Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mia6d_zv38NQLgiNJb6RJ_1Bi84.roa
File:                     mia6d_zv38NQLgiNJb6RJ_1Bi84.roa (raw, json)
Hash identifier:          tln4jAVxhVM6OzTZPIdMTrKOTTuCKMuOtJ2rgnvK+Wc=
Subject key identifier:   9A:26:BA:77:FC:EF:DF:C3:50:2E:08:8D:25:BE:91:27:FD:41:8B:CE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1761
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mia6d_zv38NQLgiNJb6RJ_1Bi84.roa
Signing time:             Sun 07 Feb 2021 12:18:48 +0000
ROA not before:           Sun 07 Feb 2021 12:18:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.233.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5985 (0x1761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:18:48 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9A26BA77FCEFDFC3502E088D25BE9127FD418BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:68:cb:7e:ce:ab:25:ea:47:52:bd:9b:8d:
                    55:9d:14:06:bf:46:48:0d:bd:9f:f6:0f:05:fc:ce:
                    de:3d:80:ea:90:17:ef:62:72:5c:63:54:9b:40:a8:
                    1e:cb:7c:31:86:ac:04:58:15:1e:94:39:a2:d2:81:
                    1c:9f:00:f9:a7:22:11:81:8b:ec:2f:58:fe:10:6c:
                    59:16:a4:12:6e:cc:6c:17:ef:1f:8c:28:25:56:ad:
                    46:b9:95:02:f9:a7:c1:fc:ce:81:8b:a4:d9:38:8a:
                    95:66:91:b7:7d:16:48:30:20:09:8c:39:54:da:7f:
                    63:43:be:7d:7b:df:b6:fc:fa:7b:09:56:aa:4a:7d:
                    bc:0c:ab:f9:e7:67:38:57:d5:25:6c:3a:f7:3b:e9:
                    65:45:82:39:22:29:40:5b:db:7d:c6:28:e7:66:65:
                    21:d9:59:2d:56:62:80:0a:0a:bb:78:67:e3:d6:86:
                    79:01:d8:4b:87:6c:04:f9:43:e7:93:39:7d:13:c9:
                    15:65:3f:2a:56:df:0c:a9:e8:15:83:ee:d5:8c:b5:
                    c3:b0:6d:12:9e:91:46:8b:9d:0b:76:0e:e9:04:49:
                    19:97:ca:45:63:57:66:18:7f:e1:33:35:7e:fe:07:
                    e5:83:6b:53:40:34:ed:24:64:49:d6:35:3f:f7:78:
                    0c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:26:BA:77:FC:EF:DF:C3:50:2E:08:8D:25:BE:91:27:FD:41:8B:CE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mia6d_zv38NQLgiNJb6RJ_1Bi84.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:4e:15:ab:ad:80:c2:59:ec:90:3b:c9:2f:eb:97:04:92:b8:
         7a:d3:55:e6:d0:fc:01:9d:3b:98:3f:49:50:6c:b2:99:d0:a7:
         65:ea:c6:94:23:a5:1c:26:33:9f:41:55:ab:44:fd:52:9a:b3:
         6f:e1:24:aa:5e:23:16:d5:ee:74:25:ef:40:2e:95:15:a0:2f:
         64:d5:21:fe:a0:63:61:43:08:24:58:ae:a2:a7:ce:ce:dd:36:
         78:20:51:6c:4a:c1:0b:de:f5:46:dc:cc:44:ba:dd:4c:b8:d1:
         21:33:12:3e:1d:87:8f:aa:58:c9:a0:2e:3e:6f:57:27:79:70:
         40:a9:d1:82:f1:5f:02:f2:80:be:e4:4a:a0:af:6d:78:33:d6:
         72:01:60:51:79:f3:c8:e0:d3:95:f2:32:f4:3c:35:cc:68:cf:
         89:99:43:37:50:7c:6a:3e:6d:90:11:3f:e5:21:f7:5b:94:a9:
         f2:99:0a:3c:3d:3b:d2:f2:db:85:d3:c6:9f:1e:74:b6:ac:07:
         2f:51:72:2e:61:a5:d1:5f:c0:40:46:37:55:cd:fe:b5:b2:94:
         9d:20:08:bc:72:39:3d:f5:cd:75:a0:ab:30:03:59:b7:18:7a:
         18:3e:0f:f2:da:f2:16:be:5e:62:5f:e4:47:da:4d:e9:24:d2:
         fa:ec:c2:ab
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjE4NDhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlBMjZCQTc3RkNFRkRG
QzM1MDJFMDg4RDI1QkU5MTI3RkQ0MThCQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXFWjLfs6rJepHUr2bjVWdFAa/RkgNvZ/2DwX8zt49gOqQF+9i
clxjVJtAqB7LfDGGrARYFR6UOaLSgRyfAPmnIhGBi+wvWP4QbFkWpBJuzGwX7x+M
KCVWrUa5lQL5p8H8zoGLpNk4ipVmkbd9FkgwIAmMOVTaf2NDvn1737b8+nsJVqpK
fbwMq/nnZzhX1SVsOvc76WVFgjkiKUBb233GKOdmZSHZWS1WYoAKCrt4Z+PWhnkB
2EuHbAT5Q+eTOX0TyRVlPypW3wyp6BWD7tWMtcOwbRKekUaLnQt2DukESRmXykVj
V2YYf+EzNX7+B+WDa1NANO0kZEnWNT/3eAz3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmia6d/zv38NQLgiNJb6RJ/1Bi84wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL21pYTZkX3p2MzhOUUxnaU5K
YjZSSl8xQmk4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6XwwDQYJKoZIhvcNAQELBQADggEBAHlOFautgMJZ7JA7yS/rlwSSuHrTVebQ/AGd
O5g/SVBsspnQp2XqxpQjpRwmM59BVatE/VKas2/hJKpeIxbV7nQl70AulRWgL2TV
If6gY2FDCCRYrqKnzs7dNnggUWxKwQve9UbczES63Uy40SEzEj4dh4+qWMmgLj5v
Vyd5cECp0YLxXwLygL7kSqCvbXgz1nIBYFF588jg05XyMvQ8Ncxoz4mZQzdQfGo+
bZARP+Uh91uUqfKZCjw9O9Ly24XTxp8edLasBy9Rci5hpdFfwEBGN1XN/rWylJ0g
CLxyOT31zXWgqzADWbcYehg+D/La8ha+XmJf5EfaTekk0vrswqs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org