Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VdjTJWNfFIScRG79VDwZu8tjARM.roa
File:                     VdjTJWNfFIScRG79VDwZu8tjARM.roa (raw, json)
Hash identifier:          nEtQ0W10NVY7kkVfw7io+HEFqdvCl43/UwMxN52sehY=
Subject key identifier:   55:D8:D3:25:63:5F:14:84:9C:44:6E:FD:54:3C:19:BB:CB:63:01:13
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VdjTJWNfFIScRG79VDwZu8tjARM.roa
Signing time:             Thu 15 Sep 2022 02:53:10 +0000
ROA not before:           Thu 15 Sep 2022 02:53:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=55D8D325635F14849C446EFD543C19BBCB630113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:46:5e:15:f5:f1:6b:71:c0:65:e6:6f:27:
                    7d:b2:03:e1:af:be:21:ca:fb:14:b0:32:c6:18:fa:
                    a5:a0:f8:4f:81:c2:0d:8d:c9:a0:ec:f5:32:58:69:
                    f5:f1:fa:95:93:33:30:c5:c7:81:20:63:57:0c:c4:
                    fd:14:25:99:a1:12:cd:b8:2a:bd:4d:a2:44:ea:82:
                    e0:a0:38:2f:98:3f:ad:d2:34:4d:49:eb:7e:85:d9:
                    00:cf:42:b9:fe:c6:08:01:1a:03:7d:0e:93:97:f1:
                    5a:8c:04:20:8b:bf:36:e8:67:9c:7d:89:f3:ad:24:
                    45:0e:5e:74:47:10:87:ab:bf:81:aa:9f:f2:01:94:
                    fe:35:c4:ca:ea:30:9e:96:36:45:c0:d4:48:03:45:
                    a2:99:42:75:e3:85:48:83:d8:a3:e3:a5:26:b7:db:
                    cf:0c:9b:8e:3f:a9:9a:dc:c5:b0:dc:93:17:3d:94:
                    25:e0:82:4b:0f:68:37:64:26:09:2d:fa:43:b6:99:
                    2a:e1:1c:d5:96:4e:09:30:ce:e3:a5:e7:93:5b:c7:
                    65:e4:0f:aa:a2:7c:b8:1a:97:96:95:ea:e3:72:7a:
                    2e:47:45:e9:51:57:43:10:1c:ad:42:f5:65:67:a3:
                    75:6b:78:28:fd:d5:a1:42:e5:50:a5:83:b7:d2:67:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D8:D3:25:63:5F:14:84:9C:44:6E:FD:54:3C:19:BB:CB:63:01:13
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VdjTJWNfFIScRG79VDwZu8tjARM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:d0:bf:0c:ef:b9:30:b8:44:41:3d:45:f6:5f:7e:90:50:2b:
         6c:84:c9:89:fb:c1:8c:67:d2:51:ad:7f:17:58:b4:30:7b:aa:
         f0:9f:65:ee:03:20:b3:64:70:67:45:6d:ab:fb:02:96:3d:92:
         f7:96:9b:3f:ac:ce:61:c7:e6:40:7f:f9:19:25:20:4f:bd:99:
         e3:3b:c6:c3:87:02:35:08:52:49:db:9d:78:5e:26:c5:d6:dd:
         da:27:63:8b:1b:a6:9f:46:33:8b:1e:9b:9a:b1:e8:99:82:4c:
         f8:78:fe:6a:97:47:6e:20:dd:db:2b:92:58:55:9a:04:9e:a4:
         bb:2f:84:55:e0:b5:59:f5:a9:84:d2:13:15:a6:06:2f:07:43:
         1d:e1:f7:53:8b:8b:a9:08:b4:d3:24:4a:59:ed:85:7c:7f:72:
         64:50:b8:21:8e:50:60:ec:4f:c1:fc:c2:91:ae:5c:ba:d5:46:
         bd:d0:bb:26:e3:e2:a5:9b:75:03:43:96:8b:1e:cb:11:77:04:
         19:56:32:a8:8c:26:99:fc:a7:85:f8:5c:70:5e:9b:b9:2c:76:
         1a:2a:36:78:87:11:32:8f:15:18:b5:27:34:ef:f9:f9:13:41:
         d5:bc:82:23:4b:7d:c6:4f:e1:1d:d4:3d:0f:89:19:be:24:40:
         9b:65:8a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org