Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bo1peOJ8-MYPlskZHn6bBa_MVWU.roa
File:                     bo1peOJ8-MYPlskZHn6bBa_MVWU.roa (raw, json)
Hash identifier:          84bGZZQRvGoDz77U8WkoD/oPWjsqq85tJiq6fEvXryY=
Subject key identifier:   6E:8D:69:78:E2:7C:F8:C6:0F:96:C9:19:1E:7E:9B:05:AF:CC:55:65
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1829
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bo1peOJ8-MYPlskZHn6bBa_MVWU.roa
Signing time:             Sun 07 Feb 2021 12:26:49 +0000
ROA not before:           Sun 07 Feb 2021 12:26:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6185 (0x1829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:26:49 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6E8D6978E27CF8C60F96C9191E7E9B05AFCC5565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:ce:9e:d6:6d:c9:b1:86:9a:d3:df:26:79:
                    63:6e:61:6a:06:32:fe:e8:58:9d:27:0c:5b:fa:a4:
                    e5:91:36:61:54:00:67:1c:f1:7a:96:53:ae:7d:6a:
                    25:15:44:35:c5:c0:f0:b3:7c:57:ac:42:57:56:66:
                    7d:94:18:d1:e7:8d:07:b7:2c:34:50:df:5e:86:fb:
                    7b:83:d0:7e:95:d0:da:94:81:d2:6b:bd:44:18:60:
                    5e:6e:f8:06:09:6e:fa:b9:c2:25:5e:d4:e9:70:61:
                    4f:3e:51:4b:d6:a4:58:2a:f5:c1:be:7b:41:57:af:
                    84:79:4f:82:87:ac:f1:aa:32:de:d2:27:82:55:59:
                    a6:0c:08:c4:5d:7c:37:3d:03:41:95:d9:98:06:e2:
                    af:5e:44:41:8f:89:8c:10:4d:43:ee:f7:11:4d:44:
                    c6:9a:da:5a:22:39:7a:8e:fc:92:8c:24:7d:31:00:
                    9d:f9:d9:73:31:a2:d4:7f:43:e4:25:c4:3b:0f:3b:
                    5f:04:91:a1:08:52:a7:f3:2f:e4:2f:5b:06:e3:fb:
                    35:bf:89:2f:3c:1d:ff:e7:ae:9b:b3:17:6e:28:70:
                    4c:6c:61:fe:a2:98:67:e9:ad:11:cb:49:e2:45:06:
                    0b:b2:e0:34:63:d7:d4:b5:2b:fa:cc:cd:0d:7f:9d:
                    7e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:69:78:E2:7C:F8:C6:0F:96:C9:19:1E:7E:9B:05:AF:CC:55:65
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bo1peOJ8-MYPlskZHn6bBa_MVWU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:b8:39:69:2e:fa:d8:37:c1:0f:c6:42:3f:ef:2c:60:fd:d9:
         3c:d6:80:19:d5:81:ad:47:3d:65:db:86:52:9a:08:65:7e:da:
         c1:74:ab:f0:71:0d:c5:6e:b3:8f:8b:7f:50:b4:8c:bb:c3:a2:
         c4:ba:f7:3b:44:e2:53:65:c6:37:48:87:e0:26:dc:53:11:6f:
         db:30:7e:17:c4:7a:78:52:6c:8b:d1:67:58:53:4c:55:62:0e:
         42:cd:92:f8:a5:cf:59:53:12:10:40:2c:fd:12:e5:6c:8e:b5:
         97:c4:e5:fe:02:1f:06:72:cd:39:1d:ec:58:64:34:53:80:93:
         6d:cb:b3:cf:54:c8:c6:c8:ad:08:f1:ad:17:c4:a2:ac:76:09:
         95:8b:20:be:90:d2:fb:e9:c1:5d:4f:76:14:be:70:4e:2f:17:
         dd:13:2b:1a:de:c2:82:69:82:3d:d7:ac:0e:18:c8:71:30:62:
         5d:50:1b:97:b5:15:77:3e:de:c8:d1:d2:e9:f5:09:77:92:56:
         87:75:ce:27:74:0e:1a:b6:3a:47:d8:d6:9d:60:5e:a8:8e:ec:
         16:6e:e8:30:aa:e7:ea:40:39:10:d0:c8:79:e5:3f:b8:23:bc:
         3e:a1:4f:01:90:2c:3e:8d:a8:32:c1:db:0b:a8:38:69:ab:3c:
         c2:5b:8f:ec
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGCkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjI2NDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZFOEQ2OTc4RTI3Q0Y4
QzYwRjk2QzkxOTFFN0U5QjA1QUZDQzU1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM7M6e1m3JsYaa098meWNuYWoGMv7oWJ0nDFv6pOWRNmFUAGcc
8XqWU659aiUVRDXFwPCzfFesQldWZn2UGNHnjQe3LDRQ316G+3uD0H6V0NqUgdJr
vUQYYF5u+AYJbvq5wiVe1OlwYU8+UUvWpFgq9cG+e0FXr4R5T4KHrPGqMt7SJ4JV
WaYMCMRdfDc9A0GV2ZgG4q9eREGPiYwQTUPu9xFNRMaa2loiOXqO/JKMJH0xAJ35
2XMxotR/Q+QlxDsPO18EkaEIUqfzL+QvWwbj+zW/iS88Hf/nrpuzF24ocExsYf6i
mGfprRHLSeJFBguy4DRj19S1K/rMzQ1/nX7XAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbo1peOJ8+MYPlskZHn6bBa/MVWUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JvMXBlT0o4LU1ZUGxza1pI
bjZiQmFfTVZXVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6KAwDQYJKoZIhvcNAQELBQADggEBAEu4OWku+tg3wQ/GQj/vLGD92TzWgBnVga1H
PWXbhlKaCGV+2sF0q/BxDcVus4+Lf1C0jLvDosS69ztE4lNlxjdIh+Am3FMRb9sw
fhfEenhSbIvRZ1hTTFViDkLNkvilz1lTEhBALP0S5WyOtZfE5f4CHwZyzTkd7Fhk
NFOAk23Ls89UyMbIrQjxrRfEoqx2CZWLIL6Q0vvpwV1PdhS+cE4vF90TKxrewoJp
gj3XrA4YyHEwYl1QG5e1FXc+3sjR0un1CXeSVod1zid0Dhq2OkfY1p1gXqiO7BZu
6DCq5+pAORDQyHnlP7gjvD6hTwGQLD6NqDLB2wuoOGmrPMJbj+w=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:23 2023 by rpki-client on console-ams.rpki-client.org