Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DHUj94n-Bwac3CDNimXTV1j00_k.roa
File:                     DHUj94n-Bwac3CDNimXTV1j00_k.roa (raw, json)
Hash identifier:          zpFVDUqBhEwdr6/IKOxUNDbFXNIqoUBzC6C0vGJl8Gs=
Subject key identifier:   0C:75:23:F7:89:FE:07:06:9C:DC:20:CD:8A:65:D3:57:58:F4:D3:F9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DHUj94n-Bwac3CDNimXTV1j00_k.roa
Signing time:             Thu 15 Sep 2022 02:45:33 +0000
ROA not before:           Thu 15 Sep 2022 02:45:33 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:33 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0C7523F789FE07069CDC20CD8A65D35758F4D3F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:2a:72:56:eb:6d:3c:a4:2c:4b:48:6a:6e:
                    18:56:12:fc:de:aa:9b:dc:e0:b6:79:55:0a:60:e0:
                    a8:1c:8a:01:f4:b5:57:ec:5c:fd:30:85:46:99:b5:
                    31:29:ae:b4:cf:bc:de:e8:07:a9:09:42:88:fd:08:
                    4b:c8:dd:ae:b1:73:5c:b9:ba:62:49:dc:0b:fc:fe:
                    27:3f:7e:1e:e1:9a:b2:83:bd:a2:00:3b:91:10:77:
                    d5:a1:11:a7:b5:1d:7d:0e:11:4d:0d:5f:55:5e:8f:
                    87:ad:ce:06:7b:ea:15:2a:53:4c:a1:aa:d8:18:7b:
                    aa:03:32:99:bf:ae:00:b9:24:ce:6b:ec:4c:61:19:
                    b7:cd:0a:8b:4f:ba:e8:84:73:3b:77:6c:a8:2e:a2:
                    50:f3:f1:8f:ac:a1:fd:42:3b:2c:14:80:94:b3:95:
                    3c:93:fc:da:b6:51:b7:72:91:ef:5d:71:2c:3f:bf:
                    59:ba:fe:97:f4:b3:80:1a:49:45:a6:a4:bf:ac:5c:
                    70:7a:fc:c5:13:0b:49:f5:f9:28:de:b2:79:3b:92:
                    8d:81:a9:8f:1c:b7:d6:b6:91:ec:7e:0c:1a:fc:c9:
                    10:81:47:4d:3a:38:7e:f8:9a:c9:dd:fc:d4:dc:d2:
                    db:be:64:0a:9f:39:fd:03:a4:a3:30:f2:6d:04:57:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:75:23:F7:89:FE:07:06:9C:DC:20:CD:8A:65:D3:57:58:F4:D3:F9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DHUj94n-Bwac3CDNimXTV1j00_k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:df:0e:eb:40:99:5d:fc:15:ab:00:fe:69:09:6d:f0:6a:59:
         de:5b:c8:5f:9b:6f:7d:67:96:cd:bf:5d:9b:6f:63:ff:b0:41:
         f2:08:f7:67:d3:a1:6b:62:a7:a8:8a:6e:c7:31:6a:a4:f4:c4:
         36:db:7f:d9:30:21:7a:af:41:b4:87:7c:a2:8e:29:bb:fe:57:
         05:8d:58:c5:5e:40:0d:f9:96:61:39:7f:be:b6:f5:fb:80:06:
         3b:99:ce:b0:42:54:5f:0c:76:ea:5f:48:d6:50:12:47:c6:21:
         d5:93:d2:06:7a:2f:74:ab:12:d9:d1:3d:7d:02:f5:50:5e:78:
         63:0c:c9:67:c1:8c:63:35:71:82:ba:df:40:06:cf:9a:47:dc:
         cb:2f:10:9c:a4:b4:0e:f4:f5:2e:75:c9:f3:eb:dd:c6:a9:75:
         4e:0b:80:11:0a:53:cf:15:82:af:52:d8:ca:be:7d:86:06:56:
         fc:29:be:1d:e6:8c:8e:e1:0b:93:b1:11:29:1c:c3:42:d9:12:
         cb:b6:88:97:61:ac:ea:ad:48:22:c4:3b:7d:4b:24:0e:6f:91:
         03:e3:8e:fb:b2:4e:d8:8a:a9:3a:71:e3:10:60:c7:f5:0b:94:
         16:d1:f0:7a:26:f9:91:d2:ec:88:cf:c2:71:9f:7c:e8:cc:c6:
         f9:34:63:90
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDBDNzUyM0Y3ODlGRTA3
MDY5Q0RDMjBDRDhBNjVEMzU3NThGNEQzRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxPypyVuttPKQsS0hqbhhWEvzeqpvc4LZ5VQpg4KgcigH0tVfs
XP0whUaZtTEprrTPvN7oB6kJQoj9CEvI3a6xc1y5umJJ3Av8/ic/fh7hmrKDvaIA
O5EQd9WhEae1HX0OEU0NX1Vej4etzgZ76hUqU0yhqtgYe6oDMpm/rgC5JM5r7Exh
GbfNCotPuuiEczt3bKguolDz8Y+sof1COywUgJSzlTyT/Nq2Ubdyke9dcSw/v1m6
/pf0s4AaSUWmpL+sXHB6/MUTC0n1+Sjesnk7ko2BqY8ct9a2kex+DBr8yRCBR006
OH74msnd/NTc0tu+ZAqfOf0DpKMw8m0EV8IDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDHUj94n+Bwac3CDNimXTV1j00/kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RIVWo5NG4tQndhYzNDRE5p
bVhUVjFqMDBfay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6bIwDQYJKoZIhvcNAQELBQADggEBAJ7fDutAmV38FasA/mkJbfBqWd5byF+bb31n
ls2/XZtvY/+wQfII92fToWtip6iKbscxaqT0xDbbf9kwIXqvQbSHfKKOKbv+VwWN
WMVeQA35lmE5f7629fuABjuZzrBCVF8MdupfSNZQEkfGIdWT0gZ6L3SrEtnRPX0C
9VBeeGMMyWfBjGM1cYK630AGz5pH3MsvEJyktA709S51yfPr3capdU4LgBEKU88V
gq9S2Mq+fYYGVvwpvh3mjI7hC5OxESkcw0LZEsu2iJdhrOqtSCLEO31LJA5vkQPj
jvuyTtiKqTpx4xBgx/ULlBbR8Hom+ZHS7IjPwnGffOjMxvk0Y5A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org