Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aUs3SKps1bDbnuYFO3OpRlTi7-Y.roa
File:                     aUs3SKps1bDbnuYFO3OpRlTi7-Y.roa (raw, json)
Hash identifier:          nydv392vWqIdbGm9Q9++aqsB6hVIXeiSwAqOL2H34Gc=
Subject key identifier:   69:4B:37:48:AA:6C:D5:B0:DB:9E:E6:05:3B:73:A9:46:54:E2:EF:E6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aUs3SKps1bDbnuYFO3OpRlTi7-Y.roa
Signing time:             Thu 15 Sep 2022 02:45:54 +0000
ROA not before:           Thu 15 Sep 2022 02:45:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.112.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=694B3748AA6CD5B0DB9EE6053B73A94654E2EFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:86:a0:e2:ff:5d:c7:15:e3:7d:7c:c6:25:
                    bb:c8:55:ba:7f:45:b5:40:ec:84:83:a1:6b:9b:44:
                    80:fe:76:33:69:8c:e1:9b:b1:dc:9d:33:ec:50:00:
                    b4:50:79:b3:46:a5:80:0f:f0:76:06:ef:bf:a1:5e:
                    0a:53:12:d6:e2:03:c4:bc:83:f5:db:61:65:93:cb:
                    cb:d3:7d:60:3a:11:fe:f5:62:26:db:77:73:4c:3c:
                    7d:73:0f:c5:a8:e7:cb:9a:83:91:8f:61:6d:fd:12:
                    d9:d0:75:2e:3d:f5:3f:bb:7c:0c:78:1b:33:7c:88:
                    30:b9:c3:88:ba:10:71:7f:a4:4c:04:5c:04:32:95:
                    5e:a1:29:23:27:28:ce:3a:ab:1a:a9:a2:74:ab:f1:
                    28:2e:f4:eb:3b:7b:a3:c5:43:75:57:00:e5:75:09:
                    78:d8:af:47:11:7e:f0:c5:7a:00:fe:1c:fa:b1:44:
                    86:5b:a8:5f:11:85:60:d1:3f:1a:72:78:62:d9:49:
                    14:3c:49:b3:b4:63:5c:4e:72:d3:87:c8:05:f4:2a:
                    05:2f:a5:02:4c:1f:f8:b4:90:e3:50:09:ac:a3:68:
                    53:01:ff:0d:d9:af:2e:fe:e6:81:15:bc:c5:b0:e0:
                    d7:db:9b:78:91:9c:a4:6c:da:af:bc:8d:32:b5:ae:
                    98:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4B:37:48:AA:6C:D5:B0:DB:9E:E6:05:3B:73:A9:46:54:E2:EF:E6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aUs3SKps1bDbnuYFO3OpRlTi7-Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:34:d3:0f:13:3f:91:0e:7f:30:07:5c:93:a8:38:2e:d1:27:
         5c:ec:e9:3b:23:f1:9e:7e:a0:3c:67:c5:0f:24:c3:bf:f7:85:
         1b:d6:b1:28:4a:a6:b6:e9:87:47:51:41:b6:d6:d9:50:46:1d:
         6f:6c:63:f3:63:14:bf:b2:f1:95:08:08:7c:6b:af:e8:76:46:
         f4:70:62:1d:2d:04:33:bf:54:3b:76:6d:25:6e:d8:5e:7d:72:
         b7:b1:95:4a:0a:2b:fa:a5:ff:17:7d:07:55:a0:d3:a1:93:ba:
         91:ba:2a:4e:b6:b0:2d:53:d6:58:91:67:c9:b3:59:88:4f:d7:
         8e:8f:fc:08:2a:43:39:cf:b0:98:34:dc:bb:6f:2b:b9:5e:bb:
         e1:86:89:b6:74:0b:25:93:54:ac:bd:5a:bf:04:33:e1:0b:1e:
         87:d8:06:f2:3f:79:1c:d6:ef:34:53:22:57:b2:35:aa:5d:bc:
         a7:f9:66:d7:34:d8:80:81:8d:71:b0:39:63:3c:c5:41:2e:d1:
         37:b6:f8:b5:52:27:bb:5e:1c:da:24:b1:c5:29:8f:de:eb:b3:
         bd:fe:93:c1:63:95:d4:a7:62:a8:0d:65:bc:b7:df:b0:27:10:
         b9:7d:ff:dc:a3:c2:57:d0:4f:42:cd:6a:ce:37:53:f2:ee:99:
         79:78:58:76
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1NTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDY5NEIzNzQ4QUE2Q0Q1
QjBEQjlFRTYwNTNCNzNBOTQ2NTRFMkVGRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3ooag4v9dxxXjfXzGJbvIVbp/RbVA7ISDoWubRID+djNpjOGb
sdydM+xQALRQebNGpYAP8HYG77+hXgpTEtbiA8S8g/XbYWWTy8vTfWA6Ef71Yibb
d3NMPH1zD8Wo58uag5GPYW39EtnQdS499T+7fAx4GzN8iDC5w4i6EHF/pEwEXAQy
lV6hKSMnKM46qxqponSr8Sgu9Os7e6PFQ3VXAOV1CXjYr0cRfvDFegD+HPqxRIZb
qF8RhWDRPxpyeGLZSRQ8SbO0Y1xOctOHyAX0KgUvpQJMH/i0kONQCayjaFMB/w3Z
ry7+5oEVvMWw4Nfbm3iRnKRs2q+8jTK1rpi9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUaUs3SKps1bDbnuYFO3OpRlTi7+YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FVczNTS3BzMWJEYm51WUZP
M09wUmxUaTctWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w3AwDQYJKoZIhvcNAQELBQADggEBAIM00w8TP5EOfzAHXJOoOC7RJ1zs6Tsj8Z5+
oDxnxQ8kw7/3hRvWsShKprbph0dRQbbW2VBGHW9sY/NjFL+y8ZUICHxrr+h2RvRw
Yh0tBDO/VDt2bSVu2F59crexlUoKK/ql/xd9B1Wg06GTupG6Kk62sC1T1liRZ8mz
WYhP146P/AgqQznPsJg03LtvK7leu+GGibZ0CyWTVKy9Wr8EM+ELHofYBvI/eRzW
7zRTIleyNapdvKf5Ztc02ICBjXGwOWM8xUEu0Te2+LVSJ7teHNokscUpj97rs73+
k8FjldSnYqgNZby337AnELl9/9yjwlfQT0LNas43U/LumXl4WHY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:34 2025 by rpki-client