Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TQWBPMUq9n-1I9hFcJXauQlzVLw.roa
File:                     TQWBPMUq9n-1I9hFcJXauQlzVLw.roa (raw, json)
Hash identifier:          /phjBBa9l8uCGsrbi3BdX6uyOPINnhu7+eDZxQ9uG+0=
Subject key identifier:   4D:05:81:3C:C5:2A:F6:7F:B5:23:D8:45:70:95:DA:B9:09:73:54:BC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TQWBPMUq9n-1I9hFcJXauQlzVLw.roa
Signing time:             Thu 15 Sep 2022 02:46:23 +0000
ROA not before:           Thu 15 Sep 2022 02:46:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:23 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4D05813CC52AF67FB523D8457095DAB9097354BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:53:13:fd:49:02:af:a6:00:78:c4:ce:ec:
                    cd:5e:03:e7:05:0e:2c:6e:be:47:5d:b7:ad:67:53:
                    ea:d4:c7:f0:1e:9e:fb:8d:76:fc:3e:cd:78:fa:da:
                    ab:c3:1a:d2:7d:e8:ce:c1:e1:83:be:67:87:16:33:
                    92:53:d6:d3:8c:0b:6c:7c:55:9a:9d:64:02:b2:57:
                    47:ff:20:f2:a5:40:8d:05:7c:f9:3b:ca:47:ad:f4:
                    26:20:5e:28:09:3c:28:fe:e5:d0:41:85:7e:45:88:
                    35:0d:d0:7d:e9:22:75:91:64:3b:ce:23:ae:e4:6d:
                    97:72:6e:84:d6:ff:fd:31:6e:e4:a7:68:7f:f0:8e:
                    aa:90:6c:9f:9a:6f:aa:43:66:8f:58:48:36:8b:49:
                    4b:eb:f2:2a:f7:07:ef:23:19:cd:0f:d2:0c:59:12:
                    94:c0:3a:38:60:0f:94:bc:2f:59:42:7b:6b:46:e6:
                    6e:ec:27:81:82:e0:5c:49:35:66:e1:ff:df:a8:76:
                    1a:25:5c:2b:a0:6b:5c:04:dd:a5:e7:4f:5a:f2:f0:
                    ce:a7:91:31:50:d7:10:8b:8f:d9:e3:19:2a:16:40:
                    ee:3f:ea:e4:1d:79:1a:e7:90:61:75:d4:e3:b3:de:
                    86:7f:93:59:c7:36:25:c2:24:5a:55:ab:bf:83:8d:
                    6c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:81:3C:C5:2A:F6:7F:B5:23:D8:45:70:95:DA:B9:09:73:54:BC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TQWBPMUq9n-1I9hFcJXauQlzVLw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:ea:31:56:19:bb:28:30:46:16:2c:83:21:29:f5:0b:72:7f:
         42:a7:23:e8:69:12:cd:ad:05:fd:63:dc:26:46:bb:1b:b1:ec:
         0f:bb:8e:ee:7b:db:98:9f:35:58:66:43:46:3f:bd:f0:ef:26:
         c3:c8:3c:cc:e6:27:10:9f:00:c9:52:9a:79:9f:d5:8c:f4:a3:
         ba:80:fe:b0:b6:14:c5:28:cd:57:45:dc:3e:31:a9:2e:1f:cc:
         49:e8:38:85:7c:74:5a:6f:12:58:9e:c3:11:26:7a:60:1a:ed:
         f9:93:63:ee:3e:71:fd:b0:27:d9:d3:5e:c7:2a:ba:f7:9a:6e:
         15:a1:5a:f8:06:ba:22:63:33:4b:71:bc:d7:19:bb:99:ec:4f:
         ca:85:81:0f:49:c5:da:51:e7:c5:32:df:06:3a:0b:8e:44:49:
         43:a3:9c:54:52:cd:b0:0f:96:37:c2:f2:47:93:d1:61:52:b5:
         2f:22:dd:6b:ab:9e:bc:f7:58:5d:40:11:be:15:d2:46:37:20:
         62:f5:fa:ab:5c:e3:00:84:73:9f:45:77:0b:24:e6:67:0a:ea:
         a0:38:80:b5:f3:ad:a1:0b:b0:57:de:9a:18:99:e1:9f:c6:b1:
         4c:23:68:cb:e0:07:f4:a2:f2:44:eb:cb:32:ee:b8:7a:67:93:
         9b:6f:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org