Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pfSO3CqEHyk7V6Yp60E3y-J_yPY.roa
File:                     pfSO3CqEHyk7V6Yp60E3y-J_yPY.roa (raw, json)
Hash identifier:          LpKUMs90j6CPuV/rfP63g1mtN8zL/q472EBE6uRafpc=
Subject key identifier:   A5:F4:8E:DC:2A:84:1F:29:3B:57:A6:29:EB:41:37:CB:E2:7F:C8:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pfSO3CqEHyk7V6Yp60E3y-J_yPY.roa
Signing time:             Thu 15 Sep 2022 02:53:32 +0000
ROA not before:           Thu 15 Sep 2022 02:53:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.112.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A5F48EDC2A841F293B57A629EB4137CBE27FC8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:77:41:d6:8e:5d:ca:57:c2:6d:05:06:f6:
                    08:9a:49:af:a8:4c:2a:48:15:5c:fb:b0:f2:40:c6:
                    2d:21:19:3d:05:56:fe:7e:34:1b:ff:aa:15:68:d7:
                    10:2d:ef:45:af:93:7c:af:0e:e0:38:78:fa:b4:85:
                    c8:61:0a:00:c4:dd:fa:34:19:0c:8e:8f:2f:41:ca:
                    5a:c1:99:9a:53:40:03:55:39:4e:cd:2f:ca:70:33:
                    0b:71:af:6b:29:b2:77:50:7c:47:07:41:9b:81:98:
                    ac:6e:1e:12:5f:5e:cb:86:2f:bf:bd:54:36:b8:35:
                    12:6c:7e:64:56:9e:db:8e:da:ae:3c:ea:92:21:34:
                    8f:a3:2d:ad:ba:4b:9b:83:9c:43:2b:f7:e4:27:3d:
                    2e:97:9c:fd:10:23:24:f4:8f:18:46:6f:83:ae:42:
                    fc:73:b5:6c:35:f5:4f:c4:5c:6c:3c:00:04:9c:56:
                    e2:e0:5c:19:9a:c1:af:ae:52:04:a5:b9:dd:d3:71:
                    e4:3e:5a:e8:38:57:5e:25:18:cc:7a:50:fd:2f:9c:
                    d2:24:8b:16:7a:57:be:49:2c:bf:e3:46:af:41:3a:
                    42:7d:68:43:5d:70:cf:07:64:2a:c6:e9:69:be:0d:
                    c8:b9:9e:59:73:0e:85:a6:25:a5:00:15:bf:f5:aa:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F4:8E:DC:2A:84:1F:29:3B:57:A6:29:EB:41:37:CB:E2:7F:C8:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pfSO3CqEHyk7V6Yp60E3y-J_yPY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:21:80:88:6d:37:49:13:86:80:a4:38:a1:89:87:72:03:
         be:f3:e0:23:23:77:7a:16:95:70:c7:2d:89:24:c9:f7:20:c9:
         ad:03:2b:11:11:00:f8:51:99:4c:34:83:4f:16:e5:cd:0e:74:
         d0:88:08:b3:40:de:aa:80:b7:ee:47:b1:c4:c2:25:0e:3c:2c:
         3d:e2:f4:b1:7b:82:f8:8a:b8:43:80:c0:ac:9e:e7:57:27:84:
         11:f7:f5:cb:39:b8:32:50:8e:f5:08:14:db:9f:26:3e:d0:9e:
         f7:6a:a6:b2:a7:dd:f3:a4:7d:1d:18:ca:65:02:83:80:34:f2:
         8b:30:21:35:3e:e5:e3:df:99:02:50:38:30:47:99:fe:c3:76:
         21:23:44:42:a7:80:89:5d:85:f3:d4:83:6b:42:11:48:29:43:
         68:35:3d:e7:da:1a:9e:3d:c4:1a:58:39:8f:c9:d4:75:91:b5:
         77:d5:1a:17:be:98:2a:59:1f:37:21:77:2a:a9:a8:91:98:ee:
         d1:8d:8c:98:1f:10:cc:b0:cd:cd:18:ec:2d:b5:f8:ed:3a:3f:
         e0:c6:5e:ce:aa:e4:2c:fc:76:b4:64:60:9c:58:28:09:55:f7:
         58:ba:aa:85:c7:ff:ec:68:e2:26:b9:a9:7b:1d:7d:36:dd:24:
         a5:0c:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:40 2024 by rpki-client on console-ams.rpki-client.org