Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SDXM-QGq5GH2ldNHz6ZcaGS1F3Q.roa
File:                     SDXM-QGq5GH2ldNHz6ZcaGS1F3Q.roa (raw, json)
Hash identifier:          Ub8oyflnQx7wtkm2A60PvJLrjEnLv6sntbdx7hJcscA=
Subject key identifier:   48:35:CC:F9:01:AA:E4:61:F6:95:D3:47:CF:A6:5C:68:64:B5:17:74
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C5D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SDXM-QGq5GH2ldNHz6ZcaGS1F3Q.roa
Signing time:             Wed 29 Sep 2021 02:47:40 +0000
ROA not before:           Wed 29 Sep 2021 02:47:40 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.233.8.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7261 (0x1c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:40 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4835CCF901AAE461F695D347CFA65C6864B51774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:53:d3:60:53:f1:98:cc:c5:d7:dd:92:ae:
                    b2:fa:de:7d:46:01:05:f2:8a:6c:af:6c:9b:7e:0b:
                    76:31:9d:7d:8f:4f:95:93:d6:23:72:a1:fd:cc:e6:
                    be:ad:6e:85:39:78:b9:24:06:b3:06:a0:c4:3a:f1:
                    7c:3c:71:5b:b1:63:a3:e9:b9:ae:28:1c:d0:86:9c:
                    9b:d2:00:ac:e2:95:07:c7:e6:e1:63:c2:12:f7:21:
                    b1:32:54:b4:d7:ed:fb:16:91:64:97:a5:39:ab:08:
                    68:3f:f0:c9:d1:05:26:30:0c:bd:c2:03:42:d0:74:
                    7b:dc:f9:b0:86:13:f2:85:b0:6d:3b:f2:11:92:78:
                    24:30:ea:61:7a:43:cb:f7:b5:64:3c:87:b0:cb:a5:
                    b4:a1:86:52:3d:84:44:e4:3d:fa:80:57:9c:57:17:
                    b0:0c:0a:77:70:0e:1c:be:60:00:18:d9:4d:e3:5e:
                    32:f3:6f:9d:0a:01:e6:38:3e:3e:12:62:ae:76:9e:
                    be:c2:69:23:42:f2:c4:17:1a:c3:57:4c:20:bd:fc:
                    20:b4:d5:7e:f4:f4:a9:0e:4c:60:3c:23:53:f1:b3:
                    77:26:e4:5e:f5:0f:ab:f8:7e:d9:9c:cc:dd:b0:5a:
                    96:3e:bc:d9:e1:e1:a3:eb:95:96:6a:3d:c2:85:12:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:35:CC:F9:01:AA:E4:61:F6:95:D3:47:CF:A6:5C:68:64:B5:17:74
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SDXM-QGq5GH2ldNHz6ZcaGS1F3Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:ca:ec:a6:46:97:7f:dd:f3:2c:4c:90:1e:c3:b4:f0:14:
         bb:49:b2:0d:97:38:51:cf:87:b3:f6:f6:d4:8d:23:1e:83:36:
         d2:60:fe:83:87:72:39:75:5b:6c:15:8d:b2:cd:67:94:51:87:
         27:f4:d2:dc:e2:e1:9f:21:ff:21:be:2d:2c:73:f4:d1:d2:cd:
         cc:d7:1a:73:f8:48:7f:ef:15:87:1f:b1:5d:27:c6:bf:3e:78:
         55:61:b0:26:d2:85:d5:6c:1c:57:d7:e2:1e:95:e3:06:6f:df:
         f0:60:d4:c0:e2:8d:92:59:34:98:5a:e5:cf:a9:e3:4d:a9:c0:
         45:cc:6f:85:af:60:39:3f:37:45:71:a5:16:13:45:8c:5e:2e:
         3d:6b:ce:58:0f:18:31:d5:0f:a8:5e:66:76:5c:48:1a:bf:d8:
         0d:69:b9:77:23:22:ae:2b:5b:59:65:4b:c8:eb:56:52:60:c2:
         9c:b7:3c:ec:88:b9:23:b0:f0:4f:79:ce:b0:d8:a0:99:78:42:
         14:df:12:93:89:db:1e:d0:1a:c3:4f:05:ea:f0:d5:57:0b:86:
         c1:38:0a:af:2f:ab:35:31:85:93:8e:5c:91:db:99:95:8d:8c:
         0b:86:46:6f:95:19:2d:59:35:d2:bc:3d:96:e8:36:d9:91:5d:
         a7:e9:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org