Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QVdzI33-gsGCe_PyC6-eBT_Mfjo.roa
File:                     QVdzI33-gsGCe_PyC6-eBT_Mfjo.roa (raw, json)
Hash identifier:          Oh3jUKEbguhFbki9VA7vyGZWcopKhzE2XQZx7U6YOKc=
Subject key identifier:   41:57:73:23:7D:FE:82:C1:82:7B:F3:F2:0B:AF:9E:05:3F:CC:7E:3A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QVdzI33-gsGCe_PyC6-eBT_Mfjo.roa
Signing time:             Thu 15 Sep 2022 02:46:19 +0000
ROA not before:           Thu 15 Sep 2022 02:46:19 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.36.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:19 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=415773237DFE82C1827BF3F20BAF9E053FCC7E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:0b:fd:e8:1f:8b:aa:bc:5a:64:3e:ec:a4:
                    3c:6c:f8:a6:27:45:dd:8e:b7:a6:ce:ce:8d:61:d2:
                    64:08:25:23:e9:d5:9e:11:ee:89:b4:dc:4e:ce:98:
                    ed:94:93:a0:98:2c:2b:68:d9:65:7b:80:44:23:0c:
                    28:c5:26:2d:d9:21:15:1d:d1:ee:47:65:b6:77:c4:
                    76:57:e9:71:a3:2b:03:cd:6d:66:3e:d3:7e:b9:59:
                    2a:ba:ed:e6:33:53:f6:f7:77:33:59:a9:01:87:85:
                    fb:bb:20:31:1c:ca:c6:a8:d1:d4:bf:1a:ae:51:28:
                    dc:53:7b:85:a8:7b:2e:cf:d8:0b:ed:b1:81:68:f9:
                    7d:81:da:7b:b3:4c:ee:68:92:2c:33:26:0f:76:86:
                    0e:d1:94:6a:a6:a4:81:9c:ce:4d:54:b5:4d:94:f6:
                    0d:bf:11:09:62:92:da:dd:bf:fc:be:bb:7e:ef:c0:
                    73:15:18:bc:42:68:3f:b0:c7:f2:7f:d7:d8:8a:1a:
                    bf:27:7b:8c:69:59:20:96:d2:b9:eb:51:06:c4:a8:
                    50:a2:08:14:9c:e7:2b:6c:61:c2:6f:f4:32:94:22:
                    c6:77:f1:e7:77:87:b6:d5:2d:6e:62:f7:79:d9:d3:
                    81:08:9d:73:23:fe:37:a0:e0:20:ea:06:4d:bf:70:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:57:73:23:7D:FE:82:C1:82:7B:F3:F2:0B:AF:9E:05:3F:CC:7E:3A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QVdzI33-gsGCe_PyC6-eBT_Mfjo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:46:ce:87:09:19:1d:3b:28:ae:fe:f0:e6:8c:1c:48:de:
         53:0f:05:df:a3:66:55:0c:65:a8:f7:8b:bc:93:dc:0d:30:e5:
         5b:bf:2f:e0:9e:e0:3e:82:99:04:bc:5f:ad:2c:d5:c5:e8:36:
         99:22:36:84:50:af:9a:3f:18:b5:8c:e8:8c:9b:7c:7e:cf:92:
         e1:d3:37:f9:07:cc:0f:6e:0e:27:33:ec:ea:00:a2:06:37:79:
         77:7a:b4:f0:1f:75:b0:3c:8a:a9:37:a9:37:b9:e2:cb:d2:1a:
         9b:15:b2:03:a7:b0:38:ac:93:ab:5b:5d:a8:e1:02:cf:90:e2:
         8b:5b:67:11:63:30:8d:ad:81:53:89:e7:f3:a7:52:af:52:cc:
         1d:90:ae:5b:94:ec:08:f2:a4:60:a6:53:03:8f:3e:42:16:ed:
         48:7d:24:a3:f7:55:c8:68:88:97:cb:56:40:58:86:fe:c2:5f:
         e1:44:a3:93:09:e0:2f:de:63:b9:25:04:d4:94:d5:05:6c:9d:
         c6:77:3c:62:48:9f:47:c6:95:3f:02:2a:ee:bb:44:69:ea:0a:
         93:e1:7c:b3:0a:53:fb:44:21:5f:db:d1:d6:9c:5e:e2:e8:57:
         59:48:e9:5a:0d:c7:cc:81:24:6d:41:f2:25:f4:12:31:5a:3d:
         76:89:36:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org