Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_RDwFNFJrOt47g9DVgDttHGtH84.roa
File:                     _RDwFNFJrOt47g9DVgDttHGtH84.roa (raw, json)
Hash identifier:          lwvz2PzMrFdgfCo+iR5QUV3XFW8/aKtN0F8utFHsbrQ=
Subject key identifier:   FD:10:F0:14:D1:49:AC:EB:78:EE:0F:43:56:00:ED:B4:71:AD:1F:CE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21E3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_RDwFNFJrOt47g9DVgDttHGtH84.roa
Signing time:             Fri 25 Nov 2022 04:40:31 +0000
ROA not before:           Fri 25 Nov 2022 04:40:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.193.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8675 (0x21e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FD10F014D149ACEB78EE0F435600EDB471AD1FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:61:ad:1a:f6:6d:99:9b:59:7f:13:85:8a:
                    c6:93:d4:75:d6:22:9d:e3:60:ff:0a:44:a9:38:78:
                    78:8c:f0:3f:2b:20:35:f7:db:b1:2f:9c:b5:ad:09:
                    6d:c2:39:ea:f0:6d:b8:c2:49:5a:2a:fa:9d:f2:ca:
                    34:ad:31:5a:5c:9d:03:d9:51:ba:a4:04:7a:08:2a:
                    69:33:0b:8e:42:f6:09:c9:e3:d4:70:9a:62:41:8a:
                    90:fc:39:e5:e1:20:22:53:52:a0:16:ac:9d:25:df:
                    21:10:89:59:80:8c:48:e1:26:08:41:84:3a:fd:f0:
                    6e:54:8c:ef:f8:a8:67:90:fe:49:0f:fe:15:50:6a:
                    61:d4:1a:4e:37:b5:12:85:05:15:e7:ff:6e:98:b4:
                    d7:85:6c:6a:b0:05:d8:af:9f:a4:d9:8f:cb:fc:3d:
                    0d:db:ff:10:da:1c:d5:4a:3b:9f:91:22:ab:43:e4:
                    13:f3:9c:00:f2:10:6c:b2:92:46:01:9e:ea:0a:12:
                    ee:d3:aa:51:ee:d6:df:69:1f:25:f1:45:4f:fe:6f:
                    9a:ae:26:f1:33:52:84:28:75:90:38:7a:cc:b3:6d:
                    77:36:d6:b8:5c:13:f9:22:b3:84:87:15:72:d3:91:
                    7a:b0:c8:eb:64:7b:c9:d4:d4:48:7b:34:20:59:ef:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:10:F0:14:D1:49:AC:EB:78:EE:0F:43:56:00:ED:B4:71:AD:1F:CE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_RDwFNFJrOt47g9DVgDttHGtH84.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:ff:88:2d:dc:48:2b:48:eb:59:23:56:a5:b5:21:53:48:
         00:0a:bd:0f:20:4b:a0:da:3a:e6:e0:9a:58:ac:89:e5:f9:73:
         33:5d:e4:3a:2d:6c:0a:5a:ea:40:62:1f:49:a3:af:aa:26:d6:
         0b:67:a8:d2:9e:44:bf:41:33:c5:d4:78:b7:16:76:12:45:6c:
         0b:5f:13:0b:e7:1f:2b:dd:08:9c:de:ee:3a:08:b5:17:1e:09:
         9b:60:73:e2:e3:7c:42:1d:63:61:4e:5e:55:30:61:5d:32:f7:
         2a:5b:e9:7f:2d:90:0b:3e:2d:cb:1a:a3:4f:a1:3b:59:b6:14:
         ee:2b:64:e2:2d:4c:94:da:5d:93:ab:1e:d8:0d:a1:2d:f5:46:
         7d:df:fb:11:99:64:8c:4b:af:7d:d2:cc:3f:0a:a8:c2:39:5b:
         51:d9:83:5a:de:1f:a1:c0:a1:b3:60:fe:df:a5:93:ee:42:f3:
         38:04:43:56:1d:fa:f7:cd:96:b1:fe:a3:19:7e:3c:81:f5:26:
         94:14:d2:55:da:43:4c:9b:80:35:d8:12:8e:8e:9f:ff:a3:ca:
         51:7d:81:7c:d2:55:66:eb:2b:d7:a0:55:5f:30:d4:58:f4:18:
         56:57:18:da:91:b1:83:72:08:97:dc:a8:88:b4:74:a7:a4:ae:
         46:d9:f7:87
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMzFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZEMTBGMDE0RDE0OUFD
RUI3OEVFMEY0MzU2MDBFREI0NzFBRDFGQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6UmGtGvZtmZtZfxOFisaT1HXWIp3jYP8KRKk4eHiM8D8rIDX3
27EvnLWtCW3COerwbbjCSVoq+p3yyjStMVpcnQPZUbqkBHoIKmkzC45C9gnJ49Rw
mmJBipD8OeXhICJTUqAWrJ0l3yEQiVmAjEjhJghBhDr98G5UjO/4qGeQ/kkP/hVQ
amHUGk43tRKFBRXn/26YtNeFbGqwBdivn6TZj8v8PQ3b/xDaHNVKO5+RIqtD5BPz
nADyEGyykkYBnuoKEu7TqlHu1t9pHyXxRU/+b5quJvEzUoQodZA4esyzbXc21rhc
E/kis4SHFXLTkXqwyOtke8nU1Eh7NCBZ7x25AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/RDwFNFJrOt47g9DVgDttHGtH84wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19SRHdGTkZKck90NDdnOURW
Z0R0dEhHdEg4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
wSAwDQYJKoZIhvcNAQELBQADggEBAHHA/4gt3EgrSOtZI1altSFTSAAKvQ8gS6Da
OubgmlisieX5czNd5DotbApa6kBiH0mjr6om1gtnqNKeRL9BM8XUeLcWdhJFbAtf
EwvnHyvdCJze7joItRceCZtgc+LjfEIdY2FOXlUwYV0y9ypb6X8tkAs+Lcsao0+h
O1m2FO4rZOItTJTaXZOrHtgNoS31Rn3f+xGZZIxLr33SzD8KqMI5W1HZg1reH6HA
obNg/t+lk+5C8zgEQ1Yd+vfNlrH+oxl+PIH1JpQU0lXaQ0ybgDXYEo6On/+jylF9
gXzSVWbrK9egVV8w1Fj0GFZXGNqRsYNyCJfcqIi0dKekrkbZ94c=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:56 2025 by rpki-client