Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JkAkIfvqSmeuASttNfBAuT75QAs.roa
File:                     JkAkIfvqSmeuASttNfBAuT75QAs.roa (raw, json)
Hash identifier:          2ORClb0X4JPe9kDluheXQw+7ugCwDYpwZP05ufZ6hAU=
Subject key identifier:   26:40:24:21:FB:EA:4A:67:AE:01:2B:6D:35:F0:40:B9:3E:F9:40:0B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JkAkIfvqSmeuASttNfBAuT75QAs.roa
Signing time:             Thu 15 Sep 2022 02:52:43 +0000
ROA not before:           Thu 15 Sep 2022 02:52:43 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18429
IP address blocks:        118.232.196.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:43 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=26402421FBEA4A67AE012B6D35F040B93EF9400B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:be:db:fb:72:87:3a:5d:7c:3e:3d:d2:52:e8:
                    4f:86:af:2d:b0:09:98:b3:5d:bf:0b:81:8f:a4:90:
                    6e:71:84:d8:89:ac:d6:e9:58:8d:74:b9:0d:08:be:
                    cb:49:06:9a:da:52:0e:0f:21:3b:18:eb:db:27:5a:
                    12:d3:6f:93:8f:ff:05:bb:a7:22:70:36:4e:2d:54:
                    da:b8:b1:8f:10:6b:4e:31:dc:cc:26:fb:1a:70:2a:
                    7d:13:a0:41:18:67:21:5b:a8:1c:94:3a:03:08:35:
                    3b:ba:b5:a9:29:36:00:f3:9a:32:0f:7c:b5:03:a2:
                    64:27:3d:db:c5:15:2d:ac:dd:0a:62:0a:df:e6:bd:
                    2e:b9:38:de:e3:f7:80:38:8a:8c:f2:fa:28:e3:1e:
                    e9:0e:f4:5f:a6:c7:bf:01:31:e7:d3:dc:3e:21:9f:
                    58:7a:b5:65:02:4d:07:73:b9:d1:69:23:5b:43:f0:
                    1e:69:6c:eb:d6:1b:ab:c8:a9:73:cb:78:02:f6:eb:
                    e4:3c:8a:2b:83:2f:65:6c:38:11:29:20:1e:2e:9a:
                    29:ba:70:1c:9b:96:7f:aa:dd:7d:e4:08:b8:2e:80:
                    9d:ac:df:46:64:f7:5f:32:36:3a:de:56:95:6e:bb:
                    4d:d8:a5:2a:cb:a7:54:1d:4d:d2:a3:b4:ce:61:26:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:40:24:21:FB:EA:4A:67:AE:01:2B:6D:35:F0:40:B9:3E:F9:40:0B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JkAkIfvqSmeuASttNfBAuT75QAs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.196.64/26

    Signature Algorithm: sha256WithRSAEncryption
         94:4c:ee:4f:22:54:36:63:99:1f:12:52:ea:61:0d:c1:a6:56:
         90:7f:fe:74:7d:58:f1:72:af:e2:61:94:e5:ea:0b:e2:67:9d:
         5f:6f:2e:43:00:02:a3:c8:eb:39:66:11:71:63:2c:8e:2b:54:
         a5:f6:af:20:60:be:3e:9d:00:83:88:d3:8b:a3:98:7d:42:53:
         6f:2a:94:33:cc:9a:d4:18:c7:d1:e7:82:ac:c4:e6:cd:47:0f:
         ce:ee:df:a6:3b:5f:d3:10:1b:6c:36:ea:e7:41:71:77:65:20:
         b4:83:cc:73:5d:4a:ec:74:f6:1f:e5:ea:7d:59:98:7c:c5:18:
         56:be:8b:43:5a:6a:b8:29:03:ab:3c:c7:ef:b5:0c:4b:b4:73:
         70:e6:10:98:10:20:a0:cb:25:46:c5:ce:d0:3e:6d:07:7c:6c:
         57:a8:fe:f4:15:0f:3c:ce:24:db:1c:71:a3:9f:c0:b7:78:bb:
         47:df:67:fb:cc:9a:1d:75:5c:64:43:6c:91:a8:21:48:27:68:
         73:a9:6e:44:75:4b:8a:94:7f:0c:8e:ac:e5:83:08:9c:87:1f:
         b7:24:93:1b:d4:1d:e2:f0:5a:6e:32:5c:be:5b:50:5b:34:33:
         c8:53:90:fb:99:71:de:d0:bb:03:52:31:81:98:e4:78:1d:d0:
         67:50:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org