Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QMFQMv6giyIl7sQ3Tql986w0B4E.roa
File:                     QMFQMv6giyIl7sQ3Tql986w0B4E.roa (raw, json)
Hash identifier:          1UopIwo6wxCFS2C2qg7qtnBMyvC1WL2zLLPFuvqkrBA=
Subject key identifier:   40:C1:50:32:FE:A0:8B:22:25:EE:C4:37:4E:A9:7D:F3:AC:34:07:81
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2113
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QMFQMv6giyIl7sQ3Tql986w0B4E.roa
Signing time:             Fri 25 Nov 2022 04:39:28 +0000
ROA not before:           Fri 25 Nov 2022 04:39:28 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.8.192/26 maxlen: 26
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8467 (0x2113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:28 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=40C15032FEA08B2225EEC4374EA97DF3AC340781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:1a:62:c3:b2:42:d3:77:01:35:26:fb:8b:
                    b0:a1:83:75:f6:17:98:d1:17:60:c0:42:3b:00:a6:
                    62:63:5b:9d:9f:4a:a8:fd:ec:19:f0:ad:ca:a0:e5:
                    0b:10:81:ae:24:a3:58:fd:f2:a9:76:25:0d:20:49:
                    87:c1:24:1e:f3:c2:63:cc:a9:37:33:76:dc:16:ab:
                    e8:8d:3c:c0:29:84:10:6a:fd:67:83:95:48:73:b3:
                    2d:3b:64:f7:b6:fd:b5:5a:a9:27:8d:a3:49:00:d4:
                    47:e9:f8:a1:b2:54:50:a4:33:2a:37:a0:84:f5:7d:
                    2d:5a:72:7f:f5:4a:b7:d2:5f:03:80:af:dd:2f:9a:
                    ce:35:65:df:97:71:e1:b5:9b:9d:42:c6:ff:4b:12:
                    91:1e:93:cb:90:09:34:32:5d:31:71:3d:f6:0b:1a:
                    f4:a6:b3:bd:f1:30:80:05:a4:c9:6f:bb:71:a3:f5:
                    71:34:4f:9a:a9:de:d7:97:0e:90:2d:31:98:76:c1:
                    5a:6a:33:c8:3f:e0:e5:ba:bb:db:8f:30:c3:3a:84:
                    39:eb:e8:27:28:16:49:9f:d4:4a:24:ad:5e:30:9d:
                    a9:0f:31:41:9d:89:1e:dd:de:2f:69:c4:0f:ec:f0:
                    10:10:1f:ec:93:bc:c4:f4:60:8f:dd:72:6a:4f:27:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C1:50:32:FE:A0:8B:22:25:EE:C4:37:4E:A9:7D:F3:AC:34:07:81
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QMFQMv6giyIl7sQ3Tql986w0B4E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.8.192/26

    Signature Algorithm: sha256WithRSAEncryption
         96:db:1f:77:c2:f3:70:23:57:07:d3:2d:dd:a7:52:e4:dc:83:
         2c:c4:02:7e:74:e9:6a:2f:31:d5:5d:ba:2c:58:fe:0a:a9:66:
         98:6a:bd:d4:16:af:d5:56:ba:9d:8d:c6:64:a8:cb:f0:3f:74:
         e2:e4:5b:70:7b:5f:e6:67:5d:56:dc:e0:db:e5:db:60:88:02:
         bc:e7:4f:9c:36:29:ba:92:dc:b3:26:f7:71:51:df:92:8d:78:
         11:77:ca:cb:e7:4c:2a:f8:36:89:18:98:18:72:4c:64:27:a3:
         17:4f:a7:fe:f4:c8:0d:16:be:e8:41:11:1f:1b:fe:fc:46:56:
         1c:e2:48:a6:c1:9a:98:a8:aa:1e:db:1b:49:55:7c:a1:63:61:
         89:66:d4:56:ef:aa:e3:ac:94:89:d7:0d:60:a8:95:e5:04:13:
         f7:d6:cd:c5:24:31:7b:5b:69:c5:4d:ce:c2:3b:fe:3d:3f:d6:
         51:52:ec:99:48:72:ba:03:69:54:04:df:94:c9:8f:f7:8d:da:
         85:d5:04:03:46:b9:95:a7:23:ac:56:79:ec:b9:12:89:2e:8e:
         96:8c:bc:87:08:26:52:4a:55:46:e0:4d:8a:b6:6a:a1:9b:29:
         34:78:db:38:1d:44:25:91:1b:39:88:49:12:db:e8:3f:75:77:
         1e:80:bf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:27 2025 by rpki-client