Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PalR55oR1ibb4u7kk7M_4ttiFQU.roa
File:                     PalR55oR1ibb4u7kk7M_4ttiFQU.roa (raw, json)
Hash identifier:          ux89SVgFxWhUtUVh1tPNzFixy4o7XEvyJHcJF/gQSXA=
Subject key identifier:   3D:A9:51:E7:9A:11:D6:26:DB:E2:EE:E4:93:B3:3F:E2:DB:62:15:05
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C65
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PalR55oR1ibb4u7kk7M_4ttiFQU.roa
Signing time:             Wed 29 Sep 2021 02:47:43 +0000
ROA not before:           Wed 29 Sep 2021 02:47:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.252.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7269 (0x1c65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3DA951E79A11D626DBE2EEE493B33FE2DB621505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:db:b8:b7:ee:44:50:02:5b:49:cc:2b:71:
                    13:89:15:25:ab:27:22:9e:d6:96:ea:01:b9:3b:db:
                    71:7b:49:c2:b8:e5:3d:40:5f:5d:54:36:b5:ac:d8:
                    81:96:e5:1f:2e:7c:65:0a:ef:a5:1d:0f:b5:5f:80:
                    a3:1a:d4:14:a5:8a:dd:4d:64:ca:d5:dd:01:4d:63:
                    f6:50:58:22:79:41:9b:e9:4d:85:de:6f:d3:48:ff:
                    5c:ff:29:ff:98:ec:fa:61:9e:1c:2e:14:e0:d3:ff:
                    ec:35:e2:84:46:6b:51:a1:6e:1e:2d:2d:67:73:2a:
                    6a:e5:0f:2c:ce:d8:42:40:ae:90:e2:4a:57:ee:c9:
                    d6:13:07:0a:35:04:be:8d:f5:bd:50:27:9d:80:09:
                    ad:e2:94:80:df:95:b6:27:b1:29:ef:e5:20:11:da:
                    b3:6d:fb:bb:49:8c:e7:78:60:ce:f0:b0:57:6a:28:
                    bb:11:75:a7:e9:e5:bc:a4:37:76:b9:2e:2c:3e:81:
                    6e:5c:28:19:ea:db:17:45:92:20:25:46:cd:9d:46:
                    10:ae:79:db:2b:ee:46:7f:37:27:8e:2f:f2:7e:c3:
                    f8:3e:57:ca:64:2a:ce:6a:a3:3c:f1:ac:a3:97:58:
                    60:9e:f6:46:23:03:35:d9:fa:c3:76:d6:8a:07:db:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:51:E7:9A:11:D6:26:DB:E2:EE:E4:93:B3:3F:E2:DB:62:15:05
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PalR55oR1ibb4u7kk7M_4ttiFQU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:99:13:37:29:d5:48:56:a8:d1:63:b8:88:c4:cb:c7:4d:70:
         1b:1c:9b:87:e7:05:22:a0:27:54:33:36:24:61:94:e9:2a:f1:
         7a:6f:4a:9b:c7:2b:cc:77:32:46:2b:d3:af:5f:ac:85:a4:b9:
         6a:29:c4:57:12:16:30:2d:21:e4:f0:3d:36:23:20:85:c8:79:
         6c:5f:3d:22:fd:03:69:c8:68:53:0c:fa:bb:ae:5c:59:34:d8:
         b0:b4:22:09:f0:64:59:32:f8:30:e7:64:46:43:ca:01:88:81:
         89:e9:d2:39:8c:e0:c1:39:2a:3e:88:90:1a:ff:09:9e:0b:59:
         da:b5:83:c4:e1:5d:d3:71:53:48:56:1c:b9:ae:34:17:82:b6:
         55:0f:2c:79:df:e5:3f:a2:ce:d0:06:3f:3e:f2:a1:88:c8:c1:
         dc:9b:db:10:5f:94:bc:3f:48:d5:bc:b0:ca:a9:31:4b:73:5b:
         76:36:74:1f:49:8e:82:95:81:ff:a4:dc:23:c8:dd:01:6b:9a:
         a2:ae:23:07:ff:e1:a9:e2:18:f6:d5:69:81:fc:d4:70:d2:7a:
         96:33:c8:74:f2:f8:b9:c9:76:20:a6:69:df:88:c6:c6:b0:82:
         e5:88:33:3f:d5:bf:05:a3:fa:98:ec:8d:c5:c2:a9:99:99:c6:
         2a:31:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org