Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P6GH_z7uDRhSYZiDcCIQTHGx7VY.roa
File:                     P6GH_z7uDRhSYZiDcCIQTHGx7VY.roa (raw, json)
Hash identifier:          D/gOWZnGZv1aNw9vDgzzLPWkaTLi5vXt4tzdqQwIll4=
Subject key identifier:   3F:A1:87:FF:3E:EE:0D:18:52:61:98:83:70:22:10:4C:71:B1:ED:56
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1509
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P6GH_z7uDRhSYZiDcCIQTHGx7VY.roa
Signing time:             Sun 07 Feb 2021 12:02:36 +0000
ROA not before:           Sun 07 Feb 2021 12:02:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5385 (0x1509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:02:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3FA187FF3EEE0D18526198837022104C71B1ED56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:b4:2d:e8:46:ee:2f:66:c3:b5:d9:ee:76:
                    c8:e7:3c:98:41:03:3a:8b:36:cd:e6:07:ff:44:93:
                    a3:4f:0c:53:43:1d:fa:41:c1:19:10:87:64:5f:d0:
                    1f:63:eb:07:3a:87:fd:20:de:71:e2:8f:93:24:f1:
                    84:70:f8:fa:85:df:4b:58:55:a7:6f:e0:a0:9a:1d:
                    16:ac:33:fc:01:e8:87:da:7d:8c:a5:f0:9e:81:1f:
                    5b:00:8c:aa:4b:b4:c5:0c:98:4c:6a:69:ca:c9:bc:
                    e0:98:01:56:8f:32:aa:92:46:b6:cc:a5:31:6b:01:
                    1a:1f:cd:d4:46:5c:fe:67:0a:a9:23:62:e1:de:e1:
                    48:10:ac:52:fa:b6:fe:44:e2:52:db:30:e7:ad:8a:
                    f6:f9:51:90:5b:1c:95:7a:18:b5:a2:cf:5f:db:38:
                    17:38:f4:a8:da:78:11:47:f9:88:b4:81:49:86:8f:
                    2c:43:95:a5:e2:b6:7f:1d:46:d6:ab:1a:56:00:e1:
                    c6:12:23:d4:f2:43:a3:23:df:48:eb:59:1e:ac:d7:
                    80:bc:61:74:1d:4a:8e:db:86:14:dc:25:d2:d2:06:
                    d1:1d:67:44:fe:8b:d4:d1:5a:f3:1b:40:6b:4c:6c:
                    31:c8:21:70:d6:53:67:3f:2a:25:74:a7:f9:60:d6:
                    ab:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A1:87:FF:3E:EE:0D:18:52:61:98:83:70:22:10:4C:71:B1:ED:56
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P6GH_z7uDRhSYZiDcCIQTHGx7VY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:8e:a7:14:61:d3:99:b4:2b:60:e3:b4:e7:e0:c1:67:18:
         01:30:1f:ad:be:7a:b1:85:7d:f2:75:fd:cb:d6:3f:0e:8a:3d:
         aa:68:21:f7:a5:fb:bb:d9:ef:3a:1c:31:64:64:c0:89:d0:f8:
         8a:65:41:4d:43:ac:1c:4d:83:73:93:ff:a5:97:bd:86:01:0d:
         15:fa:1e:d7:94:3d:f1:f5:e4:33:7c:e0:ff:7d:22:b8:c6:44:
         b0:ca:79:52:32:11:0e:1d:be:d6:db:fb:89:0a:35:0e:85:0e:
         e2:ab:e7:22:8b:9c:cb:29:69:03:b0:d4:73:76:a9:e1:82:a6:
         d6:4e:0b:06:e6:e4:28:5a:b6:cb:4b:22:aa:a6:76:a9:c3:3d:
         cf:a7:f1:02:36:ee:15:63:9e:f8:e7:29:f9:3b:6e:04:92:a0:
         44:ae:85:50:5f:39:e3:e1:b9:11:72:02:63:62:1a:21:3d:48:
         dc:c0:b3:fa:05:07:04:97:f4:13:81:78:63:ad:77:fc:4d:05:
         d6:08:08:4b:43:f5:4f:79:1b:7d:1b:0c:b4:a8:d1:2e:46:ee:
         4a:01:8c:9e:04:3d:fb:9a:cb:ef:d6:5a:ef:19:2e:6d:2f:01:
         ea:bb:63:c6:22:96:fd:c9:73:8e:fd:00:5d:fa:33:ef:e5:cc:
         5c:fd:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:28 2023 by rpki-client on console-fra.rpki-client.org