Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lh2DteVkscvCsXpdGFVuiEiFBDM.roa
File:                     Lh2DteVkscvCsXpdGFVuiEiFBDM.roa (raw, json)
Hash identifier:          GTKLnjGuzo3Ve07Eexcf4ib6Jv7uYEsaARCHXndSRTU=
Subject key identifier:   2E:1D:83:B5:E5:64:B1:CB:C2:B1:7A:5D:18:55:6E:88:48:85:04:33
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lh2DteVkscvCsXpdGFVuiEiFBDM.roa
Signing time:             Thu 15 Sep 2022 02:46:02 +0000
ROA not before:           Thu 15 Sep 2022 02:46:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.111.192/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2E1D83B5E564B1CBC2B17A5D18556E8848850433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:3f:8c:bb:20:df:a2:b7:01:2d:61:fc:7a:
                    fe:eb:55:45:15:b2:89:d3:fc:06:57:4a:9c:3d:1f:
                    9c:8b:47:37:e3:33:fa:97:29:7c:4f:0e:ff:fb:24:
                    ee:bd:4d:f9:32:31:f9:95:c5:01:d7:ed:8d:14:b7:
                    30:6b:d9:77:2b:48:15:62:dc:da:70:e4:c2:1d:fc:
                    37:7e:7c:ce:7d:10:89:fe:aa:56:08:23:d3:99:3f:
                    5f:3e:97:b1:9d:38:d5:4b:5d:cb:c8:b4:65:ee:61:
                    4d:b2:a1:52:7e:63:11:38:17:01:a5:f4:dd:02:96:
                    1e:c0:5a:06:4a:b8:cd:62:b3:2d:a8:1f:cc:9b:29:
                    d8:65:a8:29:6c:19:71:60:d3:00:4f:cb:37:94:2c:
                    ef:31:f2:a6:ae:34:6f:9d:f4:d0:8e:7c:aa:fe:b9:
                    f3:79:18:d7:e9:aa:8f:fa:c6:fb:db:98:80:84:bd:
                    11:72:84:b7:df:c7:4d:57:5a:52:3c:0e:46:7a:ed:
                    7b:62:21:4e:8c:db:5e:13:3a:d0:67:08:eb:c4:36:
                    b0:3a:b8:95:b8:60:2a:5c:7e:b6:cf:80:ba:51:3c:
                    d4:00:e1:77:87:d7:57:6b:42:e1:70:00:9f:4a:10:
                    2b:94:e1:3d:b5:a6:c2:e5:0f:ba:4a:f3:ea:8a:37:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1D:83:B5:E5:64:B1:CB:C2:B1:7A:5D:18:55:6E:88:48:85:04:33
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lh2DteVkscvCsXpdGFVuiEiFBDM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.111.192/28

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:e4:d1:25:01:bc:a9:f9:e7:b7:2e:bd:17:f5:82:fc:5e:
         35:2f:5d:e9:7f:2c:e7:9c:84:e6:40:f1:50:97:ba:38:61:36:
         ff:c1:94:98:f7:c0:66:bf:ab:3b:07:d7:3a:43:76:80:67:47:
         57:cb:d3:68:d9:a0:05:87:cd:94:50:79:c1:5a:a3:92:76:b0:
         e9:e5:a0:21:28:1e:44:c5:bc:21:e4:1f:63:5d:f1:1c:f2:6f:
         fe:51:e7:3a:1d:72:76:39:e9:7f:f4:c8:7c:7e:ba:02:38:1b:
         ae:4f:8b:10:6b:b1:98:fe:8f:3a:4d:da:da:79:c9:ab:77:24:
         68:ca:e7:dd:fd:06:74:cb:9d:67:0d:c5:c6:6d:e7:9a:cd:10:
         33:c2:c5:6d:fa:09:ea:8a:41:3a:45:44:7a:39:3d:f3:84:cb:
         7b:d9:ae:32:77:fc:63:e5:b4:4b:4f:bc:7e:5c:08:62:a3:f6:
         21:4a:24:37:c9:bb:36:5e:03:87:39:6e:e4:65:41:af:24:f4:
         ba:d7:d2:1f:50:42:7f:e8:ba:6d:a2:87:6c:4b:77:16:b1:94:
         ce:d6:49:6a:b5:44:8d:f4:4f:33:38:3b:73:ca:4a:de:16:c5:
         ab:2e:d8:2e:d1:5d:52:1d:f8:57:94:72:43:e9:aa:e0:b4:27:
         54:7a:ac:7c
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJFMUQ4M0I1RTU2NEIx
Q0JDMkIxN0E1RDE4NTU2RTg4NDg4NTA0MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNWD+MuyDforcBLWH8ev7rVUUVsonT/AZXSpw9H5yLRzfjM/qX
KXxPDv/7JO69TfkyMfmVxQHX7Y0UtzBr2XcrSBVi3Npw5MId/Dd+fM59EIn+qlYI
I9OZP18+l7GdONVLXcvItGXuYU2yoVJ+YxE4FwGl9N0Clh7AWgZKuM1isy2oH8yb
KdhlqClsGXFg0wBPyzeULO8x8qauNG+d9NCOfKr+ufN5GNfpqo/6xvvbmICEvRFy
hLffx01XWlI8DkZ67XtiIU6M214TOtBnCOvENrA6uJW4YCpcfrbPgLpRPNQA4XeH
11drQuFwAJ9KECuU4T21psLlD7pK8+qKN8XhAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQULh2DteVkscvCsXpdGFVuiEiFBDMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xoMkR0ZVZrc2N2Q3NYcGRH
RlZ1aUVpRkJETS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7
wW/AMA0GCSqGSIb3DQEBCwUAA4IBAQAXL+TRJQG8qfnnty69F/WC/F41L13pfyzn
nITmQPFQl7o4YTb/wZSY98Bmv6s7B9c6Q3aAZ0dXy9No2aAFh82UUHnBWqOSdrDp
5aAhKB5Exbwh5B9jXfEc8m/+Uec6HXJ2Oel/9Mh8froCOBuuT4sQa7GY/o86Tdra
ecmrdyRoyufd/QZ0y51nDcXGbeeazRAzwsVt+gnqikE6RUR6OT3zhMt72a4yd/xj
5bRLT7x+XAhio/YhSiQ3ybs2XgOHOW7kZUGvJPS619IfUEJ/6LptoodsS3cWsZTO
1klqtUSN9E8zODtzykreFsWrLtgu0V1SHfhXlHJD6argtCdUeqx8
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org