Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rky2cFXiMRReLAle5F-Hda3q_ow.roa
File:                     Rky2cFXiMRReLAle5F-Hda3q_ow.roa (raw, json)
Hash identifier:          1Weoc6tuwPsaVwfpQx8I1/HOiJWL24+FTGZP/+uXeqQ=
Subject key identifier:   46:4C:B6:70:55:E2:31:14:5E:2C:09:5E:E4:5F:87:75:AD:EA:FE:8C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B86
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rky2cFXiMRReLAle5F-Hda3q_ow.roa
Signing time:             Wed 29 Sep 2021 02:46:42 +0000
ROA not before:           Wed 29 Sep 2021 02:46:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7046 (0x1b86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=464CB67055E231145E2C095EE45F8775ADEAFE8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:6c:91:75:e6:5f:f6:39:7b:fb:8d:a0:c8:
                    ea:7c:08:46:20:81:4d:6f:fd:54:a3:32:6e:a3:bf:
                    d1:0e:fc:f3:13:b3:92:e8:ee:f5:7c:40:46:ad:34:
                    8e:13:6c:5a:7e:21:77:5e:fd:eb:73:c3:03:e4:5e:
                    79:ac:3c:fd:e9:e4:8c:39:7d:91:60:bc:52:5b:c8:
                    f7:2b:a2:a3:b3:a4:fe:3f:7e:37:4b:6a:4e:aa:26:
                    5a:10:0b:73:56:34:57:f0:44:50:26:47:5f:8e:45:
                    9b:a7:e6:0e:ed:23:44:a8:64:71:6a:0c:65:cb:7e:
                    30:35:2e:3d:b7:f2:af:c2:25:18:c6:f3:40:7a:b5:
                    f4:5b:b8:a1:9b:b6:12:a0:c0:a3:cf:5a:4e:08:fa:
                    2e:2f:9b:3f:ac:ce:84:5e:91:41:89:90:02:fa:0c:
                    43:70:cd:47:c3:4e:c0:75:60:f1:5b:fb:5f:f3:5d:
                    83:7f:4a:99:a8:40:e3:76:2f:7e:31:f4:9a:f9:06:
                    87:76:c9:5d:ae:f7:88:91:4d:d8:40:c7:80:5f:d7:
                    b3:ac:70:11:8d:8e:d7:a5:9c:28:37:39:6b:ee:8d:
                    1d:c6:f8:fc:d5:37:ff:a2:8e:48:49:d0:10:d9:d1:
                    1b:32:36:9c:4c:67:78:6b:a3:4c:8c:03:ba:09:fe:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4C:B6:70:55:E2:31:14:5E:2C:09:5E:E4:5F:87:75:AD:EA:FE:8C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rky2cFXiMRReLAle5F-Hda3q_ow.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:7b:24:69:6c:61:f9:02:f1:ad:f2:57:01:00:23:51:e0:
         4b:52:45:79:1f:70:b4:8b:78:46:1f:ab:45:32:7a:ae:e3:40:
         c5:91:b5:66:ee:3d:9b:b4:8e:ad:df:99:e2:14:5a:15:d8:e4:
         9a:1e:26:b8:8d:d8:d0:6c:a0:c0:0c:f2:1f:03:d2:8a:75:56:
         8d:26:fd:19:d6:ae:85:59:3e:10:e7:53:c3:57:5c:87:9b:c6:
         22:55:72:75:aa:55:41:d2:56:f4:5f:51:ea:d8:29:43:7e:d4:
         ea:8e:3f:bd:0e:58:ad:70:44:37:2f:51:c7:04:22:af:18:21:
         77:0e:f8:2b:8b:09:4e:70:78:52:08:3c:4b:d3:7b:b8:c7:56:
         87:7a:bf:31:55:81:5d:c7:04:43:d3:d0:24:fb:11:8e:e7:8f:
         c0:d6:32:a1:06:1d:08:fc:5d:e6:69:3a:05:82:e8:ff:77:e2:
         6e:f0:59:2b:a6:1a:85:48:9b:72:a6:f6:66:68:10:e2:c7:2e:
         e4:61:47:07:b3:0a:bf:18:1c:61:35:62:81:6e:f0:7d:52:28:
         9f:a9:e6:ed:2d:2f:2b:3a:09:77:37:48:5e:b4:ab:36:78:13:
         1e:bf:3e:4f:f0:f5:06:83:3e:85:4a:23:70:c1:3e:8d:5b:d1:
         e2:8b:b5:31
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG4YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2NDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDQ2NENCNjcwNTVFMjMx
MTQ1RTJDMDk1RUU0NUY4Nzc1QURFQUZFOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2YWyRdeZf9jl7+42gyOp8CEYggU1v/VSjMm6jv9EO/PMTs5Lo
7vV8QEatNI4TbFp+IXde/etzwwPkXnmsPP3p5Iw5fZFgvFJbyPcroqOzpP4/fjdL
ak6qJloQC3NWNFfwRFAmR1+ORZun5g7tI0SoZHFqDGXLfjA1Lj238q/CJRjG80B6
tfRbuKGbthKgwKPPWk4I+i4vmz+szoRekUGJkAL6DENwzUfDTsB1YPFb+1/zXYN/
SpmoQON2L34x9Jr5Bod2yV2u94iRTdhAx4Bf17OscBGNjtelnCg3OWvujR3G+PzV
N/+ijkhJ0BDZ0RsyNpxMZ3hro0yMA7oJ/nIZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURky2cFXiMRReLAle5F+Hda3q/owwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JreTJjRlhpTVJSZUxBbGU1
Ri1IZGEzcV9vdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wuQwDQYJKoZIhvcNAQELBQADggEBAHYseyRpbGH5AvGt8lcBACNR4EtSRXkfcLSL
eEYfq0Uyeq7jQMWRtWbuPZu0jq3fmeIUWhXY5JoeJriN2NBsoMAM8h8D0op1Vo0m
/RnWroVZPhDnU8NXXIebxiJVcnWqVUHSVvRfUerYKUN+1OqOP70OWK1wRDcvUccE
Iq8YIXcO+CuLCU5weFIIPEvTe7jHVod6vzFVgV3HBEPT0CT7EY7nj8DWMqEGHQj8
XeZpOgWC6P934m7wWSumGoVIm3Km9mZoEOLHLuRhRwezCr8YHGE1YoFu8H1SKJ+p
5u0tLys6CXc3SF60qzZ4Ex6/Pk/w9QaDPoVKI3DBPo1b0eKLtTE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org