Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/75P_5BttWkq3iW463JBA4fiLedk.roa
File:                     75P_5BttWkq3iW463JBA4fiLedk.roa (raw, json)
Hash identifier:          DC64yoaQ25eIoiD7UfiODUZgstuoyI7oeCNoq87APJE=
Subject key identifier:   EF:93:FF:E4:1B:6D:5A:4A:B7:89:6E:3A:DC:90:40:E1:F8:8B:79:D9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/75P_5BttWkq3iW463JBA4fiLedk.roa
Signing time:             Thu 15 Sep 2022 02:53:06 +0000
ROA not before:           Thu 15 Sep 2022 02:53:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.84.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EF93FFE41B6D5A4AB7896E3ADC9040E1F88B79D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:4d:c8:93:20:c4:2c:06:c1:d3:b0:6b:48:
                    d6:82:fe:b3:80:6f:5f:b0:67:8b:ea:a1:ef:05:a4:
                    4b:0d:56:36:33:8e:ff:47:81:9f:88:de:8d:cd:0a:
                    ab:3b:ef:c9:ec:55:7c:16:18:2b:58:c4:e6:d9:c5:
                    e6:ea:fd:97:c4:98:f1:8d:46:61:ad:45:cd:09:ee:
                    de:95:0b:e4:9a:f9:ac:29:55:82:2d:af:9a:7f:d0:
                    41:8d:40:83:74:06:2a:8b:0e:b8:a3:ac:66:41:dc:
                    5b:fc:38:48:f3:1f:51:c9:01:dc:6f:23:18:4a:b1:
                    97:3f:f6:5b:9f:f7:01:96:95:00:24:b0:ae:63:6a:
                    1a:26:49:f0:93:02:14:0f:d8:ea:47:77:63:ab:a6:
                    92:4f:cf:98:f6:e8:fd:cf:9d:b4:94:fa:d6:72:70:
                    96:0b:c5:64:47:43:8e:28:a2:e4:28:d8:fb:68:d7:
                    da:01:54:64:bc:c3:99:5f:cb:d9:d2:b1:c4:ab:1c:
                    27:1a:33:5e:10:7b:06:4b:a3:fb:fd:df:88:72:79:
                    58:94:a6:7c:38:ca:3e:69:4f:d3:54:cb:a1:2d:8e:
                    25:70:14:20:7a:78:e5:1d:ca:ab:56:78:ac:1a:f4:
                    05:18:46:46:94:18:c7:28:aa:12:4e:92:87:60:cd:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:93:FF:E4:1B:6D:5A:4A:B7:89:6E:3A:DC:90:40:E1:F8:8B:79:D9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/75P_5BttWkq3iW463JBA4fiLedk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:70:fb:d5:01:31:14:78:f6:fa:56:34:30:83:fa:10:33:
         4c:ed:2f:84:f8:6a:6b:95:7b:06:a0:f8:09:2c:a1:4d:89:e5:
         4b:7c:3e:06:c3:c1:8f:8f:20:29:a5:19:9a:a4:54:27:86:bd:
         11:e9:67:ec:36:e7:33:dd:e2:9a:76:af:77:08:45:f8:58:a9:
         79:30:9a:b9:34:67:9f:2a:86:51:c3:06:53:ab:1f:fd:7a:03:
         fc:36:c7:df:2c:2f:af:06:0f:36:11:72:b4:ed:68:e6:9f:5d:
         3d:33:b1:da:2b:f1:f7:84:cf:9b:96:a1:ab:4b:5a:c6:5a:01:
         5d:39:d6:d0:05:51:1e:7b:af:ef:e6:8d:5b:5c:10:a8:2c:dd:
         52:dd:b1:ba:68:7b:a8:b4:46:b0:d1:8a:4a:69:ae:d4:f1:4e:
         6a:a2:44:fa:5d:f6:13:80:0c:eb:41:22:b6:19:e5:72:9a:2e:
         df:86:62:73:0e:7a:bd:78:e5:1f:45:58:38:fa:fb:5d:e7:06:
         e1:f8:bc:52:33:37:76:98:86:b8:2c:c0:ee:e8:59:25:29:43:
         4a:bd:9e:38:32:a5:81:fa:19:a8:24:0b:31:5b:86:86:07:9f:
         8d:71:2e:40:57:9f:62:37:77:de:f5:cf:15:62:99:6a:e7:8d:
         59:1d:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org