Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m6O9cl_Urc5SIAKbmvD531QBEdw.roa
File:                     m6O9cl_Urc5SIAKbmvD531QBEdw.roa (raw, json)
Hash identifier:          k3UwyZHdn3pdcHjRhGKmldPC7n+zyvZIeUuTuE9+aco=
Subject key identifier:   9B:A3:BD:72:5F:D4:AD:CE:52:20:02:9B:9A:F0:F9:DF:54:01:11:DC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       15A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m6O9cl_Urc5SIAKbmvD531QBEdw.roa
Signing time:             Sun 07 Feb 2021 12:05:42 +0000
ROA not before:           Sun 07 Feb 2021 12:05:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5539 (0x15a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:05:42 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9BA3BD725FD4ADCE5220029B9AF0F9DF540111DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:67:46:18:47:6d:df:a8:3c:01:3e:ae:39:
                    6c:c4:0a:8b:46:52:c5:78:93:04:3f:83:80:f2:68:
                    3b:51:ad:41:3d:57:bf:cb:bf:59:b0:3e:b2:09:7d:
                    36:37:ba:14:e5:88:3c:90:56:ef:cb:b7:db:70:c8:
                    90:88:dc:23:65:ee:39:82:6c:2b:c3:5b:5e:c4:d8:
                    29:13:dd:d4:e6:13:3d:42:8c:dc:7f:0b:ed:e6:01:
                    d6:ef:ff:3f:ff:e0:b5:b7:5e:73:e0:eb:4e:72:2c:
                    e8:2f:00:94:41:92:4d:64:ce:03:49:d5:34:db:fc:
                    16:86:e8:41:45:4d:07:47:10:84:04:01:53:8e:f0:
                    47:b7:35:3d:23:86:c8:2b:a3:98:ca:cd:e7:53:b4:
                    1b:70:53:23:e2:75:87:2c:e1:3a:24:92:9b:48:9f:
                    4c:32:b0:af:c3:0e:ff:7d:fe:2d:9e:f1:0a:dc:04:
                    0e:ae:7b:52:89:63:1c:e7:8a:57:4d:7a:7b:cf:3d:
                    0c:7c:ba:e7:5a:c2:c9:60:35:c9:6d:1d:d1:e1:7d:
                    16:e5:25:c0:45:f3:a1:d5:24:06:44:21:a6:3b:a6:
                    db:a6:01:7f:d8:6d:d7:34:70:61:40:0c:1c:63:2f:
                    21:71:6a:d6:46:b3:a6:64:02:3d:f3:13:e2:fb:dd:
                    7c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A3:BD:72:5F:D4:AD:CE:52:20:02:9B:9A:F0:F9:DF:54:01:11:DC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m6O9cl_Urc5SIAKbmvD531QBEdw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:39:85:1e:78:da:6f:3f:0a:81:ff:bf:2f:ce:2d:3c:11:
         98:77:c1:c9:0f:77:dc:f7:18:c5:aa:fd:48:b6:72:5f:ee:5e:
         d4:85:4f:82:20:14:34:60:fc:37:4c:9d:60:af:6a:9a:1a:d2:
         35:16:d0:04:d4:c6:e8:e2:07:01:b4:83:6d:5f:70:f1:3d:1e:
         07:3a:af:50:1d:83:21:54:1e:eb:0f:d4:bb:9c:e0:16:1e:4d:
         c9:4e:f6:e3:e7:9b:85:48:a2:37:4d:f0:5a:cb:08:e9:7e:9c:
         b4:80:8a:fe:40:87:9e:9e:2a:a5:f1:3d:fc:32:8f:db:5d:79:
         9a:c4:b3:53:84:bb:df:4c:3c:50:69:58:f5:0a:eb:97:74:31:
         c5:a5:bd:51:19:d4:4d:cd:c0:22:1c:7f:b1:f1:8b:4b:45:45:
         cf:ff:8c:ac:31:19:7e:27:b9:28:47:1b:15:fa:ff:09:1c:6d:
         e3:c3:b0:a5:34:82:29:0a:a2:94:aa:58:1a:75:ae:74:9c:20:
         b3:0a:eb:9a:46:9c:5b:2d:f4:8f:7c:17:22:00:71:bf:89:46:
         25:f9:4f:5a:36:19:ac:53:90:9c:d1:81:54:64:67:a2:64:6b:
         f2:1e:89:c2:87:c4:42:33:bb:9c:d0:bc:17:41:dc:a6:e8:12:
         d4:d7:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org