Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W_kAvRJhy-edgPh1HStgIWsuidQ.roa
File:                     W_kAvRJhy-edgPh1HStgIWsuidQ.roa (raw, json)
Hash identifier:          kHM26GkePqbfOMjD2yVHo3gQfk9J4H29h8wGK8bzOqM=
Subject key identifier:   5B:F9:00:BD:12:61:CB:E7:9D:80:F8:75:1D:2B:60:21:6B:2E:89:D4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D21
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W_kAvRJhy-edgPh1HStgIWsuidQ.roa
Signing time:             Tue 29 Sep 2020 09:54:13 +0000
ROA not before:           Tue 29 Sep 2020 09:54:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3361 (0xd21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:13 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5BF900BD1261CBE79D80F8751D2B60216B2E89D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:94:f1:f1:e9:fd:ce:a5:58:13:4f:da:8f:
                    5f:43:1b:fd:f6:f4:52:88:0c:b3:76:2a:dc:bc:7d:
                    8d:00:af:8b:fc:8c:18:00:36:5e:d5:8b:7f:95:69:
                    95:e5:d0:71:19:2e:b8:ff:23:d3:88:00:ef:e5:60:
                    22:05:65:a6:cc:a8:18:dd:c3:f5:5d:7c:f0:69:70:
                    18:58:99:99:41:61:53:ed:cd:bd:e3:65:71:8b:02:
                    22:c5:bd:eb:16:49:d8:1d:ad:59:a6:10:28:7a:71:
                    91:6c:7d:89:e8:ce:d6:6f:7b:33:ab:76:e3:4b:67:
                    4b:19:da:49:b1:b5:4d:d9:a3:1e:9a:87:d8:8f:f9:
                    64:7b:e2:47:11:27:3f:65:59:c3:a3:8c:a2:f0:64:
                    80:9b:25:42:54:8c:16:5d:c7:02:68:cd:e0:dc:0b:
                    5c:05:85:90:d0:ec:a4:7e:03:bf:e6:e9:19:a1:8f:
                    87:b8:b5:d9:6a:37:35:93:39:9d:ff:0c:4e:3e:2b:
                    4d:24:aa:32:4f:a5:10:86:34:a8:b5:5e:bd:ad:e5:
                    dc:80:c7:c2:9c:3d:79:04:04:a9:42:01:50:42:50:
                    22:c3:16:7d:5c:cd:e9:45:05:1a:03:3f:22:6b:75:
                    a4:d1:46:fa:0b:54:89:34:05:ce:06:d6:2a:10:e4:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F9:00:BD:12:61:CB:E7:9D:80:F8:75:1D:2B:60:21:6B:2E:89:D4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W_kAvRJhy-edgPh1HStgIWsuidQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:30:ef:c3:e9:e4:73:50:2f:51:90:86:3c:31:c3:1c:8f:57:
         c7:d9:0a:86:bd:0b:39:fd:d6:1c:c7:ff:01:47:dd:60:01:26:
         a7:e5:5c:2d:de:17:97:3c:5a:66:32:43:4c:9a:36:52:49:4a:
         13:c5:ba:d0:52:34:7c:d7:e7:d2:5d:56:d7:89:71:75:92:b2:
         e4:15:e0:78:61:59:39:71:ba:60:6c:aa:6c:eb:bb:01:27:b0:
         b1:da:54:1a:25:97:48:a7:73:e1:77:32:67:14:7d:4d:6d:c3:
         8f:5a:f5:a0:19:36:0a:f8:95:7d:52:75:28:e5:b1:7f:9e:8d:
         6a:29:c0:bd:d3:49:76:f8:4d:3e:6a:b0:fb:b0:2b:66:a7:d3:
         80:cc:8b:00:21:fe:9b:42:db:b7:bd:f8:fd:15:af:17:b9:ac:
         d8:f9:10:c2:ff:fd:23:db:d0:e2:14:4d:16:12:eb:51:eb:df:
         92:f4:df:14:f5:0b:fe:54:f1:c2:de:03:82:0b:b3:9b:e8:fc:
         93:b0:59:e6:84:6f:93:91:f2:04:28:03:e6:45:e5:7b:66:f7:
         c1:8c:0c:c4:3b:6a:06:7b:c3:2b:2c:21:08:b8:af:44:c4:39:
         a7:98:97:e5:bb:ef:94:b7:14:6c:d6:ba:64:c1:5f:09:65:bd:
         bd:a7:5f:8d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0MTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVCRjkwMEJEMTI2MUNC
RTc5RDgwRjg3NTFEMkI2MDIxNkIyRTg5RDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHSJTx8en9zqVYE0/aj19DG/329FKIDLN2Kty8fY0Ar4v8jBgA
Nl7Vi3+VaZXl0HEZLrj/I9OIAO/lYCIFZabMqBjdw/VdfPBpcBhYmZlBYVPtzb3j
ZXGLAiLFvesWSdgdrVmmECh6cZFsfYnoztZvezOrduNLZ0sZ2kmxtU3Zox6ah9iP
+WR74kcRJz9lWcOjjKLwZICbJUJUjBZdxwJozeDcC1wFhZDQ7KR+A7/m6Rmhj4e4
tdlqNzWTOZ3/DE4+K00kqjJPpRCGNKi1Xr2t5dyAx8KcPXkEBKlCAVBCUCLDFn1c
zelFBRoDPyJrdaTRRvoLVIk0Bc4G1ioQ5P65AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUW/kAvRJhy+edgPh1HStgIWsuidQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dfa0F2UkpoeS1lZGdQaDFI
U3RnSVdzdWlkUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wywwDQYJKoZIhvcNAQELBQADggEBAIQw78Pp5HNQL1GQhjwxwxyPV8fZCoa9Czn9
1hzH/wFH3WABJqflXC3eF5c8WmYyQ0yaNlJJShPFutBSNHzX59JdVteJcXWSsuQV
4HhhWTlxumBsqmzruwEnsLHaVBoll0inc+F3MmcUfU1tw49a9aAZNgr4lX1SdSjl
sX+ejWopwL3TSXb4TT5qsPuwK2an04DMiwAh/ptC27e9+P0Vrxe5rNj5EML//SPb
0OIUTRYS61Hr35L03xT1C/5U8cLeA4ILs5vo/JOwWeaEb5OR8gQoA+ZF5Xtm98GM
DMQ7agZ7wyssIQi4r0TEOaeYl+W775S3FGzWumTBXwllvb2nX40=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org