Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EthLG0tTigenET1mf7g6-dkjgrs.roa
File:                     EthLG0tTigenET1mf7g6-dkjgrs.roa (raw, json)
Hash identifier:          ODBTgIaqDjT37p0Gr00d3MpXzSL49KLfEBtpFW3FRdM=
Subject key identifier:   12:D8:4B:1B:4B:53:8A:07:A7:11:3D:66:7F:B8:3A:F9:D9:23:82:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       229E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EthLG0tTigenET1mf7g6-dkjgrs.roa
Signing time:             Fri 25 Nov 2022 04:41:25 +0000
ROA not before:           Fri 25 Nov 2022 04:41:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8862 (0x229e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=12D84B1B4B538A07A7113D667FB83AF9D92382BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:a8:f4:04:a2:69:24:95:27:bf:1b:a5:b4:
                    42:5a:a7:b6:e4:b8:68:2e:56:34:f0:e6:67:83:0f:
                    c7:65:0e:75:67:39:e8:4a:66:bb:d7:29:fd:44:c6:
                    f9:11:3d:8b:7d:50:cd:30:17:4e:c3:70:c7:28:d1:
                    05:c7:b8:99:e6:0d:1e:26:35:e5:6a:40:9e:a7:27:
                    e8:06:db:77:ef:0f:a2:cb:b9:4c:ea:b2:1a:55:02:
                    cb:51:af:17:23:80:cd:47:35:29:5a:20:a4:e5:85:
                    a2:68:bc:f6:15:02:29:44:77:58:01:6e:ab:f8:f7:
                    f4:6e:27:13:90:76:94:e2:3f:d2:c6:21:96:d8:70:
                    85:bd:82:81:b9:5a:e0:e5:3b:ac:60:e5:39:7c:3f:
                    90:f8:a9:bc:f5:cb:36:62:89:63:56:be:76:1a:f4:
                    bd:b4:2c:06:6b:bd:30:89:90:c5:d3:36:04:72:ac:
                    68:ef:6d:2a:8e:fd:19:34:9b:20:06:27:13:ef:27:
                    88:a6:b1:26:ba:ef:62:66:45:00:e9:a1:20:9d:16:
                    47:f6:57:75:3f:18:68:6e:9f:b7:44:5f:a5:02:96:
                    e3:d8:80:0c:0e:58:f8:1f:29:cc:c3:54:61:5d:39:
                    58:0e:09:16:ac:83:f7:b5:ca:59:75:ac:dc:2c:c3:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D8:4B:1B:4B:53:8A:07:A7:11:3D:66:7F:B8:3A:F9:D9:23:82:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EthLG0tTigenET1mf7g6-dkjgrs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:c8:25:b7:34:da:e6:79:ba:fc:c5:ce:6b:a0:3b:45:17:63:
         d2:92:0d:21:8e:d4:a6:7c:ae:43:18:19:da:f8:6c:67:79:31:
         0a:78:1e:00:2e:5e:55:1a:ce:77:45:d8:24:26:6a:51:88:4b:
         98:fd:27:2c:d8:f4:c3:f1:c5:d3:56:ad:31:0a:c4:4d:38:de:
         24:51:93:f1:7d:b0:2d:df:cd:d3:0f:3b:2c:02:8f:85:83:f5:
         f7:31:cb:aa:65:63:90:21:fb:12:ce:a5:f0:79:6a:7f:76:f0:
         5c:a5:b6:7b:6c:7b:1b:29:0d:f8:dd:51:fd:f8:91:a1:ab:56:
         d3:dd:42:5d:56:21:4b:67:db:b6:28:8b:33:87:62:1a:90:b7:
         50:9d:ea:4d:b2:53:4a:09:1a:15:94:c5:51:52:a3:f0:f4:07:
         da:c7:d9:25:e3:6d:cf:bf:b0:29:fe:74:4a:9b:b9:81:4a:0a:
         0c:e4:a7:ed:dc:d2:0c:2e:45:2e:7b:d8:5e:a6:0d:0f:e3:1d:
         75:7c:c8:b9:b3:1c:bc:bd:ea:c5:36:a6:aa:58:ea:5a:ed:15:
         b3:75:19:35:59:ff:f1:33:db:55:40:20:1f:81:6f:9b:16:e7:
         8a:88:e8:1e:93:6e:8c:40:2d:9e:03:56:db:92:c4:af:e4:56:
         3e:77:c6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org