Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m5njRG9IFRxLGAy09IrtkkrRWAY.roa
File:                     m5njRG9IFRxLGAy09IrtkkrRWAY.roa (raw, json)
Hash identifier:          UZxHTaqzrHY0Ame6D/xv/B/gc5k9DQzUtPcE0xOMTnE=
Subject key identifier:   9B:99:E3:44:6F:48:15:1C:4B:18:0C:B4:F4:8A:ED:92:4A:D1:58:06
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m5njRG9IFRxLGAy09IrtkkrRWAY.roa
Signing time:             Thu 15 Sep 2022 02:52:38 +0000
ROA not before:           Thu 15 Sep 2022 02:52:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        103.224.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9B99E3446F48151C4B180CB4F48AED924AD15806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:66:df:0e:64:13:05:b9:49:40:aa:ed:36:
                    02:6e:76:1a:a4:87:d5:53:c2:47:7f:79:ea:1e:3d:
                    2d:6d:ca:d8:3b:2a:6a:e3:ea:21:95:9a:23:38:ac:
                    ce:3b:63:53:83:66:26:06:fe:21:d9:ee:ff:87:59:
                    d1:a8:e5:2a:ef:88:5e:a8:19:3f:63:f1:00:73:2b:
                    78:6f:c5:21:e8:98:05:da:a1:e6:f2:78:80:51:ed:
                    4c:c0:a8:28:2e:5e:81:dd:1c:d1:f9:17:46:ef:27:
                    4e:4a:1d:5d:8a:52:68:91:09:5a:5c:ff:2a:9c:60:
                    d6:e6:3f:9a:d1:f3:ea:e4:ee:66:90:f6:f0:41:58:
                    31:59:71:7e:89:e1:d9:4b:59:96:a0:35:9b:0e:4e:
                    77:1a:ad:20:0b:b3:72:81:d0:81:e5:d8:cf:16:bd:
                    61:ce:f2:1a:a1:31:21:d4:7c:f5:76:ec:ec:af:9c:
                    98:05:16:53:90:2a:aa:bd:89:ce:05:da:e8:b6:45:
                    eb:27:e4:45:aa:0b:b5:07:c0:7b:27:8e:c4:16:5e:
                    81:60:b6:ff:7c:32:a5:71:7c:7d:75:01:19:a7:a9:
                    50:08:62:24:ee:6a:1f:47:dc:40:f3:06:7f:83:58:
                    63:dc:43:97:b4:c4:4c:90:c9:f5:d8:35:32:21:ee:
                    27:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:99:E3:44:6F:48:15:1C:4B:18:0C:B4:F4:8A:ED:92:4A:D1:58:06
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m5njRG9IFRxLGAy09IrtkkrRWAY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c5:14:8b:d1:2e:b0:8f:0d:fc:ee:a4:89:81:e3:79:13:a8:
         a0:5b:08:a8:de:49:9a:79:ee:b9:de:b7:15:2f:44:8e:8a:b8:
         df:8c:50:17:8f:d5:3a:b8:4c:4e:dc:4d:b0:1d:58:5b:9d:b9:
         37:59:ce:95:e8:44:39:70:06:c6:6f:92:7f:d7:88:3c:24:15:
         e4:5e:0d:ee:10:4e:58:e2:45:5c:6f:b8:70:71:85:e6:7d:8e:
         0d:3e:82:48:93:69:ee:8e:19:13:22:b0:a0:40:41:60:1c:5f:
         6f:02:46:25:aa:70:1e:cc:d1:78:e2:94:7e:a9:a7:bd:e5:77:
         74:73:90:48:00:b1:dd:d2:60:b4:1a:8c:ea:40:93:0a:08:c3:
         85:79:71:4e:fa:c7:d8:3d:98:ab:e7:b0:c2:dc:51:98:b0:a6:
         eb:fe:5b:e1:ad:aa:d0:1f:4f:ca:65:ab:0e:e2:25:47:e7:ee:
         82:1d:44:5f:ba:b2:e8:de:b8:a8:b2:c9:e6:c5:a3:76:5c:90:
         73:96:16:1c:77:0e:af:85:f9:ee:52:46:63:38:ea:81:57:9e:
         14:d2:87:ea:ea:e7:81:e8:5d:98:79:ad:86:d3:27:a6:ac:74:
         b8:b3:6e:b8:e2:0b:d8:3c:c1:66:3e:43:2b:c4:28:a9:53:dc:
         e6:0a:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org