Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qa3jjeQV4L_32TSFoRMSuwmr1pY.roa
File:                     qa3jjeQV4L_32TSFoRMSuwmr1pY.roa (raw, json)
Hash identifier:          isFREH0cwGGoPG8RQGIDDm8UXaARluWBJl9TNmNVT0I=
Subject key identifier:   A9:AD:E3:8D:E4:15:E0:BF:F7:D9:34:85:A1:13:12:BB:09:AB:D6:96
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qa3jjeQV4L_32TSFoRMSuwmr1pY.roa
Signing time:             Thu 15 Sep 2022 02:52:36 +0000
ROA not before:           Thu 15 Sep 2022 02:52:36 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:36 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A9ADE38DE415E0BFF7D93485A11312BB09ABD696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:8a:9e:3f:35:89:60:9b:b6:07:85:a1:a3:
                    18:5c:4f:62:07:dc:f8:c0:6b:ce:90:16:81:c4:40:
                    22:59:84:2c:bc:58:48:e3:4c:9c:05:6d:0c:a0:5a:
                    e6:7d:c0:6a:de:e9:bb:0c:ca:88:d5:65:0a:9d:bf:
                    71:4b:40:bd:d2:20:2f:1f:79:c5:ba:49:c6:1f:0a:
                    39:82:1a:30:e3:36:c8:fd:e5:66:35:f3:44:21:f2:
                    ec:05:41:4b:32:ef:96:3e:46:13:3d:3f:a3:2e:08:
                    b0:2e:0f:36:96:91:a1:fe:03:15:92:6a:6f:8c:aa:
                    98:36:aa:5d:7f:38:c1:ff:ec:2c:12:c7:43:07:7c:
                    9f:f5:b3:45:66:14:b6:ef:9b:9f:dc:37:7e:ff:15:
                    52:fc:07:83:8a:f8:f6:61:74:98:1e:f1:e8:0d:79:
                    96:8f:70:76:c2:ef:08:7e:dc:db:7f:50:da:a0:0c:
                    aa:97:4f:aa:14:7c:fe:94:ea:cc:b1:80:49:b2:3f:
                    07:23:88:a2:84:59:07:a5:0e:61:92:4e:83:ac:ee:
                    d0:bd:ef:d6:37:45:ce:3d:38:59:01:40:a9:7a:b1:
                    f3:55:81:00:ff:b1:92:12:d4:74:80:d1:32:30:56:
                    45:cf:33:31:e1:b3:03:ad:31:80:a0:7b:a2:30:7b:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AD:E3:8D:E4:15:E0:BF:F7:D9:34:85:A1:13:12:BB:09:AB:D6:96
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qa3jjeQV4L_32TSFoRMSuwmr1pY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:30:17:56:71:eb:7a:7f:1d:84:c8:e4:c7:a9:ae:97:4d:43:
         6a:d9:37:ae:49:48:43:e6:81:88:6c:6c:24:05:f7:f9:ee:e2:
         a4:74:66:2d:2f:64:56:e0:b7:68:82:53:92:5b:79:c6:ef:73:
         8e:66:f9:61:2f:ba:60:45:df:94:4a:7b:f9:5d:62:d0:0c:7d:
         12:e1:5d:45:e0:51:e5:cd:81:d3:2e:33:61:24:b0:06:1e:36:
         04:4c:a4:da:5f:ea:46:49:36:f4:9d:e8:98:55:97:28:04:10:
         99:46:b7:62:7b:20:f6:bd:6e:10:8f:2e:cc:c4:8f:18:3f:23:
         24:ac:62:c6:3e:5a:3a:99:d3:5f:69:62:ce:e1:9e:30:24:27:
         e0:7b:48:c4:96:27:65:68:f9:45:b5:2b:3a:af:c4:ee:4e:52:
         3c:ad:fe:d2:d2:57:d4:f0:44:4b:21:a5:78:e3:cd:cc:4e:84:
         b3:22:0d:69:6a:0c:eb:b8:83:d2:a5:d5:43:62:9f:c3:51:e9:
         5e:db:07:08:e3:bf:6c:5c:70:aa:f3:bb:88:80:d1:b3:20:95:
         48:1a:b9:9a:8e:51:35:24:6e:6b:71:62:ab:c0:bc:2b:8b:17:
         bf:48:d6:59:b0:c4:54:14:f5:00:92:9d:2c:1b:a7:63:00:92:
         b3:3b:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org