Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PTeE-XDBGBS1eZPg__qebC4iDjk.roa
File:                     PTeE-XDBGBS1eZPg__qebC4iDjk.roa (raw, json)
Hash identifier:          D7N7flS/vq6LC8wcElotjYF5+XEorN/BRLckZy2gY0E=
Subject key identifier:   3D:37:84:F9:70:C1:18:14:B5:79:93:E0:FF:FA:9E:6C:2E:22:0E:39
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C28
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PTeE-XDBGBS1eZPg__qebC4iDjk.roa
Signing time:             Wed 29 Sep 2021 02:47:24 +0000
ROA not before:           Wed 29 Sep 2021 02:47:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7208 (0x1c28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3D3784F970C11814B57993E0FFFA9E6C2E220E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:ef:87:f6:6a:21:4e:d4:8e:d0:74:2b:c9:
                    c8:a5:ac:dd:ad:8d:ba:7e:e3:a1:d7:29:bb:cd:67:
                    d6:0b:89:71:45:90:d6:1e:05:5c:c0:a6:d2:18:75:
                    12:28:6f:3a:40:d2:87:87:ff:4f:fb:38:be:3e:cd:
                    59:e3:53:b9:a5:85:04:88:47:37:36:45:de:80:40:
                    75:a9:d7:e2:b3:d1:b0:61:ff:ca:10:b3:53:32:c7:
                    d0:94:98:c7:05:ab:b9:67:0c:0d:ba:be:57:85:b3:
                    ba:d7:72:ed:57:18:ef:26:75:5d:aa:7c:ef:35:33:
                    81:86:ce:4f:85:e0:57:6f:26:c6:74:83:26:7f:fc:
                    c5:9c:bd:b7:44:8d:aa:42:b5:11:1a:ae:fe:36:ea:
                    b1:9f:29:f4:f9:e7:14:20:72:05:2d:7e:ce:bd:1b:
                    b3:a1:d4:45:f4:46:29:71:14:78:29:72:7c:6c:fc:
                    93:0f:c3:9e:84:eb:46:ec:a5:26:c0:58:0f:b5:7a:
                    80:f1:09:f8:f9:95:ae:9e:87:f0:01:3e:af:bd:cd:
                    41:c6:c3:f6:26:a8:34:46:64:9f:13:00:2b:63:43:
                    a6:1c:44:25:09:cb:af:79:23:ab:b6:98:8f:93:6f:
                    d2:32:d4:6f:f6:40:da:80:89:69:5b:1f:a0:7b:09:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:37:84:F9:70:C1:18:14:B5:79:93:E0:FF:FA:9E:6C:2E:22:0E:39
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PTeE-XDBGBS1eZPg__qebC4iDjk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:63:5a:07:37:8b:6e:0c:67:89:33:2b:06:a6:a3:8b:5a:13:
         e4:73:48:e9:a2:3e:96:b9:95:39:39:bd:b6:41:e4:75:cb:cc:
         fc:f0:fe:b3:6c:1d:ca:2c:5c:35:e3:5b:1f:8a:4d:4a:de:01:
         c1:61:00:cc:24:0d:bb:f7:ea:c8:b9:09:f6:e5:f5:7f:16:81:
         9a:58:92:b2:7f:ea:62:8e:be:81:f0:a7:7d:33:4b:2c:5e:09:
         0c:cf:f8:d1:92:70:78:87:7c:13:47:44:a5:cd:97:59:0a:5d:
         93:b8:42:ca:d3:3d:d9:84:1c:55:e1:c8:c9:1b:82:4f:c0:ff:
         84:90:4b:1c:d8:72:c7:24:23:fc:f3:ab:8c:ac:38:9d:fa:fe:
         3a:d1:1c:c6:01:a6:7d:be:0c:f4:89:86:bb:35:2a:c6:98:1e:
         cb:fc:ba:2c:7e:38:80:18:11:8d:45:82:4d:31:d2:12:b6:89:
         89:3c:41:c3:32:48:34:76:e9:f6:9d:1e:d5:aa:bc:08:e7:cb:
         17:d6:11:db:ec:d3:30:f5:6d:3d:35:90:13:a8:16:05:df:68:
         4a:b0:23:26:62:bd:d8:6e:13:83:bd:ba:f0:7b:9d:87:6c:61:
         78:f3:07:c8:32:3f:60:fd:e7:e6:52:3d:60:43:6b:1c:e8:0e:
         82:d6:33:a5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MjRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDNEMzc4NEY5NzBDMTE4
MTRCNTc5OTNFMEZGRkE5RTZDMkUyMjBFMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2Y++H9mohTtSO0HQrycilrN2tjbp+46HXKbvNZ9YLiXFFkNYe
BVzAptIYdRIobzpA0oeH/0/7OL4+zVnjU7mlhQSIRzc2Rd6AQHWp1+Kz0bBh/8oQ
s1Myx9CUmMcFq7lnDA26vleFs7rXcu1XGO8mdV2qfO81M4GGzk+F4FdvJsZ0gyZ/
/MWcvbdEjapCtREarv426rGfKfT55xQgcgUtfs69G7Oh1EX0RilxFHgpcnxs/JMP
w56E60bspSbAWA+1eoDxCfj5la6eh/ABPq+9zUHGw/YmqDRGZJ8TACtjQ6YcRCUJ
y695I6u2mI+Tb9Iy1G/2QNqAiWlbH6B7CSQFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPTeE+XDBGBS1eZPg//qebC4iDjkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BUZUUtWERCR0JTMWVaUGdf
X3FlYkM0aURqay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6cQwDQYJKoZIhvcNAQELBQADggEBAEFjWgc3i24MZ4kzKwamo4taE+RzSOmiPpa5
lTk5vbZB5HXLzPzw/rNsHcosXDXjWx+KTUreAcFhAMwkDbv36si5Cfbl9X8WgZpY
krJ/6mKOvoHwp30zSyxeCQzP+NGScHiHfBNHRKXNl1kKXZO4QsrTPdmEHFXhyMkb
gk/A/4SQSxzYcsckI/zzq4ysOJ36/jrRHMYBpn2+DPSJhrs1KsaYHsv8uix+OIAY
EY1Fgk0x0hK2iYk8QcMySDR26fadHtWqvAjnyxfWEdvs0zD1bT01kBOoFgXfaEqw
IyZivdhuE4O9uvB7nYdsYXjzB8gyP2D95+ZSPWBDaxzoDoLWM6U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org