Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jG91e-JenChBVCxAasSm_ZFGSeY.roa
File:                     jG91e-JenChBVCxAasSm_ZFGSeY.roa (raw, json)
Hash identifier:          MJ3bA97NExa3G1WTo6ZSS7wc9ewC76RVBwIMhDz4qCw=
Subject key identifier:   8C:6F:75:7B:E2:5E:9C:28:41:54:2C:40:6A:C4:A6:FD:91:46:49:E6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BB1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jG91e-JenChBVCxAasSm_ZFGSeY.roa
Signing time:             Wed 29 Sep 2021 02:46:53 +0000
ROA not before:           Wed 29 Sep 2021 02:46:53 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.195.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7089 (0x1bb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:53 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8C6F757BE25E9C2841542C406AC4A6FD914649E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:0e:91:0d:8a:58:98:06:6c:b4:ce:19:6f:
                    6e:df:7f:57:85:43:8d:b0:d3:df:31:e4:a2:a2:73:
                    de:63:3c:ad:cc:6a:53:3a:31:63:90:5c:bf:2d:77:
                    f4:1d:4e:a5:da:f1:76:75:8d:65:9d:d2:b0:5c:3c:
                    0b:79:1d:c0:82:32:da:10:9b:17:2c:1b:88:07:f0:
                    28:79:b9:96:9a:19:4a:fa:94:2d:02:91:20:60:0e:
                    c7:c7:28:4d:d8:5a:f0:71:b1:d9:c3:94:ce:79:60:
                    83:f2:a4:e3:66:1f:2c:b0:4f:d5:fe:3d:03:cf:92:
                    c2:ca:99:96:ed:d9:1f:b3:88:9e:9a:7c:12:05:a5:
                    64:a0:10:96:f5:dd:a4:01:b0:11:1b:11:d0:c0:1c:
                    80:96:9d:40:2b:59:bb:ff:f6:92:9d:51:71:bd:1a:
                    6e:78:78:90:2a:d1:77:52:bf:df:50:f6:b9:01:96:
                    d2:5d:c6:06:b9:e4:ff:7c:26:f4:97:b5:56:92:1a:
                    6e:34:39:a4:4a:c4:cb:54:a4:82:6c:6e:fb:75:68:
                    63:ac:e6:b0:dd:5f:f3:be:bd:6b:b8:c2:e3:2b:2c:
                    b4:f4:28:ec:c4:1e:f4:2f:e9:59:e5:53:49:1a:44:
                    30:d8:60:12:ab:e2:48:88:07:4e:55:2a:cb:e8:bb:
                    f9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6F:75:7B:E2:5E:9C:28:41:54:2C:40:6A:C4:A6:FD:91:46:49:E6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jG91e-JenChBVCxAasSm_ZFGSeY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:53:5d:2e:39:bc:2d:a4:cd:26:93:b5:44:f1:04:9b:34:55:
         e7:cf:b5:dc:0f:0d:26:63:15:02:6b:07:7f:7d:cd:b2:95:40:
         e6:a1:fd:6e:0f:52:88:b3:f0:97:3e:4a:ca:56:1b:5c:87:83:
         59:ea:c8:49:bf:c1:fd:04:9e:1f:ff:24:cd:d9:3d:31:ab:e9:
         22:1d:48:39:2c:d1:cb:ae:30:3e:d2:a4:55:21:52:a8:11:42:
         e8:2e:ce:07:74:8b:cc:93:1e:18:0b:b0:b2:b4:c7:f6:d6:be:
         1b:e4:7a:79:df:7f:6a:b4:66:05:b6:a3:cc:5f:9c:c3:3b:c8:
         10:84:08:ee:9e:ca:60:16:6b:50:38:af:2d:d9:fe:c7:f2:dc:
         a9:02:d5:ec:cf:ce:1f:f8:ba:58:1d:7e:f1:d4:4e:3e:66:ef:
         68:a3:93:43:59:d9:32:4f:07:48:a8:d5:d2:ae:bf:ab:79:cf:
         a2:48:a2:e5:72:b7:82:6e:a4:e5:b4:aa:71:36:68:d2:ab:fc:
         29:3c:39:49:8d:7a:3f:a1:b1:e9:c0:94:bc:12:63:56:7b:89:
         e6:5a:5f:ee:82:58:da:1a:ea:45:df:d9:72:dc:0f:75:5e:38:
         0a:3f:ad:8f:e7:f8:c9:62:b2:8f:9c:da:41:19:4d:04:fb:11:
         c0:c7:78:03
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG7EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2NTNaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDhDNkY3NTdCRTI1RTlD
Mjg0MTU0MkM0MDZBQzRBNkZEOTE0NjQ5RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtzA6RDYpYmAZstM4Zb27ff1eFQ42w098x5KKic95jPK3MalM6
MWOQXL8td/QdTqXa8XZ1jWWd0rBcPAt5HcCCMtoQmxcsG4gH8Ch5uZaaGUr6lC0C
kSBgDsfHKE3YWvBxsdnDlM55YIPypONmHyywT9X+PQPPksLKmZbt2R+ziJ6afBIF
pWSgEJb13aQBsBEbEdDAHICWnUArWbv/9pKdUXG9Gm54eJAq0XdSv99Q9rkBltJd
xga55P98JvSXtVaSGm40OaRKxMtUpIJsbvt1aGOs5rDdX/O+vWu4wuMrLLT0KOzE
HvQv6VnlU0kaRDDYYBKr4kiIB05VKsvou/lJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjG91e+JenChBVCxAasSm/ZFGSeYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pHOTFlLUplbkNoQlZDeEFh
c1NtX1pGR1NlWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w0gwDQYJKoZIhvcNAQELBQADggEBAItTXS45vC2kzSaTtUTxBJs0VefPtdwPDSZj
FQJrB399zbKVQOah/W4PUoiz8Jc+SspWG1yHg1nqyEm/wf0Enh//JM3ZPTGr6SId
SDks0cuuMD7SpFUhUqgRQuguzgd0i8yTHhgLsLK0x/bWvhvkennff2q0ZgW2o8xf
nMM7yBCECO6eymAWa1A4ry3Z/sfy3KkC1ezPzh/4ulgdfvHUTj5m72ijk0NZ2TJP
B0io1dKuv6t5z6JIouVyt4JupOW0qnE2aNKr/Ck8OUmNej+hsenAlLwSY1Z7ieZa
X+6CWNoa6kXf2XLcD3VeOAo/rY/n+Mliso+c2kEZTQT7EcDHeAM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org