Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F-j0tyJN1xFiodKKO3fFwNNUvbk.roa
File:                     F-j0tyJN1xFiodKKO3fFwNNUvbk.roa (raw, json)
Hash identifier:          ogeht5yZAJMOIAVFAy1+XJOO9IhhLWGSXaM1xFVXc2A=
Subject key identifier:   17:E8:F4:B7:22:4D:D7:11:62:A1:D2:8A:3B:77:C5:C0:D3:54:BD:B9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       13CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F-j0tyJN1xFiodKKO3fFwNNUvbk.roa
Signing time:             Sun 07 Feb 2021 11:56:16 +0000
ROA not before:           Sun 07 Feb 2021 11:56:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5067 (0x13cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:56:16 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=17E8F4B7224DD71162A1D28A3B77C5C0D354BDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d8:92:31:0e:4a:c7:83:f8:cd:d4:32:81:a4:
                    a9:ad:bf:fd:3a:91:f9:a0:40:10:eb:21:d1:2b:26:
                    ee:9d:b5:84:ba:8c:62:63:73:9e:37:05:30:7e:7e:
                    ca:e9:b4:f8:96:dd:14:8c:82:43:a1:a5:67:e4:00:
                    be:9d:8d:40:ce:a8:4c:5b:f2:b7:d1:97:77:76:b4:
                    b2:b6:d0:8e:66:6b:94:0e:a7:42:93:e7:f4:d4:75:
                    2a:1f:58:68:5e:bc:e9:f3:8d:2a:71:b6:3b:a7:7d:
                    1f:12:0d:8e:48:fd:d7:35:31:e7:0c:67:ee:c2:4b:
                    d3:e5:98:1e:9e:ee:d0:46:40:45:d8:dc:1c:ef:95:
                    7f:6b:0f:15:a3:0f:0d:97:a4:ce:d9:20:12:da:f7:
                    b3:16:89:5d:eb:ee:81:fe:b3:83:e3:82:a8:57:ed:
                    d4:71:a9:0a:56:6d:6a:f9:f1:c1:f1:d9:f8:ad:52:
                    16:e1:b5:50:62:b8:cc:ef:22:a1:1b:2b:31:cb:b4:
                    f0:f7:34:1b:71:63:b2:45:33:89:33:07:2a:5c:1e:
                    10:de:04:36:38:75:af:6c:56:cc:79:ba:75:7a:b1:
                    71:2d:23:96:21:a1:91:18:66:95:e4:a3:55:0b:84:
                    6a:18:20:e4:6b:c7:6f:3f:53:95:f3:1b:46:19:f2:
                    8c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E8:F4:B7:22:4D:D7:11:62:A1:D2:8A:3B:77:C5:C0:D3:54:BD:B9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F-j0tyJN1xFiodKKO3fFwNNUvbk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:6c:14:c0:22:e2:bc:72:d1:2e:02:c8:67:e6:b3:12:e1:ce:
         9f:ee:d9:44:7e:1b:78:fb:c4:a5:cb:94:73:7d:39:12:47:5e:
         cf:31:e9:9c:fb:07:1c:be:22:e6:e9:08:8b:68:8b:c2:11:37:
         01:88:f6:5a:b2:e9:7e:53:82:08:dc:1b:07:66:f9:01:74:22:
         81:6a:76:91:2b:81:90:87:bb:77:a9:d5:d3:e1:db:ea:c9:3f:
         82:0a:31:a0:92:87:51:0e:8c:2c:27:d7:d5:7e:59:a9:a4:82:
         1d:1d:d4:a4:39:e3:46:53:34:2c:d0:a8:7b:51:b8:56:29:fb:
         56:48:f3:58:68:7c:0e:6c:3b:b6:42:11:77:ac:11:b1:bc:81:
         a4:0b:eb:48:a5:47:c1:42:f5:27:ac:89:fa:80:41:c6:87:a5:
         cd:3a:05:99:a0:a0:14:08:f4:ec:28:65:11:f1:eb:98:c3:5f:
         17:42:e1:db:da:75:df:44:8d:64:96:1d:cf:39:74:28:8c:66:
         3d:57:96:e1:f4:95:f7:d4:d7:4a:53:7a:d1:57:49:14:b4:69:
         c2:3a:b9:19:72:c7:ba:ff:a2:9b:82:e9:ec:a1:b6:86:8b:ae:
         58:e6:4f:60:8c:8f:ce:de:b9:f4:df:64:3c:19:9a:43:10:eb:
         b1:06:74:0e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU2MTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE3RThGNEI3MjI0REQ3
MTE2MkExRDI4QTNCNzdDNUMwRDM1NEJEQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy2JIxDkrHg/jN1DKBpKmtv/06kfmgQBDrIdErJu6dtYS6jGJj
c543BTB+fsrptPiW3RSMgkOhpWfkAL6djUDOqExb8rfRl3d2tLK20I5ma5QOp0KT
5/TUdSofWGhevOnzjSpxtjunfR8SDY5I/dc1MecMZ+7CS9PlmB6e7tBGQEXY3Bzv
lX9rDxWjDw2XpM7ZIBLa97MWiV3r7oH+s4PjgqhX7dRxqQpWbWr58cHx2fitUhbh
tVBiuMzvIqEbKzHLtPD3NBtxY7JFM4kzBypcHhDeBDY4da9sVsx5unV6sXEtI5Yh
oZEYZpXko1ULhGoYIORrx28/U5XzG0YZ8oxTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUF+j0tyJN1xFiodKKO3fFwNNUvbkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0YtajB0eUpOMXhGaW9kS0tP
M2ZGd05OVXZiay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR2
6UAwDQYJKoZIhvcNAQELBQADggEBAB9sFMAi4rxy0S4CyGfmsxLhzp/u2UR+G3j7
xKXLlHN9ORJHXs8x6Zz7Bxy+IubpCItoi8IRNwGI9lqy6X5TggjcGwdm+QF0IoFq
dpErgZCHu3ep1dPh2+rJP4IKMaCSh1EOjCwn19V+Wamkgh0d1KQ540ZTNCzQqHtR
uFYp+1ZI81hofA5sO7ZCEXesEbG8gaQL60ilR8FC9SesifqAQcaHpc06BZmgoBQI
9OwoZRHx65jDXxdC4dvadd9EjWSWHc85dCiMZj1XluH0lffU10pTetFXSRS0acI6
uRlyx7r/opuC6eyhtoaLrljmT2CMj87eufTfZDwZmkMQ67EGdA4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org