Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/noC7aInyYfm1nS5mo-c8gtB0gjA.roa
File:                     noC7aInyYfm1nS5mo-c8gtB0gjA.roa (raw, json)
Hash identifier:          QjdslV5aVAmW1kQj3Qnnkvr1aix6G9n6ujjMRLHz7PA=
Subject key identifier:   9E:80:BB:68:89:F2:61:F9:B5:9D:2E:66:A3:E7:3C:82:D0:74:82:30
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2241
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/noC7aInyYfm1nS5mo-c8gtB0gjA.roa
Signing time:             Fri 25 Nov 2022 04:40:58 +0000
ROA not before:           Fri 25 Nov 2022 04:40:58 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.195.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8769 (0x2241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:58 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9E80BB6889F261F9B59D2E66A3E73C82D0748230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:45:4c:72:51:ad:b7:af:7f:b6:19:ac:5e:d7:
                    5d:87:a3:08:43:d0:c7:aa:35:86:18:84:f7:dc:49:
                    c9:b7:d6:25:3c:00:96:eb:0c:83:d8:14:cb:26:6f:
                    ac:76:08:4c:20:b2:6b:ae:c8:f2:9f:06:84:7e:c3:
                    43:9c:d9:f2:67:e1:a4:26:55:56:c3:f5:1c:3b:e0:
                    6a:b2:56:5d:dc:9f:c7:c5:2b:4d:36:ce:35:ce:fe:
                    01:22:f5:f4:f5:18:23:d1:ea:8e:a8:58:77:b7:31:
                    67:7d:2c:09:b9:5e:5c:4e:25:5a:18:2e:38:6c:37:
                    44:15:f5:fc:6d:d6:73:57:b6:d5:69:57:3d:fd:d0:
                    f4:4d:89:b2:f9:79:7e:b2:30:5c:c0:9b:ae:c3:f0:
                    e3:b6:6d:46:3b:00:75:86:1c:0e:2c:25:e1:ba:75:
                    e1:38:ac:c2:d5:f5:8b:66:5d:5d:de:15:be:3e:f2:
                    da:5e:6c:d5:00:c1:02:a6:32:0a:56:15:3e:4f:62:
                    8c:12:86:96:61:00:06:d7:a8:78:c7:c7:46:50:86:
                    71:11:7f:13:21:ca:76:58:18:71:e4:48:a6:64:39:
                    ed:9c:1d:cc:d6:03:f5:c4:87:62:ad:1d:d5:d3:7e:
                    9a:07:85:d1:95:4e:be:d0:e1:f7:08:5f:d5:ea:02:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:80:BB:68:89:F2:61:F9:B5:9D:2E:66:A3:E7:3C:82:D0:74:82:30
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/noC7aInyYfm1nS5mo-c8gtB0gjA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:a1:2a:4e:81:77:e7:3a:b0:86:63:78:3b:d3:a5:90:a9:05:
         44:f4:21:77:13:af:66:02:f9:8d:31:62:21:dd:23:2a:ad:ba:
         c1:44:5c:8c:72:66:7f:ed:ce:04:9c:4e:34:34:64:cc:a9:eb:
         21:04:b9:4e:45:98:42:91:29:0b:f3:d2:38:ef:f3:69:47:9a:
         c2:b5:1d:eb:f1:42:73:30:f5:2f:1f:a2:07:2e:4f:e6:99:22:
         71:73:41:84:c2:43:d1:8e:d0:15:30:d3:44:e1:15:f6:ab:94:
         d6:bd:03:e7:92:5e:8c:92:c3:18:27:91:04:03:c7:32:eb:49:
         fa:ee:03:c0:ae:c3:5e:5d:e1:65:d7:6a:bc:3d:23:89:95:74:
         a2:e0:ab:57:5f:3a:35:29:01:64:6f:2c:84:a7:4d:65:f3:10:
         bc:0c:e8:1c:14:17:36:a4:13:52:c0:70:4c:1d:6f:4f:ca:ef:
         07:25:4c:4d:95:7e:b0:c7:17:1f:36:05:7d:1e:f1:08:d3:bf:
         42:61:2d:fe:68:0a:21:02:a5:77:f6:93:63:b0:41:36:b1:6f:
         9f:ce:85:e6:72:54:67:01:43:67:19:c8:c4:3b:d8:25:7e:ac:
         17:7e:5e:65:c2:be:8b:45:cd:fb:87:d4:e6:b1:11:39:05:1e:
         14:9f:61:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org