Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JulIMkdC4mMu26sd0hwPXFVce7I.roa
File:                     JulIMkdC4mMu26sd0hwPXFVce7I.roa (raw, json)
Hash identifier:          pXMcKmMdsvV2V1XFcc7c9k0sj4KdLUwmbtiSjzPxJiM=
Subject key identifier:   26:E9:48:32:47:42:E2:63:2E:DB:AB:1D:D2:1C:0F:5C:55:5C:7B:B2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1611
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JulIMkdC4mMu26sd0hwPXFVce7I.roa
Signing time:             Sun 07 Feb 2021 12:08:08 +0000
ROA not before:           Sun 07 Feb 2021 12:08:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5649 (0x1611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:08:08 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=26E948324742E2632EDBAB1DD21C0F5C555C7BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:16:5f:fb:a0:c0:62:d7:02:7b:9b:69:e7:2e:
                    68:a7:a2:e4:82:8b:9d:41:e9:0b:19:90:e6:29:c8:
                    b0:d7:5f:c4:e9:3a:c4:f1:c3:b7:69:33:5d:ab:d6:
                    62:59:b5:2e:08:bc:2f:8c:8f:3f:8a:65:8c:18:7a:
                    a1:12:e6:4d:fd:5f:13:dc:02:6a:87:0e:ed:be:c8:
                    ff:a4:1b:0b:3d:01:96:e7:0e:a7:d3:50:7a:4c:ad:
                    9b:40:88:24:f7:e5:84:8f:63:ce:a8:b6:e2:63:83:
                    ee:c0:38:30:bc:7e:f9:d1:3e:ae:3e:97:84:24:92:
                    fb:32:ed:11:1f:42:ff:1f:8f:8a:e7:1e:33:e0:17:
                    9b:1f:60:38:c1:46:2e:d2:b8:37:26:55:df:78:f3:
                    78:6c:e7:58:98:5f:c5:d1:21:7b:ed:2d:96:77:56:
                    05:d5:4d:1f:86:17:6e:e3:b7:55:b5:48:93:dd:d1:
                    1f:0e:23:fb:9d:24:bf:88:4d:7f:14:f6:b6:a5:29:
                    d9:75:ce:b1:81:63:17:9c:80:ea:03:44:4e:05:ae:
                    e2:df:df:f9:49:6d:49:42:08:a1:66:89:83:e2:ca:
                    63:80:cc:44:1f:3a:1a:4a:79:42:a0:34:71:29:59:
                    1a:9b:15:39:37:27:7b:9a:69:9d:71:fb:35:a6:a2:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E9:48:32:47:42:E2:63:2E:DB:AB:1D:D2:1C:0F:5C:55:5C:7B:B2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JulIMkdC4mMu26sd0hwPXFVce7I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:64:62:09:40:97:6f:a2:5f:87:9d:69:ce:f3:2d:03:9a:1b:
         c8:bc:14:82:12:20:d5:03:19:e1:97:a8:4f:c0:fa:f6:02:f5:
         2f:0d:71:89:e4:97:be:bf:67:98:3a:19:88:a3:13:93:41:f9:
         e0:c6:8e:3c:03:ee:a6:aa:36:06:25:12:c6:80:b3:57:de:86:
         42:18:cd:6b:78:fa:b9:f1:ba:ed:a3:e5:c3:0a:e4:1d:bf:f6:
         50:fb:37:bc:fe:75:1e:a5:0e:42:db:c0:37:45:58:cf:78:ec:
         6b:9f:b3:f1:29:f7:4d:7c:3a:fc:73:76:27:3d:a0:b9:c5:4c:
         70:20:69:81:71:42:62:ef:f2:fe:3a:13:f4:ea:e4:c3:c5:3e:
         c4:d2:58:84:da:7f:77:0e:8d:66:9b:fd:5e:43:80:8e:f6:83:
         59:76:fc:52:98:21:cd:a7:0f:cd:1a:d8:14:83:b9:0f:f1:69:
         55:8c:87:b2:e2:58:8d:58:91:02:7d:9e:29:33:ca:d4:25:bb:
         32:7f:21:2f:0e:78:fa:76:eb:92:37:c1:bb:7f:19:f3:8b:76:
         99:50:a1:7a:99:37:f8:e0:98:6b:b8:20:f0:4f:94:58:a6:c0:
         79:ad:8b:78:34:3b:97:eb:eb:cb:a7:0b:f9:73:20:13:1d:84:
         88:9b:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-fra.rpki-client.org