Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DJQVpYrk1BXm-_NCV2uDJiMfETA.roa
File:                     DJQVpYrk1BXm-_NCV2uDJiMfETA.roa (raw, json)
Hash identifier:          miBmjjyKTmMQ/D+C3S3dy3frC6f/A4BCSUKCkPzDHuc=
Subject key identifier:   0C:94:15:A5:8A:E4:D4:15:E6:FB:F3:42:57:6B:83:26:23:1F:11:30
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16FB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DJQVpYrk1BXm-_NCV2uDJiMfETA.roa
Signing time:             Sun 07 Feb 2021 12:15:46 +0000
ROA not before:           Sun 07 Feb 2021 12:15:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5883 (0x16fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:15:46 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0C9415A58AE4D415E6FBF342576B8326231F1130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5f:10:8a:a5:84:ee:cd:eb:94:00:3a:ce:38:
                    0b:2c:51:3d:28:29:7e:7e:94:7b:9d:1d:f1:03:1f:
                    d3:f9:07:5c:d6:74:12:67:c3:63:26:4b:1f:f9:68:
                    a3:31:46:c2:71:4c:d6:39:be:94:d7:7d:90:40:35:
                    7e:59:9a:90:4c:2f:9f:fd:98:1e:fd:33:67:8f:e6:
                    00:a5:77:b0:26:36:88:36:7e:0f:a7:b2:6a:20:f4:
                    6a:af:c3:ca:84:51:77:58:c5:e5:fa:21:33:9f:77:
                    28:06:97:94:60:83:82:3f:b7:d4:db:63:c7:b5:70:
                    af:04:65:84:27:14:5e:23:91:9c:06:bf:bd:50:0b:
                    89:41:0f:f9:6f:2b:43:89:50:d5:1e:6b:32:e9:1f:
                    2b:7c:c6:c3:17:d2:2e:86:15:47:ec:54:60:15:81:
                    d9:6f:f1:26:fe:46:90:4f:5e:dd:72:fe:ac:88:9d:
                    5e:cf:84:9c:b0:6d:bd:96:14:4e:1e:22:43:f5:6c:
                    cd:56:73:97:cd:55:92:99:cf:f3:51:ca:88:b8:e5:
                    55:73:83:04:33:f9:8a:ea:f2:05:8f:e1:3b:22:9b:
                    7b:1b:51:b3:69:cb:05:23:e9:4d:e5:e3:54:cf:c4:
                    43:6f:73:e1:e7:4f:de:48:83:76:9b:d5:9e:5b:ff:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:94:15:A5:8A:E4:D4:15:E6:FB:F3:42:57:6B:83:26:23:1F:11:30
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DJQVpYrk1BXm-_NCV2uDJiMfETA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:62:de:4d:2e:f2:2c:a4:40:5a:bc:55:89:f1:13:34:4d:e2:
         e2:9c:9b:d7:6f:5b:21:fc:13:9a:f3:fe:e0:db:ac:24:46:86:
         5e:4a:fc:97:d7:55:77:a7:fc:9f:cd:a5:76:a7:66:02:3b:92:
         72:b4:6b:80:ba:e7:8c:b4:42:c2:a8:a8:45:98:a2:5b:3a:12:
         62:ab:00:39:b9:c1:46:b5:c5:64:f3:d4:98:e6:2b:44:34:96:
         ff:c3:19:08:87:0f:d3:13:1d:e6:58:92:6c:7b:5f:e7:fa:6b:
         8c:bb:3e:0b:55:24:ae:99:0b:57:56:72:e6:2e:40:b3:d4:d4:
         1f:f7:b6:b6:7c:23:c9:1d:17:1c:82:72:fd:1d:2e:6c:fd:71:
         f1:da:46:ee:4c:3f:2a:0e:96:d3:17:95:18:c8:1a:11:60:cd:
         b6:5d:e5:e1:e4:14:20:9b:a2:9c:e4:05:4d:f6:71:f3:72:cb:
         6f:e9:49:3c:2b:90:6d:b9:f3:8d:3c:d7:30:ef:a6:a0:7a:a4:
         77:45:94:4f:55:c2:d8:1c:66:be:b0:02:f5:23:a3:84:fb:b2:
         09:3d:58:15:b9:94:14:62:4b:c5:4f:0a:05:cb:22:a8:e3:14:
         14:fc:d5:c4:e6:22:c1:00:05:0b:6e:46:01:28:cd:8f:32:4f:
         97:5d:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-fra.rpki-client.org