Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W1cU0TkJvd26Cg__HG-HoFzDYHA.roa
File:                     W1cU0TkJvd26Cg__HG-HoFzDYHA.roa (raw, json)
Hash identifier:          6qsEPEkckn4XMi9B2gnY3zKHYVt9zD/SJ4Ffg2ccZj8=
Subject key identifier:   5B:57:14:D1:39:09:BD:DD:BA:0A:0F:FF:1C:6F:87:A0:5C:C3:60:70
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1DD5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W1cU0TkJvd26Cg__HG-HoFzDYHA.roa
Signing time:             Tue 07 Dec 2021 09:46:49 +0000
ROA not before:           Tue 07 Dec 2021 09:46:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        2407:4d00:2000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7637 (0x1dd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Dec  7 09:46:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5B5714D13909BDDDBA0A0FFF1C6F87A05CC36070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:06:71:b3:5c:8e:cb:a4:f0:4f:cb:ec:03:c4:
                    e7:53:ab:d0:67:32:16:ff:53:4f:bd:d6:7d:cb:76:
                    05:11:c7:e0:be:5d:e0:eb:a3:f0:1f:57:0f:33:30:
                    e0:dc:23:f1:eb:cd:76:ea:ce:3b:47:d6:e1:d2:41:
                    c3:3a:34:27:72:35:1f:34:97:0d:3d:2b:d7:c5:5c:
                    92:06:11:53:4e:cb:83:fb:0c:cb:0e:13:d9:ad:fd:
                    a9:03:b2:91:2c:07:57:7a:c2:42:7e:bf:37:0f:b7:
                    66:2f:0e:f8:89:8c:81:9f:b3:64:80:16:de:3c:89:
                    b3:76:9f:8e:ae:6d:65:3d:61:85:3d:96:6a:49:73:
                    ca:a9:60:98:a4:16:fb:4d:fe:39:4a:40:68:e2:ff:
                    da:88:dc:64:02:e2:40:b5:d2:00:f9:c1:d1:8a:5d:
                    b5:9a:fe:f7:2c:0f:d0:6e:ee:2a:74:de:76:ca:0c:
                    52:3b:50:f6:db:4a:e9:4b:87:c5:82:5a:6c:63:bf:
                    9c:72:55:37:1e:bc:e7:a6:b4:7d:9a:15:f2:e4:59:
                    1a:c1:fc:c4:e1:8c:26:1b:80:da:ba:a3:c6:ad:8a:
                    06:a5:0d:44:c2:ce:75:e2:a8:64:1d:20:a0:07:41:
                    c6:da:5a:ea:0c:9d:8f:e3:d8:f6:2e:4b:58:88:11:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:57:14:D1:39:09:BD:DD:BA:0A:0F:FF:1C:6F:87:A0:5C:C3:60:70
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W1cU0TkJvd26Cg__HG-HoFzDYHA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4d00:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:ec:18:d4:e1:d7:a0:1a:f2:3e:a4:55:8b:fc:e8:7e:ba:
         a4:2d:7c:47:12:aa:95:5d:7f:c6:4f:21:1e:b9:0e:03:bd:6c:
         46:61:a3:54:eb:dc:92:09:82:bd:9e:06:6a:61:91:e8:e7:5d:
         4f:ff:f4:0c:3e:cf:76:4a:cf:23:39:e2:6b:cc:4f:4e:35:33:
         d8:e8:f9:fe:24:49:36:70:bd:84:d0:84:3d:c5:9e:e2:c4:ea:
         53:c9:ec:71:62:eb:0d:25:86:c7:41:4c:8e:01:73:31:f8:f8:
         e8:96:71:37:f3:a2:2b:f8:a6:21:4a:bf:80:ef:c9:70:a4:47:
         c5:5e:0b:15:ef:15:b5:62:57:ca:75:9e:bd:a6:ba:ef:a1:16:
         e4:79:30:d3:b2:3a:a0:f6:fa:d1:f7:09:9a:38:39:39:05:14:
         14:aa:47:52:6f:a0:1d:fe:60:d8:da:73:de:96:b1:81:9c:64:
         e9:d6:b0:64:b9:d2:31:6f:23:40:1f:74:0e:5b:37:6f:8a:65:
         97:4d:14:e0:8f:46:12:42:92:c2:99:b1:b7:2d:48:9b:a4:23:
         32:0f:cc:eb:b8:cd:0f:49:b2:a1:af:fb:44:0a:ff:35:25:ee:
         e3:00:df:1b:c5:fe:55:14:6d:3d:77:07:7a:aa:a5:89:7f:e0:
         21:f1:1c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:21 2023 by rpki-client on console-ams.rpki-client.org