Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ankt9ui_7tbeEsripQcOGia-Uo8.roa
File:                     Ankt9ui_7tbeEsripQcOGia-Uo8.roa (raw, json)
Hash identifier:          p3tKw1IP77h983wImMUwyQHFjm5/SHt4SMC3dH8qecE=
Subject key identifier:   02:79:2D:F6:E8:BF:EE:D6:DE:12:CA:E2:A5:07:0E:1A:26:BE:52:8F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ankt9ui_7tbeEsripQcOGia-Uo8.roa
Signing time:             Thu 15 Sep 2022 02:45:30 +0000
ROA not before:           Thu 15 Sep 2022 02:45:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.201.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=02792DF6E8BFEED6DE12CAE2A5070E1A26BE528F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:91:15:ef:f8:d9:0f:0b:a6:24:bb:dc:95:
                    d5:4f:01:8b:56:bd:8a:d6:77:26:4b:ff:69:fc:d6:
                    37:ab:3e:99:e1:9b:23:50:15:2a:02:dd:4c:64:48:
                    ec:61:a9:3f:68:1b:81:06:b2:9a:c3:57:b0:f8:8a:
                    c4:40:ad:25:1c:ec:c2:c0:05:1b:e0:08:9f:8a:a9:
                    1b:6d:0f:8a:d8:fa:b3:7d:6f:f5:15:af:1b:fd:7d:
                    36:a7:b7:0b:1d:51:11:70:65:85:d9:c0:65:f7:71:
                    4b:24:95:9f:33:1b:0d:58:0e:f0:23:d6:03:01:5a:
                    13:65:7a:a5:33:50:b7:a9:91:17:07:65:99:04:71:
                    87:b9:cb:9c:03:6c:bb:0c:52:4d:00:04:16:96:88:
                    3f:58:48:e0:51:87:96:00:78:8c:8f:da:c6:46:cd:
                    9c:77:10:28:4d:57:4a:ea:df:60:8c:ae:05:6b:44:
                    89:4b:99:e3:5d:9e:b1:0f:43:2c:51:4d:81:60:fe:
                    8a:39:b6:02:e3:c3:98:21:37:a2:25:66:95:9b:3f:
                    1b:30:67:a0:91:14:4e:36:57:74:35:01:a6:cd:ea:
                    59:38:2e:cd:12:2b:9d:e4:fd:d8:e5:03:29:b4:a6:
                    ce:4d:fe:c9:b9:3b:1a:c5:12:54:e3:da:7b:30:34:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:79:2D:F6:E8:BF:EE:D6:DE:12:CA:E2:A5:07:0E:1A:26:BE:52:8F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ankt9ui_7tbeEsripQcOGia-Uo8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.201.64/26

    Signature Algorithm: sha256WithRSAEncryption
         23:56:68:40:a9:84:be:20:23:db:9f:38:e5:74:80:40:59:0a:
         a8:b0:cc:a8:b2:9e:af:c8:0d:ae:ab:e0:52:19:81:82:9b:0d:
         fd:62:b2:ac:7f:4b:16:a8:e9:5b:ae:34:8b:b4:73:1e:0a:d8:
         a7:fd:28:7a:eb:fd:38:c3:7d:eb:92:55:fb:23:69:df:95:c5:
         55:51:3e:dc:2b:35:b2:63:3d:57:d8:c3:c5:75:ef:87:77:e2:
         9b:bd:31:c8:0f:0c:6a:2d:b5:58:47:b9:d0:0c:30:50:95:9f:
         0f:c0:ac:15:ba:02:38:b0:c3:80:7b:e1:41:c8:27:2f:13:8b:
         fb:96:7d:b6:5a:2f:ab:9b:f4:bb:b1:5c:3a:ae:af:50:72:1a:
         38:b2:a1:d8:32:c8:a2:d0:27:8e:a2:91:32:e1:15:ce:76:61:
         3c:54:00:38:9e:e8:e0:0d:09:40:f5:35:d6:95:97:cb:1a:70:
         c8:d4:cb:f2:e1:eb:22:36:73:2d:ea:c6:e3:87:24:25:49:54:
         55:05:b6:32:c9:60:60:7f:3a:19:84:26:15:e8:ca:ed:5a:5a:
         91:ef:8e:bc:bd:01:09:cf:d4:d3:fb:c0:5c:dd:61:6c:98:3d:
         fb:fc:54:7b:27:dd:2f:35:fb:1b:8b:0f:04:33:e2:ee:98:4b:
         cf:a0:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org