Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rv7gOVPIchwC-Em1AiDITxiCmYA.roa
File:                     Rv7gOVPIchwC-Em1AiDITxiCmYA.roa (raw, json)
Hash identifier:          YtUUWhc6WOk4ZmoGXoanyrog86KxNsa0HrDHdM+FOCc=
Subject key identifier:   46:FE:E0:39:53:C8:72:1C:02:F8:49:B5:02:20:C8:4F:18:82:99:80
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       14BD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rv7gOVPIchwC-Em1AiDITxiCmYA.roa
Signing time:             Sun 07 Feb 2021 11:59:51 +0000
ROA not before:           Sun 07 Feb 2021 11:59:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.193.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5309 (0x14bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:59:51 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=46FEE03953C8721C02F849B50220C84F18829980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:4c:19:85:9c:80:72:9b:6e:02:83:3c:1c:
                    de:8e:a3:94:f2:2d:d3:e7:06:b5:f3:97:f3:a7:01:
                    d2:41:b6:ec:aa:7e:45:e3:66:a6:ce:ae:e0:f8:0a:
                    ed:71:21:76:0c:d6:d0:fa:ee:39:63:29:6f:a0:f0:
                    ad:80:b9:d1:26:3b:e3:f2:82:66:3d:8d:08:78:5f:
                    77:0a:24:24:25:55:a9:a1:b1:4d:09:c1:86:f8:1e:
                    74:2e:82:d4:05:aa:74:65:77:0e:b2:16:e0:09:b5:
                    7a:65:58:c0:92:f7:d8:3f:0c:fe:be:84:c7:44:e6:
                    cb:9f:0c:86:2f:13:e7:8b:91:f8:6d:b5:76:f0:ce:
                    d5:42:c7:02:c6:8e:f5:cb:a5:22:98:bd:48:b7:22:
                    c7:3c:6a:48:8d:62:39:38:20:d7:22:8c:88:8d:4c:
                    ea:e2:d2:9d:1b:ad:4f:59:be:21:a8:d7:83:10:ad:
                    d3:56:53:5a:78:f3:bf:92:62:ae:18:18:62:f1:32:
                    53:f7:eb:be:a7:51:45:1a:e4:c1:09:1f:cd:42:31:
                    f8:b9:f6:17:32:37:1c:46:4a:d7:78:46:76:ec:71:
                    d6:8f:5c:94:34:4e:4c:75:05:f2:fd:f0:e5:5e:7a:
                    01:b5:12:45:a0:e0:62:91:ea:1f:60:cf:d7:f5:15:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FE:E0:39:53:C8:72:1C:02:F8:49:B5:02:20:C8:4F:18:82:99:80
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rv7gOVPIchwC-Em1AiDITxiCmYA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:89:18:fb:a2:ff:33:60:68:75:92:93:98:20:fd:80:d8:
         3f:11:fa:8e:f1:d5:a2:06:5d:0f:8a:92:c9:10:e5:8a:8e:33:
         63:e2:7a:c4:da:0a:9a:36:49:2c:f9:0a:08:0b:b9:89:8c:86:
         e1:c3:d8:db:9a:0d:ad:d7:0e:7a:53:b8:6b:35:66:de:a7:fc:
         5e:32:bf:1b:00:28:7d:4c:93:de:5b:0c:08:dd:95:4a:f2:c7:
         59:e2:fe:98:cd:ab:5a:25:47:19:93:4f:41:58:b1:0a:52:9a:
         34:7d:70:7b:bc:da:c6:8d:c5:11:0c:cf:ec:23:ee:c9:07:ac:
         0e:4b:4d:d0:1d:fd:1c:26:ae:9d:c2:fe:8e:c6:39:68:fc:66:
         4a:af:e4:08:e5:49:7f:68:06:05:e0:a2:1e:ae:56:26:c5:2a:
         73:c8:4f:0f:09:74:27:1c:8d:d4:2b:51:4f:e4:4b:63:7d:0b:
         ba:eb:3c:c9:1e:cd:be:e7:63:13:9c:6c:93:50:31:56:f7:30:
         d8:96:a0:5e:01:3e:01:18:be:ef:96:9c:bd:cc:06:2f:24:45:
         0a:af:7a:85:9e:45:ae:92:31:f2:8e:c2:91:77:7d:9c:76:8f:
         88:22:02:d5:f9:4f:7e:7a:c3:7d:e9:6d:19:d5:bf:a0:64:4a:
         46:6d:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-fra.rpki-client.org