Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gX6zRyvfuvQK788CgP2wrQejVXY.roa
File:                     gX6zRyvfuvQK788CgP2wrQejVXY.roa (raw, json)
Hash identifier:          xx8dhPLnBeSEC5p0y9qJ+SDQZvGeTx2wGFgfu7dgeHE=
Subject key identifier:   81:7E:B3:47:2B:DF:BA:F4:0A:EF:CF:02:80:FD:B0:AD:07:A3:55:76
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gX6zRyvfuvQK788CgP2wrQejVXY.roa
Signing time:             Thu 15 Sep 2022 02:45:54 +0000
ROA not before:           Thu 15 Sep 2022 02:45:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        103.224.192.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=817EB3472BDFBAF40AEFCF0280FDB0AD07A35576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:45:10:39:f1:1a:2a:6e:36:35:ff:b2:ef:
                    17:c3:05:fe:5c:8c:85:3f:88:41:a4:ed:a6:3b:df:
                    3b:1a:cc:5c:51:ce:72:8b:09:3d:47:db:3f:54:f7:
                    06:3f:76:aa:99:b1:4b:c6:7f:d8:c9:78:33:10:c7:
                    8d:e0:41:52:c0:83:53:8d:1c:87:37:d4:c6:ed:d0:
                    69:4b:ee:e6:0e:77:ed:ca:70:f8:78:21:58:81:e9:
                    53:ee:49:17:0d:79:d8:0c:bb:d0:6e:9f:a2:9e:9a:
                    73:95:12:b2:86:5a:15:d7:18:41:de:c5:36:eb:d8:
                    86:2a:dd:da:be:e6:a3:2f:bd:42:8f:73:63:ca:d3:
                    b5:fa:32:20:c7:42:96:9e:21:15:f9:9c:15:ad:97:
                    ce:a7:cd:3f:d8:5e:78:f3:94:f2:97:bb:3a:c0:22:
                    a6:85:2a:68:44:11:6f:9d:68:49:59:20:71:d2:a4:
                    25:9c:64:dd:24:a9:55:dc:95:c0:eb:a8:6d:86:7d:
                    e9:b9:75:48:a9:35:bb:89:96:76:d9:d8:de:9f:95:
                    54:3b:b0:0e:62:54:6c:93:37:d5:a2:6a:40:6b:fd:
                    5f:94:09:b4:41:e5:e3:86:16:07:b2:13:ef:c3:67:
                    26:aa:4b:1b:c3:9c:02:51:e1:87:4e:dd:e3:d2:71:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7E:B3:47:2B:DF:BA:F4:0A:EF:CF:02:80:FD:B0:AD:07:A3:55:76
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gX6zRyvfuvQK788CgP2wrQejVXY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:22:e6:d8:b6:7b:ac:99:11:8f:71:ca:b4:31:91:ea:47:08:
         e9:40:5e:e1:72:9a:8c:03:af:11:2f:32:6f:7d:58:9c:09:61:
         3d:96:24:c2:7d:93:47:74:a2:f6:71:b9:74:85:2b:68:d4:4c:
         a2:40:5a:ec:68:1a:73:85:3d:8d:7f:02:c1:a9:fe:a5:a9:d7:
         ae:52:ac:e5:3c:96:af:77:c9:b8:1f:db:4a:6c:65:26:d4:d5:
         d2:22:f3:35:a9:fd:38:67:d6:45:a9:78:f1:0a:f1:b1:10:9f:
         fa:e7:11:e8:b4:aa:e0:6b:56:00:d5:67:7d:4e:4b:c4:a4:bf:
         91:84:45:2a:d3:8a:5f:da:eb:0f:4a:60:b3:6f:cb:80:0c:c9:
         b1:b8:0c:60:3d:57:41:4f:98:b1:99:85:3f:de:27:ae:97:aa:
         bf:f7:7d:22:c3:0b:34:0c:9b:40:5d:c5:36:db:70:ad:8b:01:
         01:89:55:5d:9d:86:26:4f:c9:2d:0a:1c:6c:58:d9:fc:1f:d4:
         87:83:82:a4:b6:6a:72:01:4c:17:c5:e4:d0:50:d5:33:be:96:
         f3:76:b1:f1:fe:aa:c2:39:11:b0:eb:09:88:3b:3c:f9:1c:1a:
         52:0b:17:43:d4:8c:1b:4f:b4:15:68:e8:ec:96:75:31:05:6b:
         48:a1:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org