Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AMFIeuBPbgwAsJVual2TCzH5TV8.roa
File:                     AMFIeuBPbgwAsJVual2TCzH5TV8.roa (raw, json)
Hash identifier:          yAgYwuw+wGEeaQ3LDLhkaDV+ZmORqUeC/iiIeZYOWNM=
Subject key identifier:   00:C1:48:7A:E0:4F:6E:0C:00:B0:95:6E:6A:5D:93:0B:31:F9:4D:5F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C1E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AMFIeuBPbgwAsJVual2TCzH5TV8.roa
Signing time:             Wed 29 Sep 2021 02:47:22 +0000
ROA not before:           Wed 29 Sep 2021 02:47:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7198 (0x1c1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=00C1487AE04F6E0C00B0956E6A5D930B31F94D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:61:bc:f3:37:60:14:ad:12:29:d4:5f:14:
                    de:88:3d:de:50:4e:8c:5d:7a:4e:c3:43:00:ee:6e:
                    a3:9a:a4:45:92:51:97:c0:5a:23:4d:c3:5d:f8:8d:
                    07:d9:0a:25:c9:1c:75:7d:8b:c3:ff:ba:8f:0b:07:
                    cc:0b:53:5d:f3:b6:7d:ff:4f:3a:52:15:37:a5:ae:
                    1b:54:9a:40:02:cc:c5:f9:b1:59:6b:63:79:36:63:
                    52:97:d3:e0:df:13:67:03:7a:23:6d:96:5c:8f:00:
                    0f:3f:e0:11:d2:29:3e:99:77:a9:68:25:37:58:72:
                    11:7b:5b:83:8f:40:fb:16:f6:45:5c:d0:e0:90:75:
                    fe:f7:32:ac:20:35:50:b1:5d:6e:9c:b6:a5:39:a4:
                    8b:0d:d9:ba:ef:76:bf:b3:aa:49:60:e0:17:5d:ba:
                    3f:8f:84:d7:c5:18:bc:4c:5a:9e:6e:99:15:bf:14:
                    fb:c5:4d:11:0c:5c:2d:3c:1d:ef:b3:81:81:3b:9a:
                    17:1f:d3:a9:73:ab:5b:db:3a:83:b9:89:27:71:4d:
                    a1:ee:20:42:34:b5:90:c2:9a:db:6d:ca:a9:1d:07:
                    40:5f:d6:df:62:82:11:a8:c1:03:6f:2f:b6:8f:a0:
                    2d:aa:9b:3c:ee:55:4c:6a:9d:b0:3d:2d:d9:8c:82:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C1:48:7A:E0:4F:6E:0C:00:B0:95:6E:6A:5D:93:0B:31:F9:4D:5F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AMFIeuBPbgwAsJVual2TCzH5TV8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:48:a9:00:d1:ec:bf:08:53:39:f1:d8:71:64:33:52:8b:e0:
         e4:e4:d4:3e:cf:09:6f:be:75:9a:b4:5e:37:6f:34:8d:d3:b9:
         ef:d4:b3:d4:8d:dd:80:c4:af:18:c9:d3:19:c7:b8:11:09:ab:
         9c:0a:c6:a3:f2:fa:cb:a9:90:1b:55:6c:01:16:7f:e1:5f:77:
         7a:b2:71:6c:47:9e:0b:05:ee:e7:9f:67:ee:d7:02:0f:53:fa:
         cd:01:2b:0d:f5:d4:c7:f5:6d:25:f0:3a:0c:e9:1d:9a:53:65:
         e8:e2:dd:a1:9e:07:ed:21:5c:db:8b:52:45:f5:46:99:0e:f3:
         9b:6b:44:bd:b3:94:3c:d5:51:17:91:64:50:e5:43:51:53:11:
         49:fc:c1:8b:3d:a6:7f:03:d3:2c:8d:db:6c:56:31:63:00:31:
         74:5c:39:a4:df:ce:a2:4e:5b:60:13:bb:a0:b5:51:b4:67:0e:
         ee:c4:69:a3:f8:59:5d:f4:63:c2:76:62:35:22:cc:9f:19:49:
         2b:ba:b9:23:b5:97:a9:68:bf:ed:7c:30:e5:88:43:79:ce:50:
         c9:0c:0b:bc:88:77:b6:13:9c:22:3c:f1:9c:07:2f:1b:7a:30:
         98:c2:36:71:6d:5e:98:03:63:9b:c5:b2:c3:be:84:a5:50:dc:
         55:99:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org