Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YqmJKmxR0elpU_SpItbhg9zvm54.roa
File:                     YqmJKmxR0elpU_SpItbhg9zvm54.roa (raw, json)
Hash identifier:          QnvYSKq2hhlU4uU8s/vF/UL1N7w+IyzgGFa+z3wV3Ss=
Subject key identifier:   62:A9:89:2A:6C:51:D1:E9:69:53:F4:A9:22:D6:E1:83:DC:EF:9B:9E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YqmJKmxR0elpU_SpItbhg9zvm54.roa
Signing time:             Thu 15 Sep 2022 02:45:08 +0000
ROA not before:           Thu 15 Sep 2022 02:45:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=62A9892A6C51D1E96953F4A922D6E183DCEF9B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:8c:21:b0:58:44:55:0a:ba:6d:fd:cf:5d:
                    eb:8a:dc:66:34:93:fb:93:54:9c:0d:9a:2e:6f:1a:
                    b7:83:1f:90:de:5f:12:14:91:89:c7:01:c3:84:84:
                    7c:92:60:d8:e3:eb:8d:58:ee:76:44:45:41:f3:ce:
                    65:c7:3a:57:fa:a6:d4:3a:f0:4f:10:2e:0c:23:3a:
                    2e:c6:11:d3:30:21:10:68:f0:6f:14:2e:ff:8e:5b:
                    64:40:7c:5f:76:df:91:c7:09:f9:3b:35:ff:0a:a2:
                    8b:84:1c:d0:1b:ea:b9:a1:42:68:3f:9f:de:87:44:
                    3c:50:df:60:8b:ef:6e:58:6b:46:cd:2c:d9:a1:0f:
                    52:65:5f:28:c5:c0:ba:a1:7f:79:b7:82:d5:26:d8:
                    a0:2d:5b:89:c1:9c:2a:c3:46:31:bd:04:c7:8a:03:
                    c6:7c:3e:20:9b:b6:69:b9:45:29:bc:43:8d:57:2b:
                    08:bd:e3:92:0f:40:c7:fd:7f:cb:d8:86:95:20:27:
                    70:c9:ed:a6:1c:75:e1:69:dc:7f:72:8d:65:9d:33:
                    06:8d:a1:58:0d:b3:ee:28:4d:c6:81:e9:de:78:d7:
                    b5:06:24:5b:37:6f:f3:57:7b:05:63:79:25:49:da:
                    df:2e:55:6b:54:02:05:64:fb:09:0c:98:fa:b2:96:
                    b8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A9:89:2A:6C:51:D1:E9:69:53:F4:A9:22:D6:E1:83:DC:EF:9B:9E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YqmJKmxR0elpU_SpItbhg9zvm54.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:df:ed:24:d6:03:af:fb:bd:8b:9c:65:bf:5a:97:11:25:
         ab:56:9e:f7:72:77:7e:c5:b1:32:0a:4c:6d:44:21:89:77:e5:
         77:0b:c9:73:8c:b4:21:ec:7c:f3:ea:c0:19:0e:f3:03:53:75:
         a4:04:d7:c9:56:55:9e:e8:ee:6d:9b:4a:ab:14:24:3a:04:46:
         dd:37:83:fe:3c:ee:1f:68:3c:36:25:72:af:e6:35:10:44:21:
         e3:c9:b2:f8:83:6f:b7:86:4b:02:ce:bc:2d:3c:46:f5:89:6d:
         79:ce:45:29:8a:34:52:c7:ed:b4:de:21:c3:80:68:ff:c1:60:
         57:55:7e:aa:83:0a:9a:87:b3:81:a4:2e:03:5b:0a:cb:3e:98:
         58:36:46:86:ae:4f:a1:d1:5f:bd:04:70:39:dd:12:bf:ce:55:
         80:d5:05:0d:fa:1e:59:d7:36:57:9a:b0:6f:45:af:68:f7:c5:
         4d:65:18:32:1d:a9:17:a4:b2:57:c7:c1:b1:3d:e7:30:7b:66:
         ea:80:df:98:d8:95:14:0e:a6:62:a0:cb:14:68:5c:6d:f9:10:
         5a:72:b8:4d:33:a0:2a:b2:6f:60:84:97:1a:34:1f:65:85:bc:
         43:27:53:ec:f9:84:cc:08:c3:3f:f4:e3:95:02:4d:01:69:96:
         d4:e4:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org