Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UbpuCwtyIRAo2V1MciLxHqTWOro.roa
File:                     UbpuCwtyIRAo2V1MciLxHqTWOro.roa (raw, json)
Hash identifier:          b8Lry4SDOvd6WNfu+Jlweo4Yb0WhmDB42GMuT+/nr8o=
Subject key identifier:   51:BA:6E:0B:0B:72:21:10:28:D9:5D:4C:72:22:F1:1E:A4:D6:3A:BA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1ED3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UbpuCwtyIRAo2V1MciLxHqTWOro.roa
Signing time:             Thu 26 May 2022 03:30:09 +0000
ROA not before:           Thu 26 May 2022 03:30:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7891 (0x1ed3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: May 26 03:30:09 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=51BA6E0B0B72211028D95D4C7222F11EA4D63ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:16:97:4c:b8:dd:d1:30:b3:6c:79:75:ab:
                    29:40:d0:ef:66:60:cb:6d:36:2d:c1:55:59:c7:c3:
                    f8:60:80:a7:0f:98:b5:0d:4f:43:ef:d5:35:1d:2f:
                    16:61:e6:d3:37:af:78:78:cb:43:39:c1:49:77:3a:
                    8f:e1:1d:8e:4f:08:60:b2:12:77:79:44:f8:59:0f:
                    86:d9:01:75:1f:d5:92:f7:05:96:44:24:33:29:66:
                    9f:bf:3e:54:34:9b:e9:97:21:b5:c8:4c:35:ac:c1:
                    8c:b6:eb:51:b4:39:17:8e:a7:70:df:8d:75:36:48:
                    40:f2:cd:e1:f6:bd:58:10:93:db:ac:96:b2:76:db:
                    f3:7f:14:ca:dc:1e:1e:7c:6c:e2:4e:a8:0d:c7:6a:
                    28:d3:40:92:a1:a0:41:ed:e9:c2:7d:a3:0e:6b:6c:
                    26:1d:1b:b2:1d:33:4d:b1:07:82:7a:26:ca:27:eb:
                    bb:71:02:dd:b0:f9:b9:8c:87:e9:44:c9:b5:95:b8:
                    13:45:65:20:ef:71:06:24:43:80:92:f2:1b:31:ea:
                    70:37:93:97:6d:96:be:d4:07:3e:68:e7:e5:a0:71:
                    c6:04:27:95:08:9f:3c:a4:bc:31:36:0b:fd:ba:db:
                    55:10:77:4f:fd:7b:8c:91:26:37:ef:24:af:15:68:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BA:6E:0B:0B:72:21:10:28:D9:5D:4C:72:22:F1:1E:A4:D6:3A:BA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UbpuCwtyIRAo2V1MciLxHqTWOro.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:74:e3:f1:4a:f1:3a:5a:b2:ac:db:a3:fa:df:6a:1c:13:
         5e:8b:4b:19:57:0a:b2:be:08:6f:b1:eb:72:4c:5a:c7:e8:8c:
         f1:2f:35:15:aa:9a:bd:2b:38:21:85:a5:5c:dc:06:01:9a:72:
         b5:42:33:e7:00:15:1a:9b:e1:f8:bd:56:b6:f6:f2:1b:9f:f1:
         f3:08:fb:ab:e5:16:05:8e:fa:4a:ac:1d:ef:fd:7c:d6:97:5c:
         0b:0c:c0:0e:94:fd:a3:d4:c9:a0:4f:a1:a5:c4:5f:8f:ac:9b:
         69:e3:c1:cb:81:dc:fa:16:9d:96:83:06:3c:57:61:18:ff:8d:
         77:57:57:a2:39:c7:4d:6f:0e:39:4c:b4:f2:43:4b:08:c0:a0:
         70:64:61:5e:c6:00:f4:a6:c3:ba:ea:5f:1b:66:1d:11:65:37:
         83:2b:bd:00:b6:80:c9:78:03:15:57:a6:0c:c0:20:ec:f0:81:
         e5:38:6e:28:8c:a8:bd:71:29:ec:ad:49:9d:3f:8c:7f:01:4a:
         63:5c:58:58:41:2a:4b:ff:8d:06:29:0c:fb:53:5b:19:57:bc:
         21:db:1e:93:50:b6:fc:df:74:b1:8d:dc:ad:4a:5a:5d:3d:cb:
         ea:0a:2d:b6:ac:30:b1:60:36:22:10:f8:22:db:b4:0f:91:7e:
         7c:6d:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org