Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZERF02V8mt8KGr7yral6hSOGmrs.roa
File:                     ZERF02V8mt8KGr7yral6hSOGmrs.roa (raw, json)
Hash identifier:          7dbO+NXyGcMyiNQKClTg6wE3NRLSOt7Z3Bin+zrDAds=
Subject key identifier:   64:44:45:D3:65:7C:9A:DF:0A:1A:BE:F2:AD:A9:7A:85:23:86:9A:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZERF02V8mt8KGr7yral6hSOGmrs.roa
Signing time:             Thu 15 Sep 2022 02:53:48 +0000
ROA not before:           Thu 15 Sep 2022 02:53:48 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        118.232.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:48 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=644445D3657C9ADF0A1ABEF2ADA97A8523869ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:53:6e:8c:9c:75:da:98:ec:a0:ab:dd:75:
                    57:0d:b6:f9:fd:aa:67:a6:3a:23:6b:a2:ab:9e:84:
                    d4:00:6a:9d:04:de:26:26:63:ed:62:5f:0c:2f:9f:
                    ee:c7:46:e3:fd:a7:73:ed:a0:8b:66:44:77:db:27:
                    99:b0:df:ea:64:68:c7:a0:7f:4c:0b:01:ec:fe:3d:
                    72:1c:3f:33:b9:f4:77:36:18:12:c8:e1:29:ef:b6:
                    7d:ef:0f:5c:d0:ee:36:3d:b8:49:4d:5f:8b:d9:9d:
                    41:6d:af:18:40:0f:fd:d5:38:80:c8:ce:14:31:e8:
                    e5:f4:b6:4d:cd:a1:9c:d4:f4:e0:1e:be:da:5b:6e:
                    4a:13:07:9c:a7:a3:8f:5c:80:57:78:38:0b:c0:7f:
                    ed:2d:97:a6:8e:d3:1c:11:95:ce:f5:73:84:4f:1b:
                    75:f2:37:ca:8e:7d:ae:93:6e:7f:1d:69:b8:16:8d:
                    f3:d8:06:ac:c8:2f:c7:1d:22:0b:ce:6d:a1:07:94:
                    8c:8f:db:4e:13:9c:19:e5:af:3b:12:dd:eb:e2:f3:
                    4b:d7:23:ac:b0:27:b3:93:ec:7e:0a:da:61:a1:48:
                    c4:0b:7e:57:1a:fc:f9:f1:54:8b:ed:ab:c8:b1:52:
                    75:f3:81:06:21:bc:23:a2:45:7b:7b:9c:4b:83:6c:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:44:45:D3:65:7C:9A:DF:0A:1A:BE:F2:AD:A9:7A:85:23:86:9A:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZERF02V8mt8KGr7yral6hSOGmrs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:91:ab:75:ee:65:01:f5:26:ab:51:be:c8:70:6b:8b:78:64:
         7b:d0:72:c3:5c:5b:d0:75:12:20:1c:39:6e:00:10:58:a8:32:
         7f:c7:2f:69:d4:c0:65:a3:71:f8:62:55:e0:fc:9b:d1:6a:d0:
         0a:20:d2:e7:fa:24:f4:81:41:79:e3:1d:a3:bf:ef:c4:27:5d:
         ac:68:0a:b5:04:49:fe:bd:66:a7:18:a1:37:cd:bb:b6:99:ba:
         52:8e:c0:47:93:4b:8f:fd:69:47:04:d9:5a:fc:64:c7:a8:fc:
         49:8a:04:05:1f:91:1d:8d:c3:0b:75:95:3c:a8:1d:3e:52:de:
         e1:a3:cc:7d:5d:29:bf:74:e6:69:f8:04:1a:a0:31:1c:81:74:
         38:bb:5a:91:82:e3:ee:60:05:0a:ba:7d:1f:c1:82:20:4e:e8:
         55:be:e4:ee:f4:2e:a7:3f:9c:45:73:e1:c1:42:23:25:11:0a:
         4b:70:39:57:1b:f8:9b:3b:30:18:ab:e9:6a:7e:f8:ef:97:62:
         36:df:41:f3:d8:86:6c:4b:fb:1d:79:0b:93:49:6a:54:6c:ae:
         15:c6:67:4a:bc:3c:18:f0:57:c0:d4:f9:74:cb:95:40:c7:77:
         89:96:a3:75:23:4f:1f:4a:e5:5d:ec:87:de:bd:d3:3d:7c:a4:
         d9:84:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org