Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/abqb_3ybOu6sxQLmOqb6H33qIMw.roa
File:                     abqb_3ybOu6sxQLmOqb6H33qIMw.roa (raw, json)
Hash identifier:          IEN6fJxvTyS7/lXr4UTP2cQMESjRsN4iDXWocyA5azk=
Subject key identifier:   69:BA:9B:FF:7C:9B:3A:EE:AC:C5:02:E6:3A:A6:FA:1F:7D:EA:20:CC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D26
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/abqb_3ybOu6sxQLmOqb6H33qIMw.roa
Signing time:             Wed 29 Sep 2021 02:48:40 +0000
ROA not before:           Wed 29 Sep 2021 02:48:40 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        123.192.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7462 (0x1d26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:40 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=69BA9BFF7C9B3AEEACC502E63AA6FA1F7DEA20CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:62:1b:e8:65:a4:92:3e:7a:bf:2d:47:ea:
                    ad:7f:f7:41:02:76:7c:fd:40:36:23:b9:e1:d9:5e:
                    2e:c7:d0:49:81:9d:0d:83:68:a2:9c:ac:5d:45:d2:
                    de:6d:d6:c1:84:43:64:c8:cd:30:10:1b:a3:30:ad:
                    ef:99:78:bd:13:50:13:8a:b9:7a:3c:a0:3d:cb:24:
                    71:04:dd:f0:5b:63:22:e0:6c:f8:2d:34:c5:a5:e4:
                    09:f0:be:7f:51:a1:e6:df:25:c5:f7:13:3a:32:b0:
                    74:4a:1f:37:7c:83:ce:53:a7:bd:36:ac:85:b3:3f:
                    d9:8b:17:ef:13:4a:06:cd:98:c8:b9:03:5a:ee:31:
                    d5:c3:ce:40:06:13:d8:54:69:6a:9e:b4:4d:4a:d0:
                    6d:bc:d3:29:e0:02:2c:57:27:49:42:f5:2a:6e:bc:
                    06:d6:e6:58:a0:0c:07:b3:f2:75:67:0f:8f:fe:0b:
                    6e:13:d3:74:b5:49:f5:a6:96:f7:20:8e:bf:94:1a:
                    65:f6:ab:1b:89:02:56:a6:a0:e7:00:a4:e6:80:a3:
                    de:7d:4a:fc:31:62:8b:f7:d2:a9:7c:86:c5:3b:87:
                    ab:da:bf:ed:c4:3e:87:13:00:12:18:21:d8:8d:3f:
                    b2:e8:b6:b7:fe:2b:63:2d:68:9f:a6:96:56:23:10:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BA:9B:FF:7C:9B:3A:EE:AC:C5:02:E6:3A:A6:FA:1F:7D:EA:20:CC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/abqb_3ybOu6sxQLmOqb6H33qIMw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1c:4a:88:8f:2c:42:1c:dd:6f:99:ca:ad:07:7d:d5:f9:57:ca:
         ca:de:e3:29:55:b5:03:61:2c:8b:0a:aa:e2:64:cf:81:34:59:
         24:f5:88:bc:27:d4:64:c9:55:6b:2b:7e:df:22:e8:db:56:d1:
         b0:c8:34:6f:25:fe:aa:a0:b0:a6:d4:41:76:7b:54:9f:4b:03:
         76:81:ed:f0:18:cf:0c:85:7e:57:96:88:0b:c4:aa:90:2c:3b:
         2e:da:17:72:93:3f:bc:49:69:09:d7:00:c5:98:42:fa:e0:12:
         54:b4:f1:ec:d2:6a:01:17:5a:bd:ea:be:f7:81:db:1e:f5:9f:
         9a:5a:b3:31:a3:af:45:f2:09:73:77:59:ef:1f:fd:59:6a:0c:
         73:69:42:02:1b:a3:ff:5c:03:11:0a:26:87:ac:b6:01:8b:3c:
         29:af:64:39:c9:cb:2e:2b:25:b5:d4:40:6f:51:6d:b6:2d:b7:
         fa:55:a3:26:64:42:2f:dc:e8:81:6b:11:d0:e9:ed:cc:a8:ec:
         b4:ac:80:af:43:e8:0c:c8:94:fe:bd:57:6d:cd:22:16:00:7b:
         1a:99:7a:c3:67:10:30:6e:d1:59:66:f0:3a:36:4c:ef:9d:c0:
         18:f5:e1:7e:aa:7d:6e:53:74:50:c8:36:75:3c:c4:78:7b:a4:
         a0:38:7d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:35 2023 by rpki-client on console-fra.rpki-client.org