Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Orm8zksP9SQNOGYG9tCY6jV7YM.roa
File:                     _Orm8zksP9SQNOGYG9tCY6jV7YM.roa (raw, json)
Hash identifier:          kyrQ72P4o2sL/x4YUp9m9EMisx7L5pjfyvjwGWYH9IU=
Subject key identifier:   FC:EA:E6:F3:39:2C:3F:D4:90:34:E1:98:1B:DB:42:63:A8:D5:ED:83
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1F98
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Orm8zksP9SQNOGYG9tCY6jV7YM.roa
Signing time:             Thu 08 Sep 2022 10:10:53 +0000
ROA not before:           Thu 08 Sep 2022 10:10:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.14.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8088 (0x1f98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  8 10:10:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FCEAE6F3392C3FD49034E1981BDB4263A8D5ED83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:b0:65:20:3a:73:8c:87:9c:d0:15:10:f4:
                    25:a2:0f:7f:10:70:25:7f:89:32:27:1e:54:c4:2e:
                    9d:24:3e:eb:fb:2e:52:46:74:2b:c5:2e:08:f4:ca:
                    93:20:f0:1c:91:a5:b4:4c:f5:51:05:ef:84:94:da:
                    c2:ae:c4:b0:54:e2:95:88:83:d6:93:7f:4e:11:98:
                    ed:d4:80:da:39:82:f8:2f:47:01:c4:26:1d:db:6c:
                    6c:3b:8c:6d:20:cf:10:c8:5e:5b:f4:bf:e7:da:86:
                    43:34:cc:ae:65:29:31:70:98:e7:41:eb:92:08:22:
                    fe:32:bb:51:1e:2c:ff:eb:19:47:9b:10:0b:6e:d5:
                    ef:4c:e3:5e:79:c4:65:6e:97:66:10:78:91:3b:e2:
                    05:9c:92:46:99:98:cf:22:ec:d8:d8:c6:0a:9a:f7:
                    66:ce:b8:47:07:b6:10:fa:73:df:7b:dd:ef:57:e8:
                    7e:76:4f:b2:7c:ea:98:69:6b:00:1c:3e:53:dc:cd:
                    81:6a:3b:4b:b0:71:24:6d:d4:86:1c:94:35:bd:50:
                    82:ae:7c:c0:d7:d1:1b:95:36:07:58:94:54:08:82:
                    79:78:37:e5:43:43:ba:51:7d:65:93:df:17:87:67:
                    be:4b:46:83:35:d2:d8:c9:0b:9f:c2:38:21:ac:f9:
                    e9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EA:E6:F3:39:2C:3F:D4:90:34:E1:98:1B:DB:42:63:A8:D5:ED:83
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Orm8zksP9SQNOGYG9tCY6jV7YM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:11:f2:4a:f6:8e:54:16:82:c7:b9:9e:59:70:f7:c7:25:
         98:db:9c:51:5c:91:b3:03:3c:53:f7:79:ca:f3:7b:6b:99:48:
         c1:f9:4c:6a:69:89:70:9e:fc:d2:d4:d8:05:68:79:1b:58:94:
         6e:88:be:c2:03:c1:e4:2f:7e:07:cb:7d:2e:85:d2:17:c5:dd:
         f3:76:66:1d:a7:97:2a:81:6b:73:63:f6:89:15:5e:8c:3f:cd:
         b8:13:e2:ef:97:45:28:d0:58:f1:dd:43:03:d1:91:29:45:7e:
         b3:45:ef:a0:fd:5c:15:9b:78:39:a0:a1:a8:10:0c:cf:c1:17:
         0e:b3:f0:34:41:c1:81:dd:3f:50:36:c3:e0:b6:02:8d:d1:a8:
         da:ae:63:ca:b7:ba:d0:4d:ed:72:d5:d1:30:41:24:52:a8:6f:
         61:22:52:d5:70:6d:88:a7:85:61:0d:3a:c6:d4:91:2d:58:ba:
         57:4d:ac:56:e1:94:fe:d0:56:9d:d9:8e:1f:1a:d6:d9:15:4a:
         7d:5f:32:9f:7f:11:a3:22:93:36:e3:7a:5f:3b:f2:9d:27:93:
         b0:12:d7:5f:97:af:6a:fb:62:20:98:41:d0:aa:d0:9a:53:1c:
         f2:14:09:89:12:a4:a0:4c:30:59:5b:dd:f1:90:53:b0:70:0d:
         3b:70:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org