Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xuw1cArs5gDEeiZM0Rf0H0N6_hQ.roa
File:                     Xuw1cArs5gDEeiZM0Rf0H0N6_hQ.roa (raw, json)
Hash identifier:          Ba3a2CsMuh61pYMkfuRgPc0Dyv5Q7K7GN8Dhea8LXvM=
Subject key identifier:   5E:EC:35:70:0A:EC:E6:00:C4:7A:26:4C:D1:17:F4:1F:43:7A:FE:14
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xuw1cArs5gDEeiZM0Rf0H0N6_hQ.roa
Signing time:             Thu 15 Sep 2022 02:53:48 +0000
ROA not before:           Thu 15 Sep 2022 02:53:48 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.232.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:48 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5EEC35700AECE600C47A264CD117F41F437AFE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:72:7a:6e:00:33:b7:93:02:66:34:e1:10:
                    49:72:df:7a:62:9b:ce:bc:be:0f:0a:db:24:26:b5:
                    a9:57:14:26:34:18:75:43:b6:c6:07:39:62:4b:92:
                    37:16:93:40:36:47:da:a2:a9:84:0e:60:00:bc:5a:
                    0e:0f:5e:e7:55:9e:75:c3:6a:f9:2e:65:28:af:26:
                    e6:04:a5:60:09:f7:e0:01:20:1f:b7:39:85:3f:76:
                    53:a3:c6:56:ea:01:24:7e:1f:1a:a9:78:01:0c:f1:
                    28:c4:fd:69:79:6c:ba:78:63:a7:cb:22:9c:1b:20:
                    71:37:1a:1b:3e:1d:62:27:f7:4d:e9:79:b9:d7:7f:
                    c1:09:77:4b:bc:e4:7f:13:f4:2e:ec:4c:ef:f9:f6:
                    a8:b8:3f:36:09:23:c6:4b:83:2b:6b:b4:b7:ee:5c:
                    7e:2b:19:de:5a:81:70:67:85:3c:2c:b3:fe:32:e0:
                    25:ff:f8:60:18:a4:39:c9:ba:7d:b3:2c:65:28:6b:
                    80:8a:28:84:9c:a2:94:71:79:71:b4:c5:89:6b:e4:
                    63:8c:a4:5a:5e:e2:22:51:e3:f5:81:48:3e:d3:69:
                    51:12:89:00:6f:0f:45:27:65:d8:6e:e9:3a:d4:e9:
                    be:ae:b8:fd:99:01:98:46:d8:ad:9a:0a:18:13:2e:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EC:35:70:0A:EC:E6:00:C4:7A:26:4C:D1:17:F4:1F:43:7A:FE:14
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xuw1cArs5gDEeiZM0Rf0H0N6_hQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:e3:f6:ed:a2:07:97:23:89:46:48:df:bc:c4:5f:5a:ab:81:
         60:0d:be:9e:da:e4:55:74:a1:86:03:f3:b9:57:93:94:53:5a:
         c7:cf:f3:1c:1a:5a:9c:30:7b:9f:0b:22:45:6b:b9:b7:21:9f:
         82:2e:56:ce:ae:d0:9b:d4:c9:af:2e:80:97:78:a3:a8:77:e6:
         d2:ef:2f:58:b9:4b:57:23:2e:b6:56:83:bc:74:10:2e:36:96:
         5b:e6:80:fb:dd:a6:2d:6d:d9:c8:82:2e:32:f8:b4:14:9e:74:
         29:25:76:11:3e:b6:0a:ba:97:a4:96:0c:86:ac:f6:21:0d:99:
         6a:02:af:83:f9:ea:16:bf:3c:ed:3e:54:52:d5:65:cb:aa:61:
         0c:36:c0:7b:f7:62:f1:76:36:b6:4b:f0:a9:bb:ae:f9:e3:ad:
         d4:bf:d6:a8:ff:78:a8:2a:66:1f:33:b6:24:9b:24:90:78:6b:
         fe:1d:86:6c:f5:c2:94:02:9f:7a:e3:e7:47:ab:e3:c6:23:87:
         e2:bc:8e:d2:7b:84:df:66:bb:56:18:fd:65:46:68:ed:d0:95:
         6c:be:ab:1c:3b:15:ca:34:af:68:3c:33:2c:30:93:f2:74:06:
         b3:9b:c2:4a:d2:35:3a:e4:a3:bd:f6:70:d2:09:cd:7f:d0:15:
         e8:66:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org