Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NwJStpz36RFP6MIw-rgRsUPRQzw.roa
File:                     NwJStpz36RFP6MIw-rgRsUPRQzw.roa (raw, json)
Hash identifier:          FsrKAhsFiRPepZhbMrl9AunuQH++uRWe2vHXBdEF5+0=
Subject key identifier:   37:02:52:B6:9C:F7:E9:11:4F:E8:C2:30:FA:B8:11:B1:43:D1:43:3C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NwJStpz36RFP6MIw-rgRsUPRQzw.roa
Signing time:             Thu 15 Sep 2022 02:46:06 +0000
ROA not before:           Thu 15 Sep 2022 02:46:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=370252B69CF7E9114FE8C230FAB811B143D1433C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8d:a3:a9:4d:5b:0c:6d:16:32:cb:6e:fc:d8:
                    64:83:53:59:b4:bc:63:86:91:e3:3b:9a:d5:91:22:
                    a0:d6:f0:5a:0b:4e:b2:c0:66:e9:bb:bc:35:50:54:
                    09:84:f5:29:38:4a:74:03:ca:40:b8:a8:65:9c:3d:
                    76:19:d7:71:7d:a2:9c:e9:a5:0f:72:ad:85:2c:a2:
                    4e:ce:bd:d5:20:dc:d7:63:9e:55:e6:c0:05:cd:37:
                    13:40:fd:ee:f0:93:c8:53:3f:74:91:d4:75:39:02:
                    ea:ec:d8:48:0c:9d:4c:9c:c5:f2:44:0b:09:a0:2f:
                    ad:65:39:8a:90:e7:d3:de:5e:4e:58:d7:9a:57:2a:
                    a3:29:ab:5c:c1:39:c7:9a:5a:be:0d:c3:91:f2:dd:
                    da:69:95:a1:2e:2f:a2:2b:44:d2:58:07:a5:64:fc:
                    58:93:72:df:e9:04:87:a1:73:14:97:94:0a:c3:48:
                    cf:de:c4:39:b4:6c:42:4c:08:35:6a:1a:28:97:fd:
                    7c:36:89:e2:5f:d4:b7:01:74:78:9e:e7:df:df:15:
                    8b:80:93:66:4f:6d:81:3e:27:10:c0:33:cb:4f:c7:
                    6d:53:71:55:7e:f3:99:64:db:51:0f:07:75:55:0c:
                    c5:87:ad:25:2b:d4:68:27:e2:34:86:15:71:03:97:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:02:52:B6:9C:F7:E9:11:4F:E8:C2:30:FA:B8:11:B1:43:D1:43:3C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NwJStpz36RFP6MIw-rgRsUPRQzw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:26:8f:2d:95:61:34:51:7e:d8:b1:85:05:32:b0:fd:c3:
         c0:81:88:ce:32:9b:fe:3e:67:9b:ed:e0:c3:a2:64:a6:6a:91:
         4b:69:d4:39:89:c6:8d:46:02:5f:18:ea:44:7e:2d:56:f1:79:
         4c:38:bf:11:94:24:84:f9:3f:ec:ee:82:81:79:1b:76:8a:b5:
         42:2b:46:60:43:af:36:95:a3:80:48:c4:3a:6f:fd:49:74:5c:
         80:c9:ed:23:4a:fe:14:fb:df:5b:16:04:5c:58:9a:6b:ff:53:
         72:51:e1:22:7a:bc:3f:6d:96:41:c4:3a:16:b0:43:ba:31:fd:
         44:a4:fe:a2:dd:b8:92:5d:90:ac:47:30:1d:5a:73:78:d8:d5:
         e3:da:1f:be:01:b7:ef:8e:97:08:6d:6e:31:bd:4d:cc:7a:ff:
         5a:4d:ac:f3:89:22:71:fe:d4:1a:35:74:13:d5:56:7d:b9:8b:
         71:8e:df:dc:1f:cf:08:f4:6d:c5:2b:ca:9b:b6:7d:c1:b7:db:
         72:c5:85:a6:79:29:08:53:71:ba:d0:66:b9:72:40:09:01:65:
         7a:2b:5e:04:82:99:78:dd:fe:03:65:6e:e8:fe:00:0c:74:d4:
         48:88:84:88:ea:80:3e:15:df:68:fc:84:22:41:ac:97:8f:7e:
         0b:47:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org