Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jOccRD-qCiEQ8SOZt58TE_ZZwS0.roa
File:                     jOccRD-qCiEQ8SOZt58TE_ZZwS0.roa (raw, json)
Hash identifier:          fsF8nnpymOP5gZX+crxBQR9UVZZ1EEex1e6Z1qeI1gc=
Subject key identifier:   8C:E7:1C:44:3F:AA:0A:21:10:F1:23:99:B7:9F:13:13:F6:59:C1:2D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2328
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jOccRD-qCiEQ8SOZt58TE_ZZwS0.roa
Signing time:             Fri 25 Nov 2022 04:42:08 +0000
ROA not before:           Fri 25 Nov 2022 04:42:08 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9000 (0x2328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:42:08 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8CE71C443FAA0A2110F12399B79F1313F659C12D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:05:cd:9a:f0:13:71:a5:a9:a1:39:b4:ae:
                    20:48:2e:f3:ed:ca:26:e4:ca:19:da:eb:0c:0a:83:
                    f7:5c:bc:36:f8:b9:54:f7:99:56:c4:17:12:18:99:
                    9d:75:98:b0:7d:a5:d3:55:6b:85:52:00:ac:07:e8:
                    79:3d:c4:68:14:62:f3:1f:bc:09:9c:4b:34:b6:84:
                    f7:1e:f6:3f:89:a1:8d:58:19:98:2e:c5:9e:1d:7d:
                    2f:d2:02:19:01:0c:bc:0e:15:0a:01:ed:c0:55:be:
                    8c:2d:dc:32:46:2b:03:c3:d5:49:fe:35:5c:27:bb:
                    44:e3:b6:07:84:73:af:47:9e:9f:9c:39:56:e6:19:
                    6c:92:52:6a:d8:85:17:4c:8e:5c:b6:ec:09:63:bb:
                    66:f3:2b:c1:6b:78:0d:70:b6:1c:00:23:7a:ba:f0:
                    61:28:cd:62:87:2e:f2:37:73:e1:2f:89:7b:bd:81:
                    77:7c:db:81:a4:04:bc:ef:8a:84:ac:74:d8:60:65:
                    12:b5:81:d1:26:4f:41:9a:3f:00:d3:ca:93:d1:53:
                    e5:ee:e7:19:ee:d9:e2:fb:87:d5:2e:95:aa:e6:0d:
                    b9:e6:5c:97:a9:c8:2a:2d:18:32:19:cd:6d:85:29:
                    88:c5:67:c1:6d:ec:b5:e8:d2:a9:4f:60:f4:41:2d:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E7:1C:44:3F:AA:0A:21:10:F1:23:99:B7:9F:13:13:F6:59:C1:2D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jOccRD-qCiEQ8SOZt58TE_ZZwS0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:e2:39:e3:94:47:26:4a:41:23:a2:b6:ff:44:30:b3:0e:38:
         2c:fc:fa:de:b9:50:52:ce:7d:d0:ec:9a:97:9c:de:56:08:c7:
         45:4e:20:32:df:90:cd:02:56:af:42:eb:e3:31:81:1c:7a:5b:
         b4:24:d5:1d:2a:7f:3d:7b:7a:2c:ca:7c:df:3b:ed:86:e2:d7:
         5a:fe:11:13:d8:91:5d:c6:bd:5f:9e:18:0a:e4:05:ad:89:cf:
         64:04:5e:2a:9e:5b:77:04:c0:3f:41:7d:96:44:fe:3a:4a:80:
         0b:b0:ba:97:24:bd:b0:53:71:dd:c1:a7:8b:cc:47:da:f6:48:
         73:3b:f5:f8:47:a4:3d:19:53:2e:aa:50:94:77:ce:e7:bd:78:
         e5:39:53:bc:97:7c:22:a5:e6:24:87:6d:59:df:95:cb:a6:86:
         a4:fb:f0:8d:ef:16:f4:c6:69:e6:04:35:82:a3:cb:10:8e:1f:
         8f:82:af:86:99:47:63:e8:84:18:a1:65:b2:82:1d:bb:80:75:
         9d:aa:e1:a1:00:95:f1:b0:63:04:1d:10:e6:72:f3:52:69:c5:
         74:bf:05:94:ba:55:9d:d7:87:c0:44:5e:c0:c0:f5:92:0c:f8:
         f3:28:e6:03:57:d4:09:dd:84:74:ab:6a:7d:71:78:d0:bc:90:
         47:38:3a:d6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQyMDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhDRTcxQzQ0M0ZBQTBB
MjExMEYxMjM5OUI3OUYxMzEzRjY1OUMxMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3hgXNmvATcaWpoTm0riBILvPtyibkyhna6wwKg/dcvDb4uVT3
mVbEFxIYmZ11mLB9pdNVa4VSAKwH6Hk9xGgUYvMfvAmcSzS2hPce9j+JoY1YGZgu
xZ4dfS/SAhkBDLwOFQoB7cBVvowt3DJGKwPD1Un+NVwnu0TjtgeEc69Hnp+cOVbm
GWySUmrYhRdMjly27Alju2bzK8FreA1wthwAI3q68GEozWKHLvI3c+EviXu9gXd8
24GkBLzvioSsdNhgZRK1gdEmT0GaPwDTypPRU+Xu5xnu2eL7h9UularmDbnmXJep
yCotGDIZzW2FKYjFZ8Ft7LXo0qlPYPRBLSwZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjOccRD+qCiEQ8SOZt58TE/ZZwS0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2pPY2NSRC1xQ2lFUThTT1p0
NThURV9aWndTMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wV4wDQYJKoZIhvcNAQELBQADggEBAFriOeOURyZKQSOitv9EMLMOOCz8+t65UFLO
fdDsmpec3lYIx0VOIDLfkM0CVq9C6+MxgRx6W7Qk1R0qfz17eizKfN877Ybi11r+
ERPYkV3GvV+eGArkBa2Jz2QEXiqeW3cEwD9BfZZE/jpKgAuwupckvbBTcd3Bp4vM
R9r2SHM79fhHpD0ZUy6qUJR3zue9eOU5U7yXfCKl5iSHbVnflcumhqT78I3vFvTG
aeYENYKjyxCOH4+Cr4aZR2PohBihZbKCHbuAdZ2q4aEAlfGwYwQdEOZy81JpxXS/
BZS6VZ3Xh8BEXsDA9ZIM+PMo5gNX1AndhHSran1xeNC8kEc4OtY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org