Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TipcwyzMzeMd_HZ7AbPX0vAPEbg.roa
File:                     TipcwyzMzeMd_HZ7AbPX0vAPEbg.roa (raw, json)
Hash identifier:          EsFroX7wt7QOluDbnmZTht9XPA/TuN3jhOcvi/3I8VY=
Subject key identifier:   4E:2A:5C:C3:2C:CC:CD:E3:1D:FC:76:7B:01:B3:D7:D2:F0:0F:11:B8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       13FF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TipcwyzMzeMd_HZ7AbPX0vAPEbg.roa
Signing time:             Sun 07 Feb 2021 11:57:02 +0000
ROA not before:           Sun 07 Feb 2021 11:57:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5119 (0x13ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:57:02 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4E2A5CC32CCCCDE31DFC767B01B3D7D2F00F11B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:a4:65:78:8b:b4:41:a0:5e:cd:f1:b2:bf:
                    fa:f9:c3:68:99:7d:73:32:54:d8:31:c8:57:e7:2f:
                    45:14:91:b0:62:a6:36:66:f3:3a:4b:bc:fa:48:bd:
                    aa:f1:17:a8:51:e7:80:7d:b7:f4:d3:9b:72:1d:bc:
                    65:ef:b5:a0:81:fa:55:61:97:23:24:ad:bf:e9:37:
                    57:1f:19:98:82:d5:ab:ac:a4:11:67:9a:95:8d:78:
                    67:2e:a2:79:57:bd:73:95:8e:40:09:b1:11:9e:e4:
                    55:70:af:12:e0:82:40:fd:9f:bb:a8:ef:d0:c8:c9:
                    a5:b0:0d:36:8b:5d:0d:40:54:79:43:ec:b3:06:fc:
                    e7:db:82:f6:0d:0a:04:aa:a3:6c:fd:45:37:92:a1:
                    80:c5:1b:5b:fa:23:93:01:a3:13:50:30:b8:47:69:
                    1e:c8:78:c9:5c:33:4a:e7:be:7a:40:13:71:eb:f9:
                    de:4a:c1:25:38:14:76:08:89:3d:8c:ce:7f:5a:bf:
                    14:f6:85:b7:05:37:ff:bb:bb:28:52:fe:8f:40:34:
                    ec:98:7e:3f:54:e2:1f:0f:9c:41:8f:82:c2:ec:32:
                    ef:84:ad:52:2c:6e:3d:56:4a:7f:90:71:7a:57:27:
                    4e:8f:4a:d7:d6:d3:5f:ca:5a:fa:51:1e:44:9d:c8:
                    0b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2A:5C:C3:2C:CC:CD:E3:1D:FC:76:7B:01:B3:D7:D2:F0:0F:11:B8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TipcwyzMzeMd_HZ7AbPX0vAPEbg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:02:29:94:ac:c7:a1:41:f3:76:70:40:44:78:9b:cd:1e:4b:
         c2:1f:7b:48:3b:87:ce:42:74:9a:a9:3e:54:7c:76:08:a4:27:
         c8:78:f2:f9:3b:98:99:52:1b:1d:a9:88:3c:0d:e3:7e:2b:a8:
         1b:82:61:88:0d:35:78:05:57:00:39:57:51:c5:e1:c2:03:84:
         f1:3c:b1:78:eb:c1:72:ac:e5:ac:ae:e2:94:61:cb:be:f3:a3:
         f8:9a:1e:4c:21:8e:7b:4d:59:26:a3:67:c9:41:7b:eb:13:e3:
         a2:fc:8b:88:ac:30:57:28:2e:b1:4b:42:cd:4a:15:d7:be:27:
         71:63:4e:87:a3:99:9e:ff:c6:cb:69:88:46:35:7d:f3:ec:f2:
         19:c8:b6:42:5f:39:75:96:a7:aa:8b:fd:03:28:df:5c:26:6a:
         cb:af:ca:b7:c0:d0:8d:ed:6b:5b:75:94:87:46:ac:ae:f5:69:
         20:f4:24:5a:7c:e1:aa:c7:e7:dc:f7:40:b0:82:ab:ed:dd:e8:
         50:7c:61:9a:e3:2a:e1:1a:31:84:43:4b:ee:59:bb:e5:d3:a9:
         d4:0d:58:11:be:74:e5:70:4f:33:b5:14:9a:4b:73:88:90:d4:
         f4:54:df:20:cc:ed:e7:99:1e:4d:b2:85:bd:49:e4:1b:1d:f3:
         74:90:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org