Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ftd_H5lUBYLmoYVmYehwHNw0Fpo.roa
File:                     Ftd_H5lUBYLmoYVmYehwHNw0Fpo.roa (raw, json)
Hash identifier:          kkI0TvJo+jclFyqu6uHH5TZRgYojqf/bFk1wDzXvMu4=
Subject key identifier:   16:D7:7F:1F:99:54:05:82:E6:A1:85:66:61:E8:70:1C:DC:34:16:9A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ftd_H5lUBYLmoYVmYehwHNw0Fpo.roa
Signing time:             Thu 15 Sep 2022 02:53:24 +0000
ROA not before:           Thu 15 Sep 2022 02:53:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        103.224.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=16D77F1F99540582E6A1856661E8701CDC34169A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bb:15:fc:06:f4:17:f6:2f:ec:35:1a:9e:53:
                    28:9a:ba:37:be:82:34:77:22:07:13:00:97:59:a9:
                    3b:1d:ef:7f:e9:1c:00:87:79:b7:16:97:67:1f:2d:
                    07:8d:5a:4a:3b:46:38:fa:76:6e:58:f6:b7:e9:f8:
                    b3:0f:9a:dd:1b:48:99:29:92:3f:28:a8:b4:2f:58:
                    61:23:4e:03:b6:06:fb:d0:66:a1:fa:b9:f9:88:af:
                    26:80:ee:5d:0c:2d:a9:e4:1a:e3:0c:c2:4f:b4:98:
                    fa:f8:f6:b5:e4:44:4a:1f:2f:6b:20:65:86:f6:0e:
                    6e:52:8f:ef:24:7d:11:98:dc:bb:16:dd:68:17:f3:
                    38:78:4f:0c:5f:86:60:a4:02:97:0c:9e:37:e9:a2:
                    33:7a:26:99:e6:03:c1:75:8d:92:c6:aa:ce:59:20:
                    b8:18:ee:d8:42:fd:56:ab:de:ff:96:50:d1:db:22:
                    9b:14:b7:cd:cb:d5:6a:97:c4:aa:41:42:e8:92:9a:
                    1c:b4:e3:0b:32:0a:5c:c2:89:13:36:e9:9c:28:c2:
                    e0:c8:ef:ac:12:6b:e7:b4:81:79:e5:0c:4e:c5:4e:
                    92:a8:17:13:c9:c2:f1:f8:db:e4:57:89:99:8a:87:
                    09:6e:40:2e:6c:96:81:6a:e0:d5:dc:c8:c2:32:95:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D7:7F:1F:99:54:05:82:E6:A1:85:66:61:E8:70:1C:DC:34:16:9A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ftd_H5lUBYLmoYVmYehwHNw0Fpo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:cd:39:e7:ce:1c:8d:02:a4:be:dc:67:d1:33:00:2b:cb:4e:
         e1:b1:16:10:a3:6a:fa:33:42:f5:15:da:98:1a:0d:f3:c6:58:
         29:5b:3e:79:63:38:5a:26:40:f2:c9:cb:93:40:d2:0e:6d:de:
         96:c7:fa:1a:0d:31:45:04:70:0e:28:37:55:23:89:c1:04:22:
         a9:92:bc:f3:b5:96:50:d9:5a:c9:be:ea:ce:e0:ba:22:92:e5:
         8c:87:ea:41:7a:87:6d:aa:3f:25:00:bc:c9:9c:40:42:15:de:
         f3:21:d3:86:35:a3:ac:f7:91:cd:af:42:1e:5f:8b:73:65:31:
         e8:dd:13:2f:0b:65:c9:64:41:ba:16:ef:d7:65:4e:f6:e2:c4:
         d2:a1:56:14:6c:6e:bf:33:de:40:f0:51:e5:22:ab:69:b9:cb:
         f5:d6:2d:fe:1b:0d:46:93:5f:68:9f:f4:e2:df:66:93:d7:fc:
         a0:a6:b2:39:46:c9:a0:3d:fb:74:72:52:78:c2:d7:40:e2:2d:
         ee:24:8c:11:5e:f1:29:7d:3b:4e:69:5c:b3:e6:b8:3b:9f:fc:
         d0:bb:c1:55:c0:4b:7b:85:20:c3:0c:cf:3b:cc:14:f2:92:3c:
         f2:b6:c7:60:2b:c9:a0:34:12:6f:23:3b:aa:d2:a5:cc:ca:7c:
         7d:62:01:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org