Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nb9q9JnyB5qtz6GS3hX9IrvFWhM.roa
File:                     nb9q9JnyB5qtz6GS3hX9IrvFWhM.roa (raw, json)
Hash identifier:          3GebZUeDKc5llTE4V4YDutbM1km+QHk0ypdHVypLIa4=
Subject key identifier:   9D:BF:6A:F4:99:F2:07:9A:AD:CF:A1:92:DE:15:FD:22:BB:C5:5A:13
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17EB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nb9q9JnyB5qtz6GS3hX9IrvFWhM.roa
Signing time:             Sun 07 Feb 2021 12:24:42 +0000
ROA not before:           Sun 07 Feb 2021 12:24:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.130.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6123 (0x17eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:24:42 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9DBF6AF499F2079AADCFA192DE15FD22BBC55A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:59:e0:b3:2d:cd:b3:d3:17:d8:a5:58:d5:
                    94:53:45:6c:d1:b5:e9:ab:09:27:8c:8c:01:6e:40:
                    4b:80:a3:eb:5c:54:b4:81:a3:67:30:3f:39:bf:07:
                    d8:f2:66:21:36:20:60:7e:3a:0c:78:c6:de:12:ef:
                    0a:40:ec:f9:aa:52:2a:14:d8:57:e5:8d:24:d8:b7:
                    9e:18:c3:a7:9e:61:c0:4f:49:72:6d:90:ff:5c:7c:
                    03:df:41:61:0b:10:a9:a7:3b:5b:63:da:11:e5:90:
                    3e:b4:83:65:a2:2d:c5:c7:e4:9e:98:d3:88:ba:23:
                    b7:52:83:5f:66:9c:d3:c1:60:07:fb:e6:69:4d:8a:
                    d5:ee:0c:e0:5e:b3:c9:13:6f:24:86:f8:4c:d1:0f:
                    6c:0e:1c:e2:fa:6e:87:6b:5d:4b:b6:f1:27:df:b7:
                    18:84:05:0c:76:f6:66:95:c0:62:e7:63:c1:06:8d:
                    45:21:56:70:42:a2:19:fa:40:9c:93:8c:5c:bf:aa:
                    22:17:66:f7:98:a8:b9:03:0a:b9:9d:65:84:de:67:
                    6b:95:28:13:49:c3:3e:62:32:10:cf:42:7c:f6:18:
                    35:53:56:c4:d8:e3:20:6b:92:f2:4b:d0:80:41:37:
                    3e:f7:ff:6d:52:9a:87:8e:2d:30:86:dd:6a:d9:e3:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:6A:F4:99:F2:07:9A:AD:CF:A1:92:DE:15:FD:22:BB:C5:5A:13
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nb9q9JnyB5qtz6GS3hX9IrvFWhM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:c0:7d:84:5c:d9:ab:2a:db:26:c3:4f:ba:94:9f:c8:9b:6e:
         c6:8d:e0:53:2e:6d:18:4b:36:5b:d1:c0:01:a9:1b:a7:12:f4:
         17:c7:a4:3d:33:a4:5f:22:80:8a:4c:a9:47:f0:0b:56:4f:11:
         97:fa:fc:b9:79:9d:89:6d:d4:b3:01:c3:5f:73:17:23:fc:2c:
         97:69:3a:a5:5c:e6:22:4c:6a:68:d7:c4:ab:f3:42:62:9f:54:
         62:18:71:f9:a1:d5:e8:b3:f5:cd:73:fb:d6:42:45:fb:80:69:
         89:29:42:e5:ae:01:f6:83:28:96:43:e9:bc:49:33:9c:e5:21:
         e1:e6:b9:86:56:2e:03:18:19:63:d4:a6:fe:31:9d:42:80:f3:
         5e:1f:ac:07:9f:ad:a8:37:b6:81:76:f7:4b:e8:8d:b3:05:c2:
         03:f8:08:9e:04:68:1c:d1:0c:13:f6:ec:b0:87:82:34:e4:6e:
         21:5a:58:d0:ad:20:54:90:ee:a6:9f:cc:4d:eb:48:cc:ae:eb:
         ab:93:3e:b7:df:6c:67:cd:8b:ce:b2:be:d5:04:69:93:c6:94:
         12:be:8d:a2:77:ed:de:11:bb:01:24:2b:42:8d:95:c9:bb:5d:
         d2:ea:e0:3e:a9:99:32:23:0f:6d:7c:de:d1:4e:fd:1b:83:56:
         d8:85:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org