Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ql4VwHtAkkNyxNj0DTlTP-D3F70.roa
File:                     ql4VwHtAkkNyxNj0DTlTP-D3F70.roa (raw, json)
Hash identifier:          Hvd5iKwR5UT19FbLrrLMXTcQKi3nNWjpTN1yFY9quG8=
Subject key identifier:   AA:5E:15:C0:7B:40:92:43:72:C4:D8:F4:0D:39:53:3F:E0:F7:17:BD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ql4VwHtAkkNyxNj0DTlTP-D3F70.roa
Signing time:             Thu 15 Sep 2022 02:56:06 +0000
ROA not before:           Thu 15 Sep 2022 02:56:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        211.76.123.0/25 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8100 (0x1fa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:56:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AA5E15C07B40924372C4D8F40D39533FE0F717BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3d:40:2c:aa:7b:e9:7a:53:4f:1a:d6:e3:79:
                    2b:07:3e:06:90:7b:71:3b:a7:d2:fe:79:3a:d9:d5:
                    2e:c6:82:1e:14:e5:8a:31:ae:cd:11:d4:41:20:9c:
                    5c:38:42:7b:38:aa:63:eb:fe:c9:0e:9c:ed:68:91:
                    bf:80:1f:f1:99:f5:25:fd:fd:25:05:c4:70:f4:59:
                    67:73:6c:16:41:f4:95:94:b1:8a:0f:53:54:53:18:
                    3d:c2:8c:d0:76:29:5a:72:f5:27:af:1a:bc:ee:9b:
                    c2:18:dd:cf:f2:a9:cc:85:c7:63:4e:d3:db:94:fc:
                    57:45:ea:0b:47:06:41:d3:b4:4f:24:82:6f:eb:4f:
                    40:40:27:67:16:84:84:c6:57:ee:75:fd:7b:87:ee:
                    f4:42:a5:b7:49:66:d3:27:a4:c7:08:8e:3a:1a:e6:
                    b9:9f:d1:57:77:16:49:30:89:be:e5:31:0c:59:e1:
                    ca:1c:fb:57:f1:c9:d4:36:e3:69:31:5a:0f:11:e9:
                    23:5c:21:d2:41:da:b6:47:04:12:64:aa:d0:99:78:
                    fc:14:e1:88:02:87:a9:b8:2d:da:1b:7b:fe:05:83:
                    fd:02:15:25:1f:45:7b:15:aa:40:60:c1:31:eb:4e:
                    61:0e:67:b8:e5:5a:31:d1:ba:21:69:5d:09:3a:08:
                    c5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5E:15:C0:7B:40:92:43:72:C4:D8:F4:0D:39:53:3F:E0:F7:17:BD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ql4VwHtAkkNyxNj0DTlTP-D3F70.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.123.0/25

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:cb:0f:be:8a:7f:ee:89:c9:df:df:b2:da:3f:0c:e9:ee:
         cf:c6:70:f3:6c:31:36:f9:0a:9c:1a:1f:ff:5b:14:7c:00:48:
         4e:ea:df:3a:8b:1e:58:b6:a5:dc:87:39:ac:28:0a:50:a1:79:
         e8:d5:53:10:bc:dc:dc:03:8c:dd:8e:49:30:d5:0f:15:f5:26:
         76:99:6a:6f:e4:6f:a4:10:30:65:c1:a7:d3:44:14:c5:b5:39:
         3d:91:a7:7f:28:03:52:af:cb:94:9c:8e:0d:5c:fc:41:70:dc:
         ed:79:c2:cf:02:fd:a3:73:0b:b4:b3:fa:ca:5f:07:dc:87:b3:
         77:a4:ba:28:a9:81:b7:e1:f8:fd:5c:18:c3:6e:4e:b6:bd:8d:
         9f:8c:c7:9e:9c:90:32:7e:b8:ee:a2:e3:61:8c:e2:94:1f:32:
         93:90:03:ce:c5:37:a6:8d:8f:6b:bb:70:9f:26:9e:d5:99:b9:
         b4:64:8c:94:82:aa:a9:dd:6e:14:28:74:bf:9f:52:16:a1:65:
         c2:dd:9c:50:7d:e7:08:a0:5b:6b:71:28:1e:5f:bc:34:bd:4a:
         50:6f:58:38:b8:8e:66:c1:96:32:52:34:e5:40:89:81:e2:bf:
         e4:c2:71:c2:91:24:2b:59:bd:e1:00:e5:50:36:08:1a:43:ac:
         db:43:07:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org