Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JIiRjZXiszOZF3MBiim-MBdUXPg.roa
File:                     JIiRjZXiszOZF3MBiim-MBdUXPg.roa (raw, json)
Hash identifier:          nKJOSlMNDkvM7HM8RLa9+ClSKc1lfpAG8TH2SbwXkyU=
Subject key identifier:   24:88:91:8D:95:E2:B3:33:99:17:73:01:8A:29:BE:30:17:54:5C:F8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C56
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JIiRjZXiszOZF3MBiim-MBdUXPg.roa
Signing time:             Wed 29 Sep 2021 02:47:37 +0000
ROA not before:           Wed 29 Sep 2021 02:47:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7254 (0x1c56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2488918D95E2B333991773018A29BE3017545CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:3d:c7:63:f1:12:5c:70:9a:7b:3d:6e:6a:
                    7b:38:44:09:69:ce:ce:fe:7a:0e:8c:28:f4:c2:7d:
                    5a:62:1c:1f:76:47:6a:a9:42:04:a1:c5:c6:b2:50:
                    9d:ec:6a:78:e1:42:5c:5e:80:aa:03:9c:43:32:77:
                    c0:a5:3d:cd:e4:2b:b8:66:2e:32:af:9a:46:58:b8:
                    a4:b4:ba:06:69:a3:05:1d:6b:c4:0e:57:af:9d:20:
                    e2:37:f3:c6:0a:18:36:39:e8:44:38:60:4e:a4:3f:
                    82:45:4a:44:26:52:4d:23:3c:d5:8e:fa:e1:29:b9:
                    72:bd:e4:d8:c4:63:be:c6:89:83:d3:07:9f:c6:b4:
                    25:52:c4:4d:07:65:4a:df:7f:42:45:a5:73:02:d0:
                    5a:02:ce:ea:42:12:f3:a4:6b:0b:e0:8b:3e:32:cd:
                    b9:12:f5:07:8c:b4:7d:1b:cd:aa:13:79:73:fe:5d:
                    78:fe:f1:e3:a3:63:de:03:1c:0c:a1:ab:69:48:10:
                    87:a1:9a:c0:c5:24:ee:09:c8:4e:c1:b0:60:a6:3b:
                    64:1a:47:bf:e4:89:aa:89:15:ea:4a:8f:b4:8c:12:
                    58:04:2e:53:3a:95:8f:1b:00:2f:d6:56:da:e1:4a:
                    c4:78:23:15:4f:a1:03:ee:16:73:8c:5d:fc:44:ef:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:88:91:8D:95:E2:B3:33:99:17:73:01:8A:29:BE:30:17:54:5C:F8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JIiRjZXiszOZF3MBiim-MBdUXPg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:37:c3:96:51:9f:ac:72:00:9b:12:a8:05:c3:80:8e:49:dd:
         d7:fb:a8:fc:af:96:2d:45:a3:f7:b1:dd:e2:e0:d1:44:13:ff:
         02:5d:e2:24:5e:1a:1a:2c:10:7b:94:16:e5:77:07:ae:6a:5a:
         e6:7d:32:9f:45:68:ff:d3:fb:ef:72:2a:7e:0d:ec:43:b1:ae:
         80:fe:f3:1e:5f:0c:60:66:e3:a6:a7:1d:54:cd:41:0b:95:86:
         1a:24:7a:25:92:71:46:ae:f6:8e:26:e3:15:be:0f:7d:c6:ca:
         ec:cc:d9:cc:fa:54:8f:9e:3a:c1:95:62:2a:9f:e7:bb:bb:23:
         86:e2:42:6a:d2:37:66:8f:ee:72:75:9f:aa:f2:ca:69:00:e0:
         e6:9e:e4:e6:58:fa:40:40:34:65:70:56:1e:a0:da:f7:f2:3f:
         09:d1:98:6e:76:8d:0a:7f:f0:ee:e9:72:00:b7:55:ed:05:e1:
         42:44:a6:7e:9c:59:6a:da:90:de:02:44:7f:b5:4c:3a:a1:04:
         88:73:fe:b8:04:0d:8d:29:9e:f0:ca:41:9a:31:69:5a:81:4f:
         42:dc:10:31:aa:58:50:a0:cd:1c:af:dc:74:d0:6f:74:a2:50:
         2e:4f:49:5c:70:29:6e:54:31:0d:67:0f:b9:b7:2e:a2:ce:74:
         8d:d9:81:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org