Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eTWDhCR6uHUTVhaGgmMFDKAgMwY.roa
File:                     eTWDhCR6uHUTVhaGgmMFDKAgMwY.roa (raw, json)
Hash identifier:          0MSRsBUp61yc0St+PoN/iaFr0749IO8b7jpDyRsPOxw=
Subject key identifier:   79:35:83:84:24:7A:B8:75:13:56:16:86:82:63:05:0C:A0:20:33:06
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eTWDhCR6uHUTVhaGgmMFDKAgMwY.roa
Signing time:             Thu 15 Sep 2022 02:44:39 +0000
ROA not before:           Thu 15 Sep 2022 02:44:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:44:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=79358384247AB875135616868263050CA0203306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:ff:32:ea:b9:6c:3a:16:f3:5b:f3:04:b6:
                    78:73:79:05:30:ab:ed:bb:22:63:42:8a:07:17:b0:
                    aa:25:13:b1:15:bb:ef:81:96:36:5f:54:41:ee:32:
                    bc:dc:f7:07:87:83:90:86:13:1a:b7:0f:63:4d:7d:
                    90:ad:96:e6:06:f2:0d:c4:0e:f1:60:b5:83:e4:95:
                    4d:6f:63:c9:2a:22:cc:e5:cb:b1:67:69:b8:5f:78:
                    71:65:af:c0:91:07:7f:09:ac:13:ac:32:5e:0a:84:
                    e2:4c:df:e6:cc:f9:ed:35:42:58:70:28:c9:c0:11:
                    68:85:ad:cd:43:0c:74:d5:80:65:11:24:1e:8b:6a:
                    d2:14:1d:8d:3f:ce:c3:9a:df:99:7a:c3:69:1f:74:
                    1b:c1:4c:6c:67:3e:17:35:f0:7c:4d:94:f8:d0:bf:
                    ca:76:33:19:2e:5c:34:6f:e8:27:4d:ad:27:58:87:
                    7d:e2:64:c1:c5:d6:3b:09:c8:ab:8b:66:dc:b8:cf:
                    7e:50:dd:45:2a:9c:90:4b:76:12:b3:a1:b3:a2:c3:
                    53:27:a2:99:e7:a0:d5:4b:a4:39:c1:8b:98:67:1b:
                    56:1b:5b:4f:4d:c5:c2:ce:f1:35:8f:c3:0e:3a:b1:
                    bd:c7:eb:47:27:64:cc:0d:ee:68:d6:c6:c2:79:20:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:35:83:84:24:7A:B8:75:13:56:16:86:82:63:05:0C:A0:20:33:06
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eTWDhCR6uHUTVhaGgmMFDKAgMwY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:95:20:24:ef:ab:0b:c1:55:ea:ae:2d:42:7e:d8:d8:bf:c0:
         dd:98:e9:17:ab:ec:34:85:11:1e:07:8a:a7:bf:bf:80:17:e9:
         fd:98:fa:aa:9f:b5:3d:c2:76:99:dc:c9:2f:da:57:d9:c7:3e:
         7b:f2:94:59:1d:3d:3e:31:16:42:26:8d:79:f0:03:23:33:4f:
         49:44:67:9a:44:36:1a:d2:b4:3d:58:73:d0:49:28:dd:6b:e0:
         14:71:28:4d:fc:1b:9d:23:3d:68:49:f4:2c:c3:3e:0b:e3:c4:
         9f:41:ba:1f:d6:5d:56:d3:a5:fd:70:64:b8:d1:18:cf:dc:0f:
         e4:f5:22:ea:eb:88:96:06:97:a3:ec:81:5c:3f:e1:2e:f7:6b:
         d2:44:1c:7e:9e:cf:b5:99:37:97:85:58:23:09:e3:d3:6f:1c:
         6e:8c:f3:9c:0f:db:15:d8:fb:97:a7:5b:19:a6:07:34:1b:57:
         48:bd:e9:74:03:e6:f9:15:2c:6d:6f:b7:80:b1:42:bb:a3:c1:
         0f:9d:9c:e1:53:9d:4b:8f:d7:54:1b:3a:ce:58:98:70:70:f3:
         e8:e5:5c:78:47:39:6e:f4:80:d3:40:71:a3:81:bc:fb:ef:89:
         9d:e3:f5:61:5f:5d:af:a5:01:04:50:34:c3:7d:ca:0c:dd:06:
         6c:d8:8f:bb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ0MzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc5MzU4Mzg0MjQ3QUI4
NzUxMzU2MTY4NjgyNjMwNTBDQTAyMDMzMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBTP8y6rlsOhbzW/MEtnhzeQUwq+27ImNCigcXsKolE7EVu++B
ljZfVEHuMrzc9weHg5CGExq3D2NNfZCtluYG8g3EDvFgtYPklU1vY8kqIszly7Fn
abhfeHFlr8CRB38JrBOsMl4KhOJM3+bM+e01QlhwKMnAEWiFrc1DDHTVgGURJB6L
atIUHY0/zsOa35l6w2kfdBvBTGxnPhc18HxNlPjQv8p2MxkuXDRv6CdNrSdYh33i
ZMHF1jsJyKuLZty4z35Q3UUqnJBLdhKzobOiw1MnopnnoNVLpDnBi5hnG1YbW09N
xcLO8TWPww46sb3H60cnZMwN7mjWxsJ5IJH7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeTWDhCR6uHUTVhaGgmMFDKAgMwYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VUV0RoQ1I2dUhVVFZoYUdn
bU1GREtBZ013WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wwQwDQYJKoZIhvcNAQELBQADggEBACeVICTvqwvBVequLUJ+2Ni/wN2Y6Rer7DSF
ER4Hiqe/v4AX6f2Y+qqftT3CdpncyS/aV9nHPnvylFkdPT4xFkImjXnwAyMzT0lE
Z5pENhrStD1Yc9BJKN1r4BRxKE38G50jPWhJ9CzDPgvjxJ9Buh/WXVbTpf1wZLjR
GM/cD+T1IurriJYGl6PsgVw/4S73a9JEHH6ez7WZN5eFWCMJ49NvHG6M85wP2xXY
+5enWxmmBzQbV0i96XQD5vkVLG1vt4CxQrujwQ+dnOFTnUuP11QbOs5YmHBw8+jl
XHhHOW70gNNAcaOBvPvviZ3j9WFfXa+lAQRQNMN9ygzdBmzYj7s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org