2C3GUarq7Q1
NUruAIgY9sXjQlOxpH6jH1ql6eGqFeF+l2W3hvtbEy/JnxLkjJoqyLcXs635+4+1
kl+GXQJojLCuYYe+gLSXfuildr79H7USo/KJeTG0uDWOWQRPrSN6OyNRfR5mRmPr
scMQXuvV2Zzw6XsRqfM8GEvdtNqvr5FWlmb1oFd7pfe6KIs7GMc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org