Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBO4ZHqfD-2IfbN6OGNK15U5iWU.roa
File:                     fBO4ZHqfD-2IfbN6OGNK15U5iWU.roa (raw, json)
Hash identifier:          qjTfTXIO5dw4axrAeM3bqSEy35RpCmU/YTXnkktxKxk=
Subject key identifier:   7C:13:B8:64:7A:9F:0F:ED:88:7D:B3:7A:38:63:4A:D7:95:39:89:65
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       18BB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBO4ZHqfD-2IfbN6OGNK15U5iWU.roa
Signing time:             Sun 07 Feb 2021 12:53:09 +0000
ROA not before:           Sun 07 Feb 2021 12:53:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        123.192.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6331 (0x18bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:53:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7C13B8647A9F0FED887DB37A38634AD795398965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:0a:ad:bb:c4:64:f0:c8:1e:19:c6:0b:af:
                    5a:7c:da:bb:83:b7:44:85:5c:76:c8:43:da:3b:f6:
                    93:0c:b9:90:da:3b:7a:a5:28:51:13:19:53:85:40:
                    34:02:5d:0a:da:ba:90:e4:05:21:c5:00:bc:ed:8a:
                    8b:d1:ac:c4:81:a6:19:54:dd:36:99:b7:43:83:f5:
                    a4:2c:42:64:b4:a2:28:01:f5:a5:36:85:a3:61:44:
                    c1:ad:ed:2b:f5:a4:7b:7d:82:06:e9:ea:05:90:6f:
                    f6:5f:81:db:79:a1:a3:08:b1:bd:8b:01:c5:e0:c3:
                    65:eb:2b:05:ed:90:a6:20:fb:88:d5:59:b6:07:2f:
                    bd:44:dc:70:ca:0c:1f:38:e5:a0:40:d6:94:dc:99:
                    dc:c1:b7:92:ad:2c:16:74:39:06:fc:12:7f:9d:71:
                    c8:c9:13:df:f3:a2:46:2a:95:50:d9:96:51:05:ee:
                    aa:30:d2:11:b7:ce:0c:71:ce:b3:51:70:7d:94:12:
                    eb:f9:be:15:66:2d:a2:d8:05:05:66:d5:92:90:e8:
                    1f:d5:1a:01:19:91:6c:29:f1:e0:34:7c:87:e7:a2:
                    d1:b1:1a:b6:14:66:d7:a2:26:10:b9:21:71:49:c5:
                    80:f7:a0:d4:ba:a0:1a:d6:fa:94:de:72:6a:9e:ad:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:13:B8:64:7A:9F:0F:ED:88:7D:B3:7A:38:63:4A:D7:95:39:89:65
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBO4ZHqfD-2IfbN6OGNK15U5iWU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:aa:12:0c:15:11:6f:56:32:34:62:71:d0:5e:c2:55:71:
         58:36:d8:14:b1:01:03:db:18:8e:92:00:c5:f2:46:25:99:17:
         8e:29:66:17:58:18:0f:ac:4e:b2:ff:98:39:1c:37:9b:ce:1b:
         d2:42:e1:9d:d9:a2:24:fd:c3:04:5b:ce:b5:bd:b1:ff:64:a5:
         89:c0:21:67:41:28:a6:60:cb:70:6f:53:b0:f4:e2:91:89:d1:
         50:b0:10:a9:f0:1d:6e:74:62:0b:8b:78:4a:65:02:1f:bc:87:
         b8:6a:1b:30:09:57:d5:ca:07:16:87:4a:0e:a5:ef:54:7c:57:
         5e:9a:80:95:f4:6d:a8:3f:ba:c9:30:7b:69:05:f8:11:17:d2:
         e3:e3:86:04:a0:0d:31:df:f7:81:1e:e5:b9:b2:16:d9:38:0a:
         18:37:d0:c2:b9:36:7d:c9:f0:1f:e1:97:5f:a4:30:20:17:a1:
         ac:2f:98:b1:9b:49:ef:eb:a3:c8:c6:6a:2c:49:6c:4f:f0:6e:
         92:04:49:86:34:d7:27:09:6f:1e:64:e6:3a:c2:77:3c:0b:a5:
         0a:5c:b8:68:5b:e8:2b:21:6f:b0:82:1c:67:cf:3d:92:7a:90:
         68:2d:ba:83:49:22:c1:f1:42:8e:bf:f4:aa:85:61:0d:74:dd:
         8b:b1:bc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org