Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OxUxTILTJEAMZwBz_-dKb2cgmMM.roa
File:                     OxUxTILTJEAMZwBz_-dKb2cgmMM.roa (raw, json)
Hash identifier:          9I8x0mGPuGPwws66197/pdW//Wwgl+JMFmUAA/eUuto=
Subject key identifier:   3B:15:31:4C:82:D3:24:40:0C:67:00:73:FF:E7:4A:6F:67:20:98:C3
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2180
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OxUxTILTJEAMZwBz_-dKb2cgmMM.roa
Signing time:             Fri 25 Nov 2022 04:40:00 +0000
ROA not before:           Fri 25 Nov 2022 04:40:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8576 (0x2180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:00 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3B15314C82D324400C670073FFE74A6F672098C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:ea:77:a0:c5:0e:06:8b:0d:bd:32:2e:b8:
                    e9:c2:48:52:a4:44:59:36:ca:34:3d:80:46:46:9f:
                    94:70:36:75:ee:68:eb:1c:c0:c3:b7:9d:48:68:f9:
                    17:b4:2e:f4:57:7a:88:b1:3d:5e:fd:6e:2b:fc:71:
                    d9:09:e9:61:5b:62:d9:11:3d:14:78:d0:69:6c:ea:
                    a5:50:f6:04:6b:1a:a6:9f:a5:92:d9:4f:38:0a:40:
                    da:da:96:57:17:d9:34:b7:22:c0:88:c3:86:db:f8:
                    70:24:07:9b:56:23:67:c0:a7:4a:e0:4f:f6:40:24:
                    96:4c:e7:84:84:ee:d5:1b:a2:52:58:c5:43:f4:f0:
                    64:4f:2e:1a:ba:e2:00:a8:37:8b:11:29:1a:fc:54:
                    ba:e7:b8:5a:e1:1f:59:48:67:0f:45:91:07:ed:b1:
                    48:64:c7:19:c0:70:92:64:70:55:5e:51:cb:3c:e9:
                    a5:94:1f:fa:c5:f8:7a:7e:46:7d:79:a4:f3:a5:8e:
                    1b:7e:eb:44:da:87:f7:06:c2:84:de:c0:03:06:c3:
                    77:eb:2b:25:04:af:ff:cc:84:b0:6c:c1:4b:61:ba:
                    2c:4f:37:7f:05:51:55:ec:bc:d5:83:69:d6:b7:77:
                    71:de:3a:0a:8c:9d:dc:79:dd:9d:36:f8:65:52:1a:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:15:31:4C:82:D3:24:40:0C:67:00:73:FF:E7:4A:6F:67:20:98:C3
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OxUxTILTJEAMZwBz_-dKb2cgmMM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:25:d0:1e:1d:e3:24:c6:61:db:a6:7d:c9:13:24:ed:a2:98:
         c9:21:73:19:0c:2d:df:4f:81:3f:fc:90:a7:ef:17:02:a6:57:
         5e:b9:1d:41:7a:da:e1:0e:04:17:87:8a:46:c1:9d:59:79:bf:
         86:15:9f:54:86:39:b9:20:81:32:1a:8c:ec:01:7d:7a:5f:10:
         c8:3c:7a:f4:de:e4:5d:40:f0:b6:79:b3:87:ae:ec:d7:8e:e7:
         dd:8c:8c:78:57:04:a3:f1:47:88:4b:ce:90:3a:a6:a7:61:13:
         76:96:50:13:30:91:9c:b5:2c:33:a1:0e:70:1d:50:e4:9b:9c:
         d5:a5:0d:9e:e1:a7:80:ce:01:75:06:58:24:30:0a:8c:b6:79:
         dc:ac:cf:f4:a4:db:64:a7:ae:77:27:bc:da:93:df:a1:d4:37:
         05:db:ad:4a:40:fa:cc:f1:be:97:99:cf:d3:d0:57:6c:37:d9:
         ea:c0:dc:9f:6d:b4:c9:f4:d6:61:69:b8:81:24:3a:b0:8b:27:
         1a:31:53:3d:e3:e3:f5:12:3d:df:26:de:19:d2:8c:7d:83:ee:
         a3:37:7e:84:67:f2:cb:01:bc:fa:f7:80:af:9e:a4:e8:06:c5:
         fc:44:8d:16:06:66:e9:91:38:b0:99:31:f3:05:43:61:fe:68:
         75:3b:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org