Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J_1CZRVGG0-GsAS0X6amkyyGSns.roa
File:                     J_1CZRVGG0-GsAS0X6amkyyGSns.roa (raw, json)
Hash identifier:          MQ4Bfq1jF3m0ECt1CdSWWPoOX39sp8xdeHbpfS9Dp6Q=
Subject key identifier:   27:FD:42:65:15:46:1B:4F:86:B0:04:B4:5F:A6:A6:93:2C:86:4A:7B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       184F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J_1CZRVGG0-GsAS0X6amkyyGSns.roa
Signing time:             Sun 07 Feb 2021 12:28:11 +0000
ROA not before:           Sun 07 Feb 2021 12:28:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.36.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6223 (0x184f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:28:11 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=27FD426515461B4F86B004B45FA6A6932C864A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:dd:cc:b5:ba:24:da:7f:fc:2a:cc:71:eb:
                    f9:7e:3f:63:cd:51:c7:43:88:59:c9:fc:b9:7d:b9:
                    cf:15:cf:dd:84:8e:db:12:20:92:1b:01:bf:e6:19:
                    b9:53:ef:57:dd:b5:f8:84:db:52:36:b2:9a:ed:d8:
                    49:81:47:17:99:ac:54:98:bb:26:8d:77:5a:fd:2b:
                    2e:6f:7c:ca:82:92:fe:46:70:20:af:52:13:f8:dd:
                    18:6b:83:fe:81:86:6e:65:34:55:06:e7:c1:1c:83:
                    8f:35:7e:d6:51:80:1c:4a:81:3c:dc:02:72:a1:dc:
                    78:09:76:45:c1:16:f8:eb:c8:03:24:88:de:d3:ca:
                    79:47:e0:f1:7f:c4:aa:25:7c:b2:2a:66:57:fe:05:
                    b3:6e:80:b7:43:a6:98:24:c1:5d:52:dd:59:fd:c4:
                    5e:3e:ad:c6:52:be:15:c1:81:99:79:d0:dd:c6:e5:
                    50:e7:e4:cc:6b:f6:4e:c5:33:7c:52:f6:77:f3:a0:
                    5c:81:4c:40:40:3d:f6:34:05:44:84:d1:5e:36:0c:
                    24:9a:63:29:e5:48:dd:d4:07:60:91:24:81:54:d8:
                    1a:14:8f:0d:89:6f:46:39:c4:56:a4:ff:eb:b0:ac:
                    03:74:1d:9d:e2:ab:3c:ed:12:b2:9c:d5:ac:79:b9:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FD:42:65:15:46:1B:4F:86:B0:04:B4:5F:A6:A6:93:2C:86:4A:7B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J_1CZRVGG0-GsAS0X6amkyyGSns.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:fe:75:4e:68:e0:7a:3e:74:16:25:b0:93:8b:94:a1:7d:be:
         64:a5:c3:0b:cf:18:e7:80:fe:0f:df:90:aa:a1:e9:54:94:7d:
         f3:09:43:92:79:4d:e9:43:fd:85:5c:fe:a6:fb:87:17:f3:fb:
         ba:36:88:28:d5:21:2e:8a:57:0f:d3:00:46:b4:8f:9f:57:8d:
         2b:b7:0c:1b:ae:dc:5e:95:7c:9a:6f:8f:21:8f:b3:cf:4f:c8:
         4a:cf:72:58:9d:4a:98:b3:8c:a6:d6:c3:32:19:89:62:63:22:
         26:db:c8:eb:ee:9e:17:d2:35:96:b4:a8:ec:af:64:e1:01:69:
         71:ba:dd:83:cf:33:4c:fd:84:bd:ea:14:ea:2a:4d:2f:dd:af:
         7e:1d:60:46:b3:2e:12:71:90:a2:80:6b:16:6d:0b:30:a1:bc:
         f8:00:d8:c5:88:9c:fb:3d:9a:3c:37:e0:db:63:42:3d:68:1b:
         be:c7:cd:57:00:4b:db:83:64:d2:f9:4a:d1:4c:29:c6:09:fd:
         e7:45:fb:31:0a:9a:b2:ed:11:b1:6f:c2:0b:ce:c8:89:fa:a7:
         a8:bf:db:87:6e:d6:ca:36:89:13:4a:f6:f6:3a:03:8c:c4:a4:
         85:74:a3:d9:4d:29:f4:2f:ea:bc:5a:69:67:17:8e:6d:2e:05:
         89:e9:54:33
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGE8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI4MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI3RkQ0MjY1MTU0NjFC
NEY4NkIwMDRCNDVGQTZBNjkzMkM4NjRBN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+At3Mtbok2n/8Ksxx6/l+P2PNUcdDiFnJ/Ll9uc8Vz92EjtsS
IJIbAb/mGblT71fdtfiE21I2sprt2EmBRxeZrFSYuyaNd1r9Ky5vfMqCkv5GcCCv
UhP43Rhrg/6Bhm5lNFUG58Ecg481ftZRgBxKgTzcAnKh3HgJdkXBFvjryAMkiN7T
ynlH4PF/xKolfLIqZlf+BbNugLdDppgkwV1S3Vn9xF4+rcZSvhXBgZl50N3G5VDn
5Mxr9k7FM3xS9nfzoFyBTEBAPfY0BUSE0V42DCSaYynlSN3UB2CRJIFU2BoUjw2J
b0Y5xFak/+uwrAN0HZ3iqzztErKc1ax5uQutAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJ/1CZRVGG0+GsAS0X6amkyyGSnswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pfMUNaUlZHRzAtR3NBUzBY
NmFta3l5R1Nucy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6SQwDQYJKoZIhvcNAQELBQADggEBABb+dU5o4Ho+dBYlsJOLlKF9vmSlwwvPGOeA
/g/fkKqh6VSUffMJQ5J5TelD/YVc/qb7hxfz+7o2iCjVIS6KVw/TAEa0j59XjSu3
DBuu3F6VfJpvjyGPs89PyErPclidSpizjKbWwzIZiWJjIibbyOvunhfSNZa0qOyv
ZOEBaXG63YPPM0z9hL3qFOoqTS/dr34dYEazLhJxkKKAaxZtCzChvPgA2MWInPs9
mjw34NtjQj1oG77HzVcAS9uDZNL5StFMKcYJ/edF+zEKmrLtEbFvwgvOyIn6p6i/
24du1so2iRNK9vY6A4zEpIV0o9lNKfQv6rxaaWcXjm0uBYnpVDM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org