Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8bW013mkfOqTMhDevYYUPdtFnSM.roa
File:                     8bW013mkfOqTMhDevYYUPdtFnSM.roa (raw, json)
Hash identifier:          WUD6LO6V5T2iCmCf/45CA9T9vIuxy40ywqTjD0EsfAM=
Subject key identifier:   F1:B5:B4:D7:79:A4:7C:EA:93:32:10:DE:BD:86:14:3D:DB:45:9D:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       208D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8bW013mkfOqTMhDevYYUPdtFnSM.roa
Signing time:             Fri 25 Nov 2022 04:38:51 +0000
ROA not before:           Fri 25 Nov 2022 04:38:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.104.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8333 (0x208d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F1B5B4D779A47CEA933210DEBD86143DDB459D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:5d:0f:b6:d3:25:ac:43:e0:7f:84:72:b7:
                    90:22:a3:b4:76:2f:64:f3:4d:e1:dc:63:ae:d4:19:
                    2b:2e:54:56:12:6b:c7:7f:bf:4e:6f:b3:de:87:6f:
                    ac:46:8e:de:af:5f:40:d2:d1:23:e7:ac:92:8e:d9:
                    e0:c8:d2:a6:68:75:c8:14:f1:d8:ef:42:02:ff:55:
                    8d:c8:7b:ee:96:dc:ee:0a:06:18:89:42:5a:33:be:
                    14:ad:49:07:72:7c:fd:1f:18:5a:11:75:7c:21:2c:
                    16:91:cb:72:65:35:89:2a:0d:2e:80:82:0c:41:95:
                    7e:dd:e4:66:86:26:ed:3e:d4:5b:0b:ea:02:64:f9:
                    90:57:f2:17:5b:4d:86:37:60:19:cc:1a:bd:a7:00:
                    04:c5:55:ab:e8:09:37:ca:1d:29:9e:df:f5:11:41:
                    4a:a0:fb:04:28:8a:75:c6:2c:1e:64:a3:18:dd:0c:
                    fb:31:de:ec:fa:4d:ed:48:fb:40:d2:a8:7c:bb:76:
                    f4:dd:a3:e3:d6:6d:c2:fe:9a:ec:2c:11:3f:d6:72:
                    8a:94:21:08:b7:e1:f4:da:e1:cf:b2:59:b6:fb:c4:
                    03:b5:4b:85:42:da:eb:e1:5d:1a:86:22:26:12:55:
                    73:06:98:51:1a:05:d7:18:95:c1:1d:46:fa:87:c9:
                    5a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:B4:D7:79:A4:7C:EA:93:32:10:DE:BD:86:14:3D:DB:45:9D:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8bW013mkfOqTMhDevYYUPdtFnSM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:ca:ab:b1:c8:b9:0e:7d:d2:bd:54:56:d4:a0:a1:0e:1a:98:
         42:8a:36:d5:14:82:d3:a3:3c:51:c0:11:43:3c:25:be:e5:f6:
         d1:03:8b:dd:d4:29:f5:50:47:fc:e6:1e:9a:ba:b3:b7:88:21:
         06:9f:29:43:fa:9a:b3:4b:f7:89:f9:fe:fd:1f:69:26:cf:70:
         f6:28:fb:ad:35:4c:31:5e:75:4d:66:23:96:aa:00:ca:81:f7:
         07:b3:f5:d9:83:05:7a:9d:ef:13:bb:ef:ed:40:77:a2:31:3c:
         6d:0a:cb:94:65:43:96:8b:1a:8c:48:64:ad:d5:e0:b6:06:e9:
         37:90:33:f5:0a:fb:10:45:c5:dd:6e:eb:16:c9:93:2b:31:47:
         2b:34:4a:a7:3e:9b:3f:36:17:73:0b:b0:99:d5:4a:69:68:19:
         00:1d:6a:a3:f9:f7:f2:68:1a:a2:1c:f9:e0:c4:cb:2e:51:69:
         3b:14:b6:5f:11:a3:06:08:84:cd:01:42:e9:8f:a0:6c:8d:55:
         dd:0f:62:dd:54:d3:05:91:a0:8f:9e:0f:b6:c7:1b:85:df:a8:
         e1:75:ee:21:73:16:78:a5:0d:fc:f9:ea:e0:f1:20:2f:a4:70:
         6e:e5:8a:15:b9:7b:0f:60:68:81:97:18:51:c7:c8:e7:33:4c:
         bb:a7:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org