Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gW961t2yaqTXn0OLrEboeyRrF7I.roa
File:                     gW961t2yaqTXn0OLrEboeyRrF7I.roa (raw, json)
Hash identifier:          xNsnnC7c6VV+cJOac5AVGRpru3p3dZEuD011feRRKJg=
Subject key identifier:   81:6F:7A:D6:DD:B2:6A:A4:D7:9F:43:8B:AC:46:E8:7B:24:6B:17:B2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gW961t2yaqTXn0OLrEboeyRrF7I.roa
Signing time:             Thu 15 Sep 2022 02:45:56 +0000
ROA not before:           Thu 15 Sep 2022 02:45:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=816F7AD6DDB26AA4D79F438BAC46E87B246B17B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:df:e0:45:a3:6f:ba:b7:d0:1c:f3:c8:db:
                    fe:62:07:93:f5:a0:52:ca:ba:63:6d:db:1e:8d:92:
                    d8:71:cf:e1:58:f5:ea:aa:c9:c4:e5:12:61:d5:fd:
                    fb:57:39:44:1a:fb:a7:53:0c:46:11:82:19:5b:ff:
                    11:ef:cf:06:1b:e7:c1:16:08:5a:35:92:e3:3e:94:
                    fc:98:b2:9f:a1:e0:e7:37:49:fd:50:99:2c:46:08:
                    1d:f2:24:d2:9c:76:85:1f:b3:12:cf:5b:43:09:b3:
                    b3:4b:91:0b:b6:b7:55:da:fe:f8:e1:71:df:6e:71:
                    4c:cb:a6:c9:94:37:ee:42:09:74:e6:88:cc:8d:3d:
                    c6:f9:16:d9:ca:62:4d:20:70:50:b6:9c:dc:f6:e1:
                    e4:cd:71:f0:cc:cb:b5:b7:ff:59:7f:4f:e4:93:ca:
                    99:df:59:0e:d3:02:14:4c:a4:d5:b5:16:83:ce:b1:
                    a2:fd:9a:7f:87:f2:53:ea:01:ce:93:a8:a1:47:79:
                    87:12:c5:4b:82:44:f3:da:3a:54:38:a9:2c:b1:7a:
                    e3:8d:a3:2b:5b:4b:91:47:28:50:23:ba:b5:8f:b7:
                    09:fd:06:f5:2a:3d:8f:39:6e:c3:ec:f6:12:09:15:
                    ab:46:2d:b5:f8:2d:e0:97:c4:51:82:83:67:2c:06:
                    5a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6F:7A:D6:DD:B2:6A:A4:D7:9F:43:8B:AC:46:E8:7B:24:6B:17:B2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gW961t2yaqTXn0OLrEboeyRrF7I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:7e:2d:a0:9a:b4:0b:5e:4f:3b:be:46:63:78:95:d2:ca:42:
         db:4d:44:fb:50:7c:9e:ea:c8:7b:8a:15:bc:ac:a5:9e:7d:06:
         60:47:c6:3a:0a:d8:14:2d:c8:de:8e:b1:48:75:3c:c4:7c:76:
         5f:13:08:32:d3:61:20:ad:9f:a4:45:b1:1a:b8:83:e8:ea:73:
         8c:28:fd:0d:47:a6:26:dc:98:e1:7e:32:10:09:4b:f1:0e:86:
         68:94:6c:01:bd:5d:c8:5f:3b:e6:ed:49:d3:ee:74:8c:02:df:
         de:47:2a:ff:31:60:10:a9:71:c5:1c:a6:a5:ca:9f:c9:d8:1c:
         89:64:17:39:29:55:e0:e4:9a:83:97:24:1c:d0:d0:f0:d3:aa:
         2a:07:81:69:2f:43:6d:16:5e:7e:ce:71:78:7a:af:d7:df:b2:
         17:fe:fd:97:ef:23:3a:f4:48:c7:ad:3f:f1:93:ba:25:b9:8c:
         fe:91:84:7c:0c:29:44:89:48:28:2a:e5:96:31:ad:ae:55:d8:
         81:4c:c6:8e:af:7a:5a:b3:1d:38:aa:e7:ca:62:59:89:43:09:
         61:e4:30:3b:95:10:00:ec:1b:14:10:15:5b:6b:b8:72:07:f3:
         c2:43:e0:70:a1:52:88:1e:a0:de:ef:b4:a0:1e:b6:d4:50:27:
         bc:6c:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org