Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gEiwMexpviJdTXbnkUk7UcLSYpo.roa
File:                     gEiwMexpviJdTXbnkUk7UcLSYpo.roa (raw, json)
Hash identifier:          /nPhCbBWAdA9LUBM5io3h1741k98GNnWJqtylvRHQcc=
Subject key identifier:   80:48:B0:31:EC:69:BE:22:5D:4D:76:E7:91:49:3B:51:C2:D2:62:9A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CBD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gEiwMexpviJdTXbnkUk7UcLSYpo.roa
Signing time:             Wed 29 Sep 2021 02:48:08 +0000
ROA not before:           Wed 29 Sep 2021 02:48:08 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        118.232.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7357 (0x1cbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:08 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8048B031EC69BE225D4D76E791493B51C2D2629A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:c8:a0:b6:90:ac:88:64:6f:91:f0:9c:dd:
                    18:02:c7:97:04:d5:98:a8:a6:1a:8d:8e:16:65:fe:
                    7d:27:3e:e6:eb:a1:33:dc:b2:1c:43:d2:33:1d:16:
                    df:5d:aa:80:86:3e:4d:3e:8a:84:0c:49:a2:77:26:
                    7b:01:f4:c1:42:b0:4e:55:f8:5b:94:5b:55:38:0e:
                    c3:e8:6b:96:bc:c7:be:e6:08:50:bd:4b:c2:74:da:
                    e6:0a:74:d2:33:94:94:37:01:56:22:76:d0:b5:4e:
                    ed:a2:c9:80:4f:76:49:95:59:d7:66:b0:8a:c0:18:
                    ae:8e:ed:4b:e6:ef:47:98:2b:00:1a:ec:9b:5a:8c:
                    6b:08:a3:a8:08:7b:0a:5c:39:01:c2:a5:fe:15:e6:
                    a5:82:e0:dd:db:0b:e9:44:7a:43:c9:d7:ca:c8:45:
                    9d:f0:b4:8b:6e:27:ae:05:40:18:ca:58:ab:94:b4:
                    dd:89:2e:19:56:63:69:24:af:69:13:af:79:e2:1f:
                    43:99:ed:4e:40:b1:81:0e:ba:1e:5b:48:11:ee:45:
                    b2:ef:1a:a7:fe:55:8f:9f:ad:07:41:96:82:c1:cb:
                    6a:e4:52:33:8f:ab:0b:d7:95:0d:c3:01:db:4c:b7:
                    45:48:9a:c8:11:dc:68:51:cf:be:98:fc:0d:d1:f0:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:48:B0:31:EC:69:BE:22:5D:4D:76:E7:91:49:3B:51:C2:D2:62:9A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gEiwMexpviJdTXbnkUk7UcLSYpo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:7f:92:d0:78:7e:49:5e:75:db:b0:c1:35:0d:de:4c:25:c0:
         5d:2f:e5:d0:f1:7d:aa:8f:e8:27:a0:ad:4c:13:ad:73:40:2e:
         ad:5c:1e:ed:31:8a:66:5d:6c:68:c8:0a:44:52:98:a3:7f:81:
         74:25:01:27:7d:58:14:a2:f1:c4:55:26:ad:a0:71:54:2e:12:
         65:a8:f2:43:83:0b:03:9b:a6:22:c8:af:3c:b2:29:24:4d:fa:
         90:90:f1:69:5f:f3:3e:31:c4:71:49:25:92:4c:82:a8:ea:60:
         30:bc:f0:99:7a:80:7f:42:f1:f6:be:f8:98:bb:ba:1c:ed:ad:
         0f:b4:05:e4:d9:9f:19:87:70:bd:a1:a5:38:e4:6f:5e:1a:b6:
         c5:f5:5c:db:a8:90:bd:37:94:7c:55:05:26:78:51:73:4e:4a:
         9a:b4:d6:af:38:b6:97:8b:ac:42:2d:52:92:e0:7f:6d:05:43:
         5d:f6:8a:60:04:5c:a1:98:9a:8e:8b:d8:71:53:cb:64:a6:50:
         22:8f:4b:fd:ff:74:0d:41:4c:d4:5d:83:ea:3e:cd:01:23:17:
         15:92:f4:e0:aa:a8:83:ef:10:c1:85:8a:00:02:e7:00:b7:46:
         eb:37:ea:2a:5f:b7:4a:d6:9a:e9:99:a1:5f:24:80:fa:92:ff:
         20:db:2f:c2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHL0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDgwNDhCMDMxRUM2OUJF
MjI1RDRENzZFNzkxNDkzQjUxQzJEMjYyOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHbsigtpCsiGRvkfCc3RgCx5cE1ZiophqNjhZl/n0nPubroTPc
shxD0jMdFt9dqoCGPk0+ioQMSaJ3JnsB9MFCsE5V+FuUW1U4DsPoa5a8x77mCFC9
S8J02uYKdNIzlJQ3AVYidtC1Tu2iyYBPdkmVWddmsIrAGK6O7Uvm70eYKwAa7Jta
jGsIo6gIewpcOQHCpf4V5qWC4N3bC+lEekPJ18rIRZ3wtItuJ64FQBjKWKuUtN2J
LhlWY2kkr2kTr3niH0OZ7U5AsYEOuh5bSBHuRbLvGqf+VY+frQdBloLBy2rkUjOP
qwvXlQ3DAdtMt0VImsgR3GhRz76Y/A3R8L51AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgEiwMexpviJdTXbnkUk7UcLSYpowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dFaXdNZXhwdmlKZFRYYm5r
VWs3VWNMU1lwby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6LAwDQYJKoZIhvcNAQELBQADggEBAJ5/ktB4fkledduwwTUN3kwlwF0v5dDxfaqP
6CegrUwTrXNALq1cHu0ximZdbGjICkRSmKN/gXQlASd9WBSi8cRVJq2gcVQuEmWo
8kODCwObpiLIrzyyKSRN+pCQ8Wlf8z4xxHFJJZJMgqjqYDC88Jl6gH9C8fa++Ji7
uhztrQ+0BeTZnxmHcL2hpTjkb14atsX1XNuokL03lHxVBSZ4UXNOSpq01q84tpeL
rEItUpLgf20FQ132imAEXKGYmo6L2HFTy2SmUCKPS/3/dA1BTNRdg+o+zQEjFxWS
9OCqqIPvEMGFigAC5wC3Rus36ipft0rWmumZoV8kgPqS/yDbL8I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org