Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wa282ES8ohiht0ftnPNmEH6k5Lk.roa
File:                     Wa282ES8ohiht0ftnPNmEH6k5Lk.roa (raw, json)
Hash identifier:          J3gkBAaZF7/ifnAirrT6FPf/qJCQs1pnszhmMtjeJmk=
Subject key identifier:   59:AD:BC:D8:44:BC:A2:18:A1:B7:47:ED:9C:F3:66:10:7E:A4:E4:B9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wa282ES8ohiht0ftnPNmEH6k5Lk.roa
Signing time:             Thu 15 Sep 2022 02:53:23 +0000
ROA not before:           Thu 15 Sep 2022 02:53:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.176.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:23 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=59ADBCD844BCA218A1B747ED9CF366107EA4E4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:24:3e:6f:fc:2e:df:ac:20:39:c9:61:43:9b:
                    89:37:c2:31:8c:e0:b7:f6:31:98:17:e3:fc:19:bf:
                    b0:e6:bc:c7:e4:82:d2:e7:8b:d8:ba:ab:ad:4c:b9:
                    05:55:bf:87:ac:5d:71:19:7a:78:13:86:63:1d:19:
                    80:ea:94:92:8d:7f:18:21:4d:d1:89:89:20:10:c2:
                    d8:f2:26:7f:e8:e5:fb:e8:3c:ff:23:6b:e1:a1:6f:
                    ea:3c:48:37:13:c0:1e:5e:e2:7d:86:1b:ef:13:cd:
                    55:a4:b0:37:aa:ed:e0:32:5e:55:4c:d2:8c:0b:15:
                    b3:0d:f7:1b:2e:88:54:1c:bf:59:b1:07:8e:bf:89:
                    a6:d6:18:66:b4:3f:25:ba:ed:7a:8c:bb:a1:c2:07:
                    2d:1b:e6:c0:26:9b:fa:97:0c:b4:ed:69:a1:69:5f:
                    8b:90:6b:d6:1f:70:ff:3c:e7:b5:e6:21:f3:a7:2a:
                    01:76:f8:d1:4a:12:a7:b7:96:f0:92:56:d6:35:24:
                    5d:e4:af:3b:ad:91:d3:45:4c:78:39:3a:0b:23:83:
                    06:85:9e:9d:cc:56:15:fd:5d:c8:4b:c9:c6:22:46:
                    8a:93:58:d4:0d:88:55:3e:47:dc:c5:01:da:cd:2b:
                    0e:4d:44:e3:55:84:50:27:d9:f8:46:4e:14:2b:f3:
                    27:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AD:BC:D8:44:BC:A2:18:A1:B7:47:ED:9C:F3:66:10:7E:A4:E4:B9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wa282ES8ohiht0ftnPNmEH6k5Lk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:59:59:db:ea:98:14:71:03:04:8c:a6:49:ba:29:fc:b5:57:
         aa:34:ca:71:cc:33:14:e8:56:53:4f:f1:3b:ec:e2:a9:17:aa:
         e4:d8:fd:44:0e:af:42:25:e2:04:9b:9c:20:2c:69:42:93:a1:
         e5:82:11:ad:10:5d:70:3e:96:32:c1:d3:1e:5e:fd:c6:13:40:
         44:5c:71:9a:4f:e2:75:78:e2:09:82:b4:fb:64:8c:79:a7:c5:
         4e:c9:00:ef:8a:9c:1d:ab:58:67:98:98:3a:69:c8:6e:dc:39:
         ae:3d:a4:03:f7:33:0d:95:fd:31:f2:55:4c:f4:36:e7:44:8e:
         93:c9:bd:cb:78:dd:43:4e:c8:50:ec:77:b4:11:18:41:b4:53:
         8e:a5:4f:f1:03:7c:69:3c:df:4e:10:dd:6f:b7:45:fe:55:27:
         04:e4:e0:e6:d9:2e:bb:e0:e8:cc:2f:be:f4:62:6f:05:86:77:
         80:4e:e9:de:05:b9:83:1e:55:4c:a6:06:a0:ed:ca:f7:9a:ff:
         b6:17:a9:27:8d:53:96:73:34:0f:31:51:80:8e:b4:07:ba:03:
         52:04:32:de:da:6e:41:eb:83:0b:d5:ff:f8:6d:77:d6:3b:af:
         2e:a9:20:15:9e:2e:6d:ea:54:27:f1:47:03:53:a6:51:93:92:
         37:7e:32:7a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU5QURCQ0Q4NDRCQ0Ey
MThBMUI3NDdFRDlDRjM2NjEwN0VBNEU0QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjJD5v/C7frCA5yWFDm4k3wjGM4Lf2MZgX4/wZv7DmvMfkgtLn
i9i6q61MuQVVv4esXXEZengThmMdGYDqlJKNfxghTdGJiSAQwtjyJn/o5fvoPP8j
a+Ghb+o8SDcTwB5e4n2GG+8TzVWksDeq7eAyXlVM0owLFbMN9xsuiFQcv1mxB46/
iabWGGa0PyW67XqMu6HCBy0b5sAmm/qXDLTtaaFpX4uQa9YfcP8857XmIfOnKgF2
+NFKEqe3lvCSVtY1JF3krzutkdNFTHg5OgsjgwaFnp3MVhX9XchLycYiRoqTWNQN
iFU+R9zFAdrNKw5NRONVhFAn2fhGThQr8ydhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWa282ES8ohiht0ftnPNmEH6k5LkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dhMjgyRVM4b2hpaHQwZnRu
UE5tRUg2azVMay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wrAwDQYJKoZIhvcNAQELBQADggEBAGdZWdvqmBRxAwSMpkm6Kfy1V6o0ynHMMxTo
VlNP8Tvs4qkXquTY/UQOr0Il4gSbnCAsaUKToeWCEa0QXXA+ljLB0x5e/cYTQERc
cZpP4nV44gmCtPtkjHmnxU7JAO+KnB2rWGeYmDppyG7cOa49pAP3Mw2V/THyVUz0
NudEjpPJvct43UNOyFDsd7QRGEG0U46lT/EDfGk8304Q3W+3Rf5VJwTk4ObZLrvg
6MwvvvRibwWGd4BO6d4FuYMeVUymBqDtyvea/7YXqSeNU5ZzNA8xUYCOtAe6A1IE
Mt7abkHrgwvV//htd9Y7ry6pIBWeLm3qVCfxRwNTplGTkjd+Mno=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org