Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BFuTVsIMfUWNY6UDtlKcVWALNoI.roa
File:                     BFuTVsIMfUWNY6UDtlKcVWALNoI.roa (raw, json)
Hash identifier:          y6gSbsk2TmBTHa/5ot685uLIR98AExeKvBrVn3ElUpc=
Subject key identifier:   04:5B:93:56:C2:0C:7D:45:8D:63:A5:03:B6:52:9C:55:60:0B:36:82
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F85
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BFuTVsIMfUWNY6UDtlKcVWALNoI.roa
Signing time:             Tue 29 Sep 2020 09:57:03 +0000
ROA not before:           Tue 29 Sep 2020 09:57:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3973 (0xf85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:57:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=045B9356C20C7D458D63A503B6529C55600B3682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:72:5c:6d:e1:eb:c2:b0:cf:d5:a1:1b:59:
                    7e:25:2e:06:e7:83:56:ad:53:2d:d8:b6:77:36:fd:
                    c4:85:19:96:2b:8e:d1:fb:d9:86:d0:91:f9:bc:34:
                    cf:48:b3:68:86:91:c6:78:e9:55:67:90:fc:50:c6:
                    63:0a:b0:b6:37:7b:2c:d3:0e:9c:df:c7:65:d4:bf:
                    10:0b:f9:f4:5f:9d:9b:b2:20:86:f6:49:0d:26:06:
                    47:a7:54:f8:cf:94:55:f9:f7:1a:a0:60:e6:d9:f8:
                    d1:80:c3:e1:cf:1d:96:c9:a3:2c:c2:16:7e:d8:78:
                    3d:ee:3a:94:fb:95:87:81:c7:15:fa:3a:89:e5:76:
                    95:ae:5d:3d:cb:a1:fd:08:26:45:62:8a:b9:39:36:
                    3b:ed:17:d8:d9:c8:5f:be:d8:3e:1a:8c:b5:3e:55:
                    02:82:9d:6a:52:a4:c3:f4:b6:43:57:d5:63:b5:b1:
                    94:9c:6c:a5:eb:30:5b:86:2b:2c:41:ae:19:03:43:
                    f6:3f:58:24:43:ae:3f:ee:c8:d8:38:ae:1f:49:e7:
                    22:19:07:fc:d8:34:46:b6:7a:ea:35:a0:be:19:11:
                    67:30:94:3c:5d:27:e4:10:cb:ba:0d:58:3b:70:c2:
                    f6:d1:72:58:91:9e:45:66:82:a2:13:c2:8e:98:d6:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:93:56:C2:0C:7D:45:8D:63:A5:03:B6:52:9C:55:60:0B:36:82
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BFuTVsIMfUWNY6UDtlKcVWALNoI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:59:64:8e:29:cf:59:50:84:d7:e1:36:30:d2:9f:1d:e3:32:
         ab:9c:00:02:84:15:6b:5d:c4:a7:65:76:d3:ee:4f:ea:3c:e0:
         6b:b1:cf:2d:fe:06:0b:69:c9:d6:38:00:43:46:56:de:24:4b:
         0f:66:79:a4:7c:9a:87:eb:ea:80:ea:7e:c8:10:08:ac:79:7c:
         d3:04:ce:b1:72:cb:18:e2:cb:ff:e9:35:12:7a:07:3d:5b:30:
         cc:39:c6:1a:d6:62:b2:f1:69:97:cd:b1:37:fb:c9:79:d5:fd:
         c7:c3:a9:cf:c2:73:6e:e3:ba:9a:21:43:11:1e:cc:9d:45:06:
         bb:7d:d2:f2:71:81:b5:db:48:b8:72:07:0b:2a:35:4c:23:8b:
         b7:53:54:c4:5a:94:32:cc:3e:c6:ec:01:5c:2f:e5:e2:15:27:
         ad:1d:32:59:c0:2b:66:6a:bc:11:ff:1e:40:9b:4f:bc:1b:71:
         20:35:c4:c9:25:a7:79:5b:48:91:cc:f8:4f:9d:36:04:04:e1:
         94:b5:90:2a:62:86:cc:46:fd:8d:8b:74:5d:a9:57:27:22:e1:
         b3:bf:7f:07:e2:cd:37:84:e5:3b:c5:c0:97:e7:74:99:9e:93:
         b7:98:b5:57:ff:24:35:c1:59:5d:4e:c6:43:6f:af:7a:fb:ef:
         05:9e:36:5a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU3MDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA0NUI5MzU2QzIwQzdE
NDU4RDYzQTUwM0I2NTI5QzU1NjAwQjM2ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiiHJcbeHrwrDP1aEbWX4lLgbng1atUy3Ytnc2/cSFGZYrjtH7
2YbQkfm8NM9Is2iGkcZ46VVnkPxQxmMKsLY3eyzTDpzfx2XUvxAL+fRfnZuyIIb2
SQ0mBkenVPjPlFX59xqgYObZ+NGAw+HPHZbJoyzCFn7YeD3uOpT7lYeBxxX6Oonl
dpWuXT3Lof0IJkViirk5NjvtF9jZyF++2D4ajLU+VQKCnWpSpMP0tkNX1WO1sZSc
bKXrMFuGKyxBrhkDQ/Y/WCRDrj/uyNg4rh9J5yIZB/zYNEa2euo1oL4ZEWcwlDxd
J+QQy7oNWDtwwvbRcliRnkVmgqITwo6Y1pEZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUBFuTVsIMfUWNY6UDtlKcVWALNoIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JGdVRWc0lNZlVXTlk2VUR0
bEtjVldBTE5vSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6fYwDQYJKoZIhvcNAQELBQADggEBAE1ZZI4pz1lQhNfhNjDSnx3jMqucAAKEFWtd
xKdldtPuT+o84Guxzy3+BgtpydY4AENGVt4kSw9meaR8mofr6oDqfsgQCKx5fNME
zrFyyxjiy//pNRJ6Bz1bMMw5xhrWYrLxaZfNsTf7yXnV/cfDqc/Cc27jupohQxEe
zJ1FBrt90vJxgbXbSLhyBwsqNUwji7dTVMRalDLMPsbsAVwv5eIVJ60dMlnAK2Zq
vBH/HkCbT7wbcSA1xMklp3lbSJHM+E+dNgQE4ZS1kCpihsxG/Y2LdF2pVyci4bO/
fwfizTeE5TvFwJfndJmek7eYtVf/JDXBWV1OxkNvr3r77wWeNlo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org