Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EOQZnhbm75jDLi6lvbcEegn-3NA.roa
File:                     EOQZnhbm75jDLi6lvbcEegn-3NA.roa (raw, json)
Hash identifier:          NwAZjrJ5Z25ntLLLNN31i66mttJ3AdHdGmPXnof43lI=
Subject key identifier:   10:E4:19:9E:16:E6:EF:98:C3:2E:2E:A5:BD:B7:04:7A:09:FE:DC:D0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BD3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EOQZnhbm75jDLi6lvbcEegn-3NA.roa
Signing time:             Wed 29 Sep 2021 02:47:03 +0000
ROA not before:           Wed 29 Sep 2021 02:47:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.205.0/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7123 (0x1bd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=10E4199E16E6EF98C32E2EA5BDB7047A09FEDCD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:d7:f8:98:fa:34:71:00:92:06:16:41:0d:
                    4d:27:af:3f:d6:37:64:e5:77:f1:e3:ae:58:35:59:
                    37:92:d4:51:10:92:29:28:78:cb:98:de:ac:a5:ee:
                    f8:89:4b:f0:e0:82:fc:15:24:bd:10:59:eb:18:35:
                    18:62:69:70:9a:78:a3:4e:a5:d0:6f:16:9e:bf:2c:
                    fc:e2:df:c4:df:bb:b0:2c:cf:f3:99:b3:6e:0f:29:
                    47:ea:9c:b1:32:0c:ec:60:8b:46:66:6c:fc:c7:cd:
                    ee:c4:e7:e6:6c:0a:ee:67:53:64:dc:33:41:68:1d:
                    47:40:87:26:12:ed:70:ae:3b:82:77:1e:08:54:cd:
                    38:1e:af:d3:9d:ca:78:5e:c1:23:ab:8f:43:94:2d:
                    23:59:12:c0:b6:c4:55:73:1a:c2:a1:b2:df:08:39:
                    f8:68:c1:4b:13:41:4a:e1:9f:ac:8f:04:0c:63:0c:
                    62:92:38:ce:d3:7a:29:e8:0e:a0:83:1c:cf:4e:12:
                    7a:1d:7b:e7:b8:36:02:98:72:e1:d3:ca:61:20:23:
                    39:bf:74:f1:96:c6:34:1c:3e:d8:18:f9:35:78:e4:
                    6e:fc:f8:8e:5c:08:87:f3:09:ad:fb:05:03:e2:6f:
                    1a:c5:45:da:8a:73:40:98:77:27:36:ff:de:57:21:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E4:19:9E:16:E6:EF:98:C3:2E:2E:A5:BD:B7:04:7A:09:FE:DC:D0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EOQZnhbm75jDLi6lvbcEegn-3NA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.205.0/28

    Signature Algorithm: sha256WithRSAEncryption
         2d:11:28:d0:53:d0:b2:04:42:f1:44:ba:1e:66:72:58:62:dd:
         b4:a3:c1:a3:c4:69:90:43:5c:50:c9:bf:57:d3:62:17:d7:4e:
         5e:01:7f:e4:fd:fc:d4:77:e0:de:a1:5c:af:f3:bf:bc:76:86:
         4f:7e:2d:ac:bd:74:ab:58:d4:92:53:bb:b1:29:f8:ec:e9:af:
         ff:59:69:60:32:88:09:4a:45:0c:47:f4:98:d4:ca:c7:6c:59:
         21:f8:49:58:c5:22:81:87:f1:63:c6:e9:b6:38:85:26:b9:21:
         42:78:b4:0d:1a:25:88:cd:2c:cf:31:86:f4:5a:f3:99:5d:3c:
         38:79:0c:c3:da:eb:13:a7:db:22:9f:1a:b2:bf:93:c5:10:d9:
         58:b4:f0:13:4d:c8:91:85:6d:2d:14:00:f9:be:d8:6d:21:af:
         e0:6d:f3:df:a3:c8:39:0c:f1:fe:a5:a7:81:0f:6d:b7:f8:81:
         b8:8d:a5:02:0c:bd:9b:6b:f8:17:ae:bf:72:d3:94:63:4d:c1:
         37:7e:bc:72:e4:b7:72:4e:f0:54:a3:0a:8a:f3:26:41:6a:1d:
         40:9e:49:a7:89:86:71:5b:68:05:c9:fd:f7:c3:b1:87:e5:31:
         fe:c6:ec:99:3c:50:33:ee:1d:26:40:0f:88:92:12:c3:9d:08:
         13:f2:3c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org