Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g-hv2GtGcw9raTI_pNKlfMe6YsE.roa
File:                     g-hv2GtGcw9raTI_pNKlfMe6YsE.roa (raw, json)
Hash identifier:          tT8hTUApilU+3JznVL5h9d2v8gdCEWsjuVgsQxIF8JQ=
Subject key identifier:   83:E8:6F:D8:6B:46:73:0F:6B:69:32:3F:A4:D2:A5:7C:C7:BA:62:C1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1E3D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g-hv2GtGcw9raTI_pNKlfMe6YsE.roa
Signing time:             Wed 27 Apr 2022 09:00:05 +0000
ROA not before:           Wed 27 Apr 2022 09:00:05 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7741 (0x1e3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Apr 27 09:00:05 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=83E86FD86B46730F6B69323FA4D2A57CC7BA62C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:4a:cf:48:49:fd:27:9f:4f:e2:c0:9f:80:
                    fe:ce:da:36:d7:44:21:63:d9:84:9a:cb:27:e2:03:
                    f1:c6:3f:f7:03:0e:46:88:2f:4e:1f:d8:d8:64:db:
                    a1:8f:3d:f3:e0:a8:44:2d:38:1a:50:39:f1:c4:56:
                    88:5c:64:fb:e7:fe:b7:51:42:d0:27:20:3e:ec:ef:
                    06:d9:b3:78:96:dc:1a:60:b0:f0:ea:6b:32:bb:48:
                    8f:84:e6:2a:a8:2f:75:fe:43:04:5e:57:c1:a2:42:
                    fb:c3:03:7e:ad:2f:70:2c:0d:f7:d4:c6:1e:68:d2:
                    72:3f:c8:0e:3e:1c:90:7c:d3:ef:eb:ef:6d:c2:a4:
                    fb:e3:5a:97:03:fe:8b:0f:1b:1d:5d:95:51:51:c4:
                    2a:25:39:f8:d3:7b:ad:0a:4d:b4:37:e4:e9:71:d4:
                    a7:57:8c:63:65:f0:d9:55:f0:17:db:27:bc:9b:d0:
                    ee:74:13:63:5d:3b:54:4c:6f:49:38:4d:ab:6b:2c:
                    3c:ba:6a:fe:d9:28:6e:92:2a:ce:76:a0:78:6a:44:
                    64:84:7e:0d:1b:8e:de:b5:25:85:ad:1d:b3:3c:1e:
                    c3:74:ea:0e:8d:d4:c9:ca:6d:dc:51:d0:98:da:c1:
                    71:50:94:07:59:8d:fe:37:19:d8:13:b5:9a:26:75:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:6F:D8:6B:46:73:0F:6B:69:32:3F:A4:D2:A5:7C:C7:BA:62:C1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g-hv2GtGcw9raTI_pNKlfMe6YsE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:6a:15:60:73:96:16:a0:fa:55:5a:61:06:be:c0:79:0a:98:
         5a:5a:99:9a:fe:9b:ee:12:e7:5b:56:91:7e:c6:eb:db:18:87:
         26:e0:83:37:04:3c:73:5c:d9:25:55:83:80:0f:01:0a:7b:12:
         5b:40:09:ff:c4:da:ef:bd:b2:9c:88:16:2c:91:8c:54:a0:85:
         93:4f:0c:c5:72:14:7d:ad:31:47:40:ef:a5:69:0f:64:1b:a4:
         ad:f3:4f:78:aa:12:fe:dd:ab:ce:4c:e9:df:5b:2b:54:35:01:
         08:7e:c6:11:d7:65:f9:ba:98:02:55:55:60:85:f4:60:e9:b5:
         fc:20:38:15:c5:39:94:0b:bd:cc:79:27:2a:6e:a7:db:c9:c2:
         ec:19:3b:80:64:89:98:33:aa:b3:5c:35:f2:cc:8e:40:17:c9:
         86:56:aa:7d:02:9c:64:cb:d4:43:c2:03:81:0c:66:23:19:ea:
         ec:ad:62:b0:85:45:a8:7d:82:61:bc:f5:11:72:e5:6a:25:3d:
         29:e5:db:ff:c5:c5:c5:55:e5:6a:e3:f5:ab:d2:aa:f3:97:a8:
         44:91:84:8a:33:30:70:99:5e:aa:91:09:63:b2:33:51:f1:b9:
         85:31:93:4b:98:3a:03:77:2b:5d:df:cb:e6:e7:d9:ae:4a:76:
         d0:7f:11:08
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHj0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA0Mjcw
OTAwMDVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDgzRTg2RkQ4NkI0Njcz
MEY2QjY5MzIzRkE0RDJBNTdDQzdCQTYyQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfJ0rPSEn9J59P4sCfgP7O2jbXRCFj2YSayyfiA/HGP/cDDkaI
L04f2Nhk26GPPfPgqEQtOBpQOfHEVohcZPvn/rdRQtAnID7s7wbZs3iW3BpgsPDq
azK7SI+E5iqoL3X+QwReV8GiQvvDA36tL3AsDffUxh5o0nI/yA4+HJB80+/r723C
pPvjWpcD/osPGx1dlVFRxColOfjTe60KTbQ35Olx1KdXjGNl8NlV8BfbJ7yb0O50
E2NdO1RMb0k4TatrLDy6av7ZKG6SKs52oHhqRGSEfg0bjt61JYWtHbM8HsN06g6N
1MnKbdxR0JjawXFQlAdZjf43GdgTtZomdVaBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUg+hv2GtGcw9raTI/pNKlfMe6YsEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ctaHYyR3RHY3c5cmFUSV9w
TktsZk1lNllzRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wdQwDQYJKoZIhvcNAQELBQADggEBAGBqFWBzlhag+lVaYQa+wHkKmFpamZr+m+4S
51tWkX7G69sYhybggzcEPHNc2SVVg4APAQp7EltACf/E2u+9spyIFiyRjFSghZNP
DMVyFH2tMUdA76VpD2QbpK3zT3iqEv7dq85M6d9bK1Q1AQh+xhHXZfm6mAJVVWCF
9GDptfwgOBXFOZQLvcx5Jypup9vJwuwZO4BkiZgzqrNcNfLMjkAXyYZWqn0CnGTL
1EPCA4EMZiMZ6uytYrCFRah9gmG89RFy5WolPSnl2//FxcVV5Wrj9avSqvOXqESR
hIozMHCZXqqRCWOyM1HxuYUxk0uYOgN3K13fy+bn2a5KdtB/EQg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org