Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UUrEvWuWf2Em1lu58jgi97DH3IY.roa
File:                     UUrEvWuWf2Em1lu58jgi97DH3IY.roa (raw, json)
Hash identifier:          3qjWjNxAwvnuyHDiwBDUagVU2+shImATWqWGCEB5RZw=
Subject key identifier:   51:4A:C4:BD:6B:96:7F:61:26:D6:5B:B9:F2:38:22:F7:B0:C7:DC:86
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UUrEvWuWf2Em1lu58jgi97DH3IY.roa
Signing time:             Thu 15 Sep 2022 02:52:52 +0000
ROA not before:           Thu 15 Sep 2022 02:52:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=514AC4BD6B967F6126D65BB9F23822F7B0C7DC86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:0e:53:4b:2b:09:54:09:61:14:b3:cf:65:
                    bc:7d:4d:46:6e:51:98:0e:6b:6c:a5:5c:8b:ce:49:
                    26:35:84:02:1a:fb:ca:71:79:9e:10:67:8f:9d:2e:
                    12:ec:a5:c9:5c:74:86:95:90:12:2c:0a:aa:e5:2e:
                    2e:eb:aa:b3:7b:78:71:61:fb:8a:1e:10:5c:86:a9:
                    5b:49:34:72:85:c7:b4:9b:ba:7e:a0:9e:fa:15:63:
                    5b:f9:3e:e7:55:ed:91:ad:80:c9:e5:8d:47:eb:51:
                    34:72:8a:df:f7:e2:d6:b0:88:f6:6a:a7:12:3a:f8:
                    3b:7b:e4:7f:1e:e2:28:b1:10:26:af:c4:15:3c:6c:
                    2b:79:26:09:ae:f8:1f:5e:bf:5d:76:4b:c1:dd:88:
                    78:3e:22:23:63:18:fb:a2:20:db:09:70:56:67:c1:
                    e7:8f:c0:93:a2:22:13:72:c0:d3:4e:2c:6a:d5:4b:
                    b5:6f:4d:0f:14:95:6e:14:3d:12:d1:4f:33:6f:6e:
                    67:4f:0e:66:ca:7c:0f:28:61:8a:dc:e5:1d:68:b5:
                    73:b6:51:01:8c:84:68:22:d0:3f:82:59:8d:6b:56:
                    ee:71:85:57:e4:50:e2:18:7c:da:8f:dc:a2:17:f5:
                    fe:74:0c:29:75:cc:9a:ad:dc:fb:63:9f:9a:ac:e9:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4A:C4:BD:6B:96:7F:61:26:D6:5B:B9:F2:38:22:F7:B0:C7:DC:86
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UUrEvWuWf2Em1lu58jgi97DH3IY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:24:af:09:36:25:19:01:91:15:b4:60:01:eb:f7:42:48:
         9e:f1:f5:a8:91:8b:f3:a1:d8:b8:79:93:f3:77:ec:85:06:01:
         54:92:87:58:4d:79:6d:75:ec:bb:89:bd:d6:95:01:de:c5:6f:
         e3:28:4e:01:f6:c6:64:ac:98:90:69:d5:90:b7:2f:45:f6:62:
         0b:9c:68:00:ee:09:b4:e6:7c:c8:08:9b:d9:3b:5b:02:be:99:
         b0:16:a2:df:5d:85:cc:21:4a:d0:e0:9f:3b:8f:3f:11:48:85:
         2e:08:eb:76:dd:43:7f:aa:fc:79:fc:bd:bb:0c:9b:4d:20:45:
         a0:0d:f1:65:e5:f1:83:f5:db:c4:94:76:32:87:d0:41:0d:8a:
         34:5b:59:8f:04:2f:d4:32:ad:c3:68:88:76:a2:82:81:94:3c:
         af:10:8a:c4:e8:03:1d:e6:12:b7:64:bb:f4:e8:73:ac:aa:d9:
         f4:32:0b:1c:38:8d:a7:a2:aa:c9:1f:6f:73:27:2d:3d:0c:ae:
         00:27:1f:28:52:03:68:be:30:fb:57:86:f1:28:d9:c3:48:09:
         b0:8e:37:2f:20:5f:a5:89:04:df:c4:7b:1e:a9:f7:d0:44:b7:
         fe:bc:a5:65:2b:b7:e9:f3:76:7a:28:65:d8:b2:99:04:66:2e:
         b3:00:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org