Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RfXapLciYERqsIrS3XjIIl04m14.roa
File:                     RfXapLciYERqsIrS3XjIIl04m14.roa (raw, json)
Hash identifier:          cEXujfaB/DiLE3fZsPjfvSJ+YE3kTEF4oHl3WnYjkOY=
Subject key identifier:   45:F5:DA:A4:B7:22:60:44:6A:B0:8A:D2:DD:78:C8:22:5D:38:9B:5E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       181F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RfXapLciYERqsIrS3XjIIl04m14.roa
Signing time:             Sun 07 Feb 2021 12:26:28 +0000
ROA not before:           Sun 07 Feb 2021 12:26:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.54.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6175 (0x181f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:26:28 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=45F5DAA4B72260446AB08AD2DD78C8225D389B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:c4:04:25:38:72:d8:30:ac:f7:fb:04:57:
                    1c:cf:0c:38:ce:59:c8:61:0f:73:25:a4:32:80:74:
                    3e:86:58:7b:b0:69:73:31:12:c0:33:dc:e8:ce:fc:
                    2b:b5:05:1c:c9:62:98:81:91:42:05:f7:77:d5:18:
                    d1:29:32:07:fe:2f:7b:1d:db:a1:a2:01:8e:85:6e:
                    9d:1e:35:15:64:56:b0:4a:8a:5b:67:fd:5e:f0:ea:
                    a4:d2:e2:6b:3e:78:b5:b7:b7:b9:7d:39:bf:9a:ae:
                    03:e9:01:6e:8d:77:3b:a3:cc:80:98:27:d6:fb:c6:
                    d2:64:36:f4:a0:d8:e5:c5:69:af:23:63:42:b8:4c:
                    6d:2d:e2:7a:cb:b9:26:b0:4e:f7:05:6b:42:c1:c8:
                    8f:66:77:85:a5:3d:e9:90:92:ea:0d:48:3c:69:75:
                    d8:73:81:76:61:e3:99:59:ea:ad:60:8d:54:55:c1:
                    80:62:a4:77:0c:1b:45:6d:e0:25:1a:9a:dd:68:15:
                    08:fd:02:56:35:85:32:04:68:b3:2f:79:cb:a9:0e:
                    cd:45:21:75:78:52:c9:15:91:38:62:3b:5e:df:f3:
                    cf:94:22:b2:14:c2:93:7d:a2:b6:4a:d5:ce:5c:c5:
                    71:cc:dd:13:db:66:44:54:ed:ce:9d:77:05:8a:f4:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F5:DA:A4:B7:22:60:44:6A:B0:8A:D2:DD:78:C8:22:5D:38:9B:5E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RfXapLciYERqsIrS3XjIIl04m14.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:7e:30:d8:76:cf:92:36:7f:29:95:03:38:34:89:9d:e4:94:
         48:e6:75:d3:9e:c0:f1:cc:1f:e7:cf:cb:87:73:65:4b:06:68:
         ec:f9:b1:5d:1e:38:06:b6:66:df:37:3f:66:94:85:ed:8b:1e:
         aa:c5:e6:16:3f:56:0d:b3:d0:4e:b8:2a:e6:e6:98:6e:45:ca:
         15:87:ad:01:8c:1f:2c:f2:35:18:9e:ac:ec:6a:cc:ea:7e:fe:
         6b:b4:73:7e:f2:4d:f1:7d:cb:0c:9e:40:f5:4d:61:cc:f1:f6:
         0f:a8:b0:23:b8:1a:ce:4c:db:12:32:1c:1a:3e:b5:37:4e:c9:
         5c:c4:1e:4c:78:05:37:18:66:62:f2:d2:97:c5:93:a2:bd:d4:
         2d:27:1b:d5:55:7b:61:bb:76:1b:52:a5:3e:bf:07:b1:ed:5d:
         3d:08:35:88:6f:5e:09:c3:25:0b:01:61:90:c8:4c:c2:8b:1e:
         47:42:74:7c:af:88:2e:75:32:10:8e:45:bf:c0:0a:54:ef:53:
         3b:b3:0a:42:f2:e0:72:d1:f4:34:e7:9b:59:2f:65:61:b7:e8:
         eb:6e:6a:aa:df:d2:14:44:8e:c6:8d:c8:08:0a:a1:6a:f1:6b:
         67:1e:a3:13:52:d7:14:16:c9:5e:62:a5:d9:0b:3b:4a:c4:26:
         9c:83:7e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-fra.rpki-client.org