Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bMUtGTNT-3D2FKItA_zyYsPWY58.roa
File:                     bMUtGTNT-3D2FKItA_zyYsPWY58.roa (raw, json)
Hash identifier:          NpFFrrQR6+V+GhrAEnK/Zogy7YgZVOe80auQPZrld/A=
Subject key identifier:   6C:C5:2D:19:33:53:FB:70:F6:14:A2:2D:03:FC:F2:62:C3:D6:63:9F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bMUtGTNT-3D2FKItA_zyYsPWY58.roa
Signing time:             Thu 15 Sep 2022 02:54:11 +0000
ROA not before:           Thu 15 Sep 2022 02:54:11 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.184.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:54:11 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6CC52D193353FB70F614A22D03FCF262C3D6639F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:fb:e4:25:d0:ec:1a:ad:28:e1:29:7a:36:
                    b0:15:de:20:21:51:b8:a3:f6:b5:91:db:dc:0b:f5:
                    f0:16:63:bf:03:27:e3:8f:9f:f3:8b:63:2c:e0:4c:
                    49:60:dd:bf:3a:3e:9d:cb:ab:3a:00:63:5f:de:3b:
                    3a:92:51:20:f0:6f:ae:08:7a:a5:28:9b:3a:a8:7e:
                    be:d2:5e:88:9e:eb:6b:21:f3:79:b3:b0:f1:5b:84:
                    e7:97:c0:49:53:60:65:3c:14:ed:55:8c:61:7a:60:
                    c0:88:ec:55:52:d3:30:36:b5:01:ce:db:11:96:61:
                    cd:b2:fa:02:ec:c4:fc:ac:28:e3:db:3c:34:1a:f8:
                    e8:c8:c2:1c:e3:54:48:3c:3f:7a:04:61:7b:7a:0f:
                    71:91:54:f4:22:a2:f5:19:8d:f7:4e:4a:5a:9f:b2:
                    f9:6c:8b:37:bb:76:f9:13:4a:bc:50:c6:1c:64:4c:
                    9b:15:b2:1a:0f:08:d2:54:a2:65:1b:57:fb:79:8a:
                    45:bd:f8:a8:1f:1e:fc:7e:d2:bb:3b:38:ef:23:1d:
                    60:1a:df:49:1f:d8:8b:3e:50:36:db:96:33:31:e9:
                    e0:bc:87:16:49:2b:8b:36:36:de:a1:aa:0e:ce:81:
                    bd:22:06:da:de:78:3c:d2:fe:21:4f:1b:aa:49:cf:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:2D:19:33:53:FB:70:F6:14:A2:2D:03:FC:F2:62:C3:D6:63:9F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bMUtGTNT-3D2FKItA_zyYsPWY58.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:ca:94:7e:1c:c2:da:77:4c:0d:82:04:4c:fb:1b:b5:42:5c:
         43:fb:fb:fe:7b:a5:14:47:6d:8e:f4:d5:0c:5e:68:28:fa:d5:
         f5:ca:08:88:31:40:7f:15:e9:73:f9:37:7f:ac:fe:74:52:9d:
         31:b8:77:5e:c0:8d:78:80:67:58:86:8e:64:5b:b2:5d:0d:7f:
         cf:d7:a3:b2:dd:0e:41:3b:a5:51:8f:de:aa:44:70:3c:7c:9a:
         e0:ea:a9:c9:64:95:d9:91:b6:a8:43:73:98:a7:a2:52:dd:96:
         44:00:f4:e1:e6:2e:52:15:69:3e:b3:37:0d:58:dc:7d:10:d4:
         92:e0:3a:2a:ca:84:3f:8c:4e:c0:d6:6c:03:67:ae:b7:65:19:
         ea:de:8a:81:d9:0b:82:76:98:c7:9f:20:de:ae:b7:ed:04:f6:
         6c:04:41:10:6a:e9:26:57:e4:89:55:f8:bc:fa:61:4b:61:1e:
         9d:4f:43:11:ef:e3:db:fc:7a:89:cd:29:75:72:55:21:3e:43:
         e3:a8:98:69:2d:9a:41:62:1e:af:39:7d:11:09:2f:57:ee:18:
         e2:27:d6:78:c7:c6:d5:ef:be:18:e7:3e:f2:d2:bf:7b:86:f4:
         a7:d3:64:ec:2c:c4:65:b1:53:1e:f0:f0:51:c1:4c:aa:c9:d1:
         48:8f:7e:83
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjU0MTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZDQzUyRDE5MzM1M0ZC
NzBGNjE0QTIyRDAzRkNGMjYyQzNENjYzOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBYvvkJdDsGq0o4Sl6NrAV3iAhUbij9rWR29wL9fAWY78DJ+OP
n/OLYyzgTElg3b86Pp3LqzoAY1/eOzqSUSDwb64IeqUomzqofr7SXoie62sh83mz
sPFbhOeXwElTYGU8FO1VjGF6YMCI7FVS0zA2tQHO2xGWYc2y+gLsxPysKOPbPDQa
+OjIwhzjVEg8P3oEYXt6D3GRVPQiovUZjfdOSlqfsvlsize7dvkTSrxQxhxkTJsV
shoPCNJUomUbV/t5ikW9+KgfHvx+0rs7OO8jHWAa30kf2Is+UDbbljMx6eC8hxZJ
K4s2Nt6hqg7Ogb0iBtreeDzS/iFPG6pJz/Q9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbMUtGTNT+3D2FKItA/zyYsPWY58wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JNVXRHVE5ULTNEMkZLSXRB
X3p5WXNQV1k1OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wrgwDQYJKoZIhvcNAQELBQADggEBACPKlH4cwtp3TA2CBEz7G7VCXEP7+/57pRRH
bY701QxeaCj61fXKCIgxQH8V6XP5N3+s/nRSnTG4d17AjXiAZ1iGjmRbsl0Nf8/X
o7LdDkE7pVGP3qpEcDx8muDqqclkldmRtqhDc5inolLdlkQA9OHmLlIVaT6zNw1Y
3H0Q1JLgOirKhD+MTsDWbANnrrdlGereioHZC4J2mMefIN6ut+0E9mwEQRBq6SZX
5IlV+Lz6YUthHp1PQxHv49v8eonNKXVyVSE+Q+OomGktmkFiHq85fREJL1fuGOIn
1njHxtXvvhjnPvLSv3uG9KfTZOwsxGWxUx7w8FHBTKrJ0UiPfoM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:18 2025 by rpki-client