Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nMerO1WzTBJBKyI1O93_AQBPbz4.roa
File:                     nMerO1WzTBJBKyI1O93_AQBPbz4.roa (raw, json)
Hash identifier:          RxU6YG5hypbNIyJGhSiprpHny7VLIUk/rjv6tl+lnnE=
Subject key identifier:   9C:C7:AB:3B:55:B3:4C:12:41:2B:22:35:3B:DD:FF:01:00:4F:6F:3E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C3D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nMerO1WzTBJBKyI1O93_AQBPbz4.roa
Signing time:             Wed 29 Sep 2021 02:47:31 +0000
ROA not before:           Wed 29 Sep 2021 02:47:31 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7229 (0x1c3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:31 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9CC7AB3B55B34C12412B22353BDDFF01004F6F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:31:67:52:bf:4a:71:3c:e4:bb:f6:32:ae:
                    5c:ca:84:36:81:77:79:b0:41:6d:bc:9f:b5:d5:61:
                    45:3c:97:7b:57:e9:7b:ba:fc:8a:30:9b:e8:7c:49:
                    c3:9a:4b:2d:23:bf:94:4b:a7:ca:7e:ca:94:e0:90:
                    c5:1f:62:98:dc:51:5f:56:ce:e9:11:47:cf:9e:13:
                    c7:03:06:f6:eb:f3:41:70:96:b7:74:8d:40:b8:41:
                    da:c8:30:db:e6:e8:bb:13:b0:d4:10:5f:e0:be:b7:
                    f2:06:6e:a9:9e:99:76:59:e9:f1:97:21:91:ca:44:
                    3b:fa:40:12:2f:5e:66:c5:f7:3e:ab:1b:54:17:6c:
                    a1:3c:41:a1:d1:26:d3:ba:f6:c7:d2:83:06:35:e1:
                    b9:64:ce:fe:8a:1e:bc:c8:24:cd:7d:89:88:25:e5:
                    c4:49:c1:d8:70:ff:4a:52:1f:ad:b6:35:db:7f:80:
                    59:cc:e5:bc:06:6a:26:7a:c0:cb:32:4b:bd:70:9a:
                    cd:cf:10:53:23:e9:93:08:4c:4f:7b:75:b2:e5:4e:
                    63:db:a8:8b:a5:3a:69:77:93:95:87:3f:9d:c3:37:
                    21:56:8e:16:b7:fe:34:04:c2:ea:29:63:5a:d3:00:
                    d5:bc:c2:93:fd:93:67:aa:92:60:d6:ef:d8:a0:ea:
                    c0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C7:AB:3B:55:B3:4C:12:41:2B:22:35:3B:DD:FF:01:00:4F:6F:3E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nMerO1WzTBJBKyI1O93_AQBPbz4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:28:2a:f5:1e:40:46:a7:d0:27:04:fa:27:41:25:f6:95:47:
         da:15:8e:28:11:03:3e:58:2d:5d:a1:92:d2:a9:c5:27:0c:5b:
         28:27:15:46:23:74:dd:35:ac:c3:e7:8e:22:22:b2:ce:94:fb:
         61:4d:6e:cb:a7:ad:b9:ac:ee:cc:04:6d:4e:9f:bd:7b:17:fa:
         f5:b3:01:82:0c:3c:21:d4:b0:c0:c5:77:b0:dc:e3:7e:12:45:
         7d:0f:7f:f5:e2:8b:75:97:8c:1d:d1:b3:8f:fc:2d:bd:76:29:
         b0:e7:b0:42:6e:b4:37:ab:01:ea:a5:cb:4b:03:d8:82:49:12:
         39:ec:bf:e2:6f:95:83:d5:75:9e:57:c1:73:15:08:6d:15:7f:
         61:0f:a9:42:7d:d9:0e:40:36:65:00:47:20:eb:7c:37:f3:76:
         df:ba:1c:a3:af:58:c1:e8:5a:3a:cf:d2:17:b7:8b:5c:aa:f4:
         a4:be:ed:e4:69:09:b7:40:46:58:53:f0:f0:7c:35:d8:39:00:
         94:0f:5e:f3:e5:f4:0c:4e:7b:c0:f6:0b:12:a5:c5:58:77:47:
         ab:b2:8c:a1:8e:db:05:1d:6f:4c:19:05:c6:2b:e8:48:8d:f8:
         2e:8b:8e:e7:a5:7d:40:32:1d:46:27:19:54:0b:86:47:a0:88:
         77:81:39:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org