Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8FQ6-258sNHhP1cHF0c6tEr-020.roa
File:                     8FQ6-258sNHhP1cHF0c6tEr-020.roa (raw, json)
Hash identifier:          /4aNM5KwZeD9UNJLHzOLsnWC/CFD2cot1KRPplwd+c0=
Subject key identifier:   F0:54:3A:FB:6E:7C:B0:D1:E1:3F:57:07:17:47:3A:B4:4A:FE:D3:6D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1E46
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8FQ6-258sNHhP1cHF0c6tEr-020.roa
Signing time:             Tue 03 May 2022 01:18:04 +0000
ROA not before:           Tue 03 May 2022 01:18:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7750 (0x1e46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: May  3 01:18:04 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F0543AFB6E7CB0D1E13F570717473AB44AFED36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:1c:85:82:fe:76:96:6b:da:22:65:22:ca:
                    65:c5:00:fe:4f:98:e2:4a:54:22:cf:99:3b:e0:de:
                    5b:35:e9:ea:b6:7b:91:2f:a5:f6:43:03:83:f0:b4:
                    c6:08:bc:b9:9e:4e:5b:a5:18:b2:6f:f7:9e:03:04:
                    d4:d3:97:19:7a:fb:0d:e7:c9:29:2d:11:41:6c:c5:
                    3e:eb:98:a2:8c:17:4f:d2:16:f8:33:49:6e:70:5c:
                    ae:89:67:ff:db:1e:c3:21:59:cf:68:71:0f:f1:e8:
                    a4:45:d0:75:ce:bf:b6:cb:01:47:95:5b:b3:1f:36:
                    21:39:f8:3f:5d:fd:2a:a7:58:73:7e:af:aa:99:e7:
                    62:b8:7f:aa:41:9c:66:6b:f5:81:b8:a4:99:7b:92:
                    14:23:75:17:b8:97:1f:f5:7f:e2:dc:86:79:de:1e:
                    b8:e3:b6:d7:07:7c:4f:8c:8d:65:ca:a8:be:7c:12:
                    5e:78:49:95:3e:17:ec:dc:d4:54:0f:21:8a:ae:b8:
                    7e:f1:ee:52:0c:65:48:0c:98:fa:e1:99:39:3e:e5:
                    1b:e3:70:df:b8:e5:f1:32:33:21:5a:d7:dd:69:7a:
                    4a:bc:be:24:90:d3:e4:44:b9:ad:00:58:3d:86:c7:
                    05:b2:e4:c8:c7:0c:2f:9f:bd:92:db:9c:6e:60:bd:
                    e4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:54:3A:FB:6E:7C:B0:D1:E1:3F:57:07:17:47:3A:B4:4A:FE:D3:6D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8FQ6-258sNHhP1cHF0c6tEr-020.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:bc:64:16:9f:c7:9f:93:32:48:a7:6d:a2:56:1d:d3:66:d2:
         eb:c7:c7:40:87:9c:d1:c3:c5:b5:51:10:4a:57:b2:61:17:57:
         65:03:87:b0:c8:94:2a:9d:92:1c:f6:91:62:a8:2e:35:d8:95:
         55:cf:f6:9b:f2:7e:bf:3d:5f:2b:94:8d:a1:4b:74:43:7f:a9:
         f2:e9:6f:ad:73:e8:72:13:4e:eb:e1:38:90:57:2a:77:19:b9:
         bc:6c:05:22:2f:da:8a:84:7a:aa:12:bf:0c:8b:c1:52:76:91:
         29:0e:7e:2e:cb:40:49:24:00:8d:1e:26:c3:65:b5:74:d6:fe:
         c2:24:66:29:9a:b7:0b:d0:87:8b:92:58:24:34:7c:95:9c:6e:
         35:75:ed:c9:4f:91:83:47:33:aa:90:d8:1c:ff:5c:4e:66:90:
         cb:b2:91:77:d5:27:e4:cf:f5:9a:08:c3:51:93:b6:36:4c:c3:
         bf:fb:8a:50:37:eb:39:0d:4b:96:00:7d:eb:29:49:72:65:35:
         76:43:36:5d:de:ef:f4:5f:db:ad:ea:34:11:4d:ad:76:0c:5b:
         ce:e4:57:e7:57:38:4b:2e:b9:c4:c8:d2:9c:60:0b:09:5e:78:
         9b:9d:36:56:08:f4:f2:b9:5e:5c:ea:9d:82:66:f7:2e:d2:68:
         17:8d:3e:23
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHkYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA1MDMw
MTE4MDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEYwNTQzQUZCNkU3Q0Iw
RDFFMTNGNTcwNzE3NDczQUI0NEFGRUQzNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeFByFgv52lmvaImUiymXFAP5PmOJKVCLPmTvg3ls16eq2e5Ev
pfZDA4PwtMYIvLmeTlulGLJv954DBNTTlxl6+w3nySktEUFsxT7rmKKMF0/SFvgz
SW5wXK6JZ//bHsMhWc9ocQ/x6KRF0HXOv7bLAUeVW7MfNiE5+D9d/SqnWHN+r6qZ
52K4f6pBnGZr9YG4pJl7khQjdRe4lx/1f+LchnneHrjjttcHfE+MjWXKqL58El54
SZU+F+zc1FQPIYquuH7x7lIMZUgMmPrhmTk+5RvjcN+45fEyMyFa191pekq8viSQ
0+REua0AWD2GxwWy5MjHDC+fvZLbnG5gveSTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8FQ6+258sNHhP1cHF0c6tEr+020wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhGUTYtMjU4c05IaFAxY0hG
MGM2dEVyLTAyMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6MQwDQYJKoZIhvcNAQELBQADggEBABm8ZBafx5+TMkinbaJWHdNm0uvHx0CHnNHD
xbVREEpXsmEXV2UDh7DIlCqdkhz2kWKoLjXYlVXP9pvyfr89XyuUjaFLdEN/qfLp
b61z6HITTuvhOJBXKncZubxsBSIv2oqEeqoSvwyLwVJ2kSkOfi7LQEkkAI0eJsNl
tXTW/sIkZimatwvQh4uSWCQ0fJWcbjV17clPkYNHM6qQ2Bz/XE5mkMuykXfVJ+TP
9ZoIw1GTtjZMw7/7ilA36zkNS5YAfespSXJlNXZDNl3e7/Rf263qNBFNrXYMW87k
V+dXOEsuucTI0pxgCwleeJudNlYI9PK5XlzqnYJm9y7SaBeNPiM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org