Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c_ZatGVkSgDolb9fPEcP9QpaiIg.roa
File:                     c_ZatGVkSgDolb9fPEcP9QpaiIg.roa (raw, json)
Hash identifier:          MhSrv32eNzabaakaUGnYVNFjnYnnGlekWJqBdYLVReg=
Subject key identifier:   73:F6:5A:B4:65:64:4A:00:E8:95:BF:5F:3C:47:0F:F5:0A:5A:88:88
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2073
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c_ZatGVkSgDolb9fPEcP9QpaiIg.roa
Signing time:             Fri 25 Nov 2022 04:38:44 +0000
ROA not before:           Fri 25 Nov 2022 04:38:44 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.194.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8307 (0x2073)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:44 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=73F65AB465644A00E895BF5F3C470FF50A5A8888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:92:6e:b8:8f:60:22:8b:36:52:ba:4a:25:
                    0c:90:fa:a2:16:5c:f1:a5:b2:21:d8:05:83:35:6b:
                    94:34:69:0e:54:42:11:1e:82:b9:19:99:37:d7:a7:
                    14:5b:ef:3f:d9:2b:ee:2e:95:21:64:74:6c:ef:ea:
                    a1:da:e8:09:05:16:3f:84:7a:6c:49:4d:68:69:5e:
                    b2:e2:0f:66:8c:b3:11:f7:9b:75:1e:bf:e1:ee:b2:
                    fb:fa:cf:93:82:5d:65:7c:dc:f0:ef:c4:5f:bb:b4:
                    f8:10:dd:ab:29:ab:df:4a:5f:eb:9d:ce:fb:d1:36:
                    34:4e:b1:e9:84:7d:cd:a6:e9:d3:f9:53:ac:c1:54:
                    51:9f:fe:a1:b9:4f:87:83:fa:9f:98:87:bb:26:c3:
                    e1:b9:63:3c:d4:ab:fa:76:a5:1b:03:85:8a:75:46:
                    01:08:cb:a9:86:04:a0:c1:74:84:90:01:76:a0:32:
                    34:19:99:ee:88:09:3f:e8:72:0a:38:93:f3:e1:56:
                    14:66:ec:09:89:74:36:71:27:d3:05:1c:ef:94:a1:
                    66:db:ae:5f:e7:68:d7:42:20:5c:ee:5f:a8:42:2d:
                    c7:4c:2f:c1:d0:ec:95:cf:99:16:61:e9:4d:60:0e:
                    cf:7c:83:8b:9f:43:fa:90:c1:f2:34:c5:79:8b:e9:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F6:5A:B4:65:64:4A:00:E8:95:BF:5F:3C:47:0F:F5:0A:5A:88:88
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c_ZatGVkSgDolb9fPEcP9QpaiIg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:24:41:c5:ef:d7:ab:51:09:f3:f2:07:59:0e:18:35:e9:6d:
         e1:81:13:7a:b9:de:06:63:1f:a5:f4:47:7e:7d:d2:9d:5d:f1:
         b3:5c:90:da:f4:9d:cf:aa:a1:c8:b7:a3:41:7e:6b:f2:92:79:
         44:77:07:c2:3c:12:07:fc:63:87:bd:15:98:56:7c:27:ba:b8:
         59:ee:f3:6e:e1:a5:2b:ed:a9:75:fc:61:e3:e0:f0:51:00:bd:
         8d:b0:78:15:ff:22:14:0b:fd:e4:fd:6c:41:e2:25:69:43:f4:
         b5:2c:0a:10:96:5a:93:92:e5:63:eb:e6:62:04:31:7c:07:9d:
         7a:aa:69:ea:5d:98:65:3f:12:48:b0:d5:4a:e5:99:e7:e3:38:
         94:53:22:50:7d:90:0b:a5:93:98:14:1a:77:23:af:72:ca:91:
         e7:a0:84:f6:a7:af:76:09:72:ae:46:e3:8a:fd:53:13:37:18:
         82:9c:10:16:ca:04:8a:7a:75:9e:17:be:57:23:8a:2b:74:39:
         c7:c9:23:a4:27:92:a6:2c:bc:01:e3:77:73:fe:25:2e:c0:13:
         01:a2:fb:37:ed:1a:3a:58:b6:86:1e:ba:97:69:75:4d:ef:1a:
         a3:1a:f2:46:30:4f:d1:b9:27:8e:e6:33:7f:f0:c3:29:eb:d1:
         c3:dd:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org