Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PSiGle46XVHZApB16KyC-_uth_k.roa
File:                     PSiGle46XVHZApB16KyC-_uth_k.roa (raw, json)
Hash identifier:          pzOrEyxWCEH+CF8bjtmpqHtKZrGVhkbzHbaAhE5FOY0=
Subject key identifier:   3D:28:86:95:EE:3A:5D:51:D9:02:90:75:E8:AC:82:FB:FB:AD:87:F9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B3C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PSiGle46XVHZApB16KyC-_uth_k.roa
Signing time:             Wed 29 Sep 2021 02:46:19 +0000
ROA not before:           Wed 29 Sep 2021 02:46:19 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.192.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6972 (0x1b3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:19 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3D288695EE3A5D51D9029075E8AC82FBFBAD87F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:53:97:bc:e3:47:05:ad:2a:38:98:07:d1:
                    ad:60:f7:8c:8f:e0:d2:2b:4e:65:01:53:c6:80:2d:
                    a3:6f:ca:74:fc:d3:eb:7b:4a:d2:30:c5:95:07:6d:
                    55:b3:17:8f:cf:01:1d:ae:35:dd:5a:35:cc:29:77:
                    60:40:b2:9a:ed:f2:e0:d2:c4:fb:4a:86:7e:a4:fd:
                    ba:ba:bf:7c:dd:ae:f9:e4:cd:6c:f1:9a:a3:dd:1e:
                    a3:58:25:db:f0:64:85:5f:09:13:17:3e:c0:8f:38:
                    46:b7:fe:c7:6d:25:6b:0d:b2:60:64:51:aa:5d:11:
                    f4:1b:c6:ad:2e:80:45:d4:6d:e3:f4:7d:20:cb:5c:
                    7c:1d:89:48:53:e7:27:de:7c:03:4a:ea:50:c6:bf:
                    b7:fd:fd:00:00:4a:7f:7c:1c:01:38:67:64:3c:b9:
                    14:43:f3:75:62:07:a2:16:cb:48:ab:28:8f:98:fe:
                    a1:d3:7f:f8:74:6d:26:e8:3e:52:bf:24:e7:b1:ea:
                    0b:0f:ee:f1:68:19:01:0d:62:a8:10:ce:96:2a:f3:
                    09:41:8e:84:df:06:eb:9e:65:14:88:22:03:7f:ac:
                    fc:9e:e5:bb:69:51:f8:85:09:6e:ac:d3:8f:d4:24:
                    cf:1d:3e:06:fe:4e:5b:60:49:c0:dc:21:84:91:be:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:28:86:95:EE:3A:5D:51:D9:02:90:75:E8:AC:82:FB:FB:AD:87:F9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PSiGle46XVHZApB16KyC-_uth_k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:28:93:b5:1b:4a:d5:ed:72:8f:87:09:40:2e:ec:11:7d:ac:
         70:69:ab:4f:de:6c:eb:c1:28:70:09:7a:24:55:14:00:e0:ba:
         ac:85:0a:ea:0e:4f:18:86:86:f5:c7:fa:90:43:8b:03:a8:c2:
         2d:68:43:26:5c:9c:3e:7c:c4:53:4b:f1:e0:00:38:a9:03:cf:
         d4:a9:1a:01:80:36:77:1c:ac:64:c2:18:e2:3f:20:20:c0:3a:
         30:82:31:59:78:02:f7:06:1f:6a:81:f4:46:34:d0:dc:0f:e1:
         35:d0:4a:5d:43:e5:39:e4:4e:13:57:a7:e0:38:5e:9a:26:a5:
         81:61:28:62:60:8f:5e:94:62:9b:38:3d:cf:cb:52:7f:56:e7:
         31:b0:94:5d:a4:5e:77:9f:89:53:4c:d3:8d:11:3c:a3:92:44:
         5f:e0:a6:67:68:7b:4c:e5:d1:60:30:7f:d6:34:86:9b:6a:f1:
         50:46:d2:9d:e6:ea:ac:3b:90:b8:49:78:6d:d9:9f:6f:a8:06:
         67:32:27:81:6e:14:11:23:68:87:e0:d9:9e:77:67:47:e8:0a:
         9a:f9:30:8b:8a:36:16:cb:22:49:87:b5:d5:c3:04:6b:bf:d8:
         9e:45:59:aa:76:e2:2a:bd:46:3d:e7:5c:53:ed:e8:3c:04:84:
         8d:44:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:18 2023 by rpki-client on console-ams.rpki-client.org