Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qwap22OQ3y5V0n3gpudJQLIroMI.roa
File:                     qwap22OQ3y5V0n3gpudJQLIroMI.roa (raw, json)
Hash identifier:          8iUt35RLWH/CoRl8w2u1OneRrRRjkQ5+8paxWJ7aaC8=
Subject key identifier:   AB:06:A9:DB:63:90:DF:2E:55:D2:7D:E0:A6:E7:49:40:B2:2B:A0:C2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qwap22OQ3y5V0n3gpudJQLIroMI.roa
Signing time:             Thu 15 Sep 2022 02:46:22 +0000
ROA not before:           Thu 15 Sep 2022 02:46:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AB06A9DB6390DF2E55D27DE0A6E74940B22BA0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:61:c3:80:98:c0:b0:29:3a:85:0a:00:5c:
                    9b:ed:8c:07:58:a6:4b:70:55:4b:cc:16:48:c1:11:
                    40:c7:4d:fc:f3:ec:ae:86:73:ae:b2:f3:47:11:8a:
                    31:10:0d:b9:a4:41:7c:c7:b0:05:7d:ef:02:57:f0:
                    70:42:fd:5b:1b:f0:20:d1:d0:1a:2c:94:8c:70:15:
                    f6:1a:aa:77:bb:97:d5:eb:9a:72:52:8a:88:bf:8c:
                    a1:74:b4:10:e4:65:77:d3:56:e7:8e:e2:ba:af:f7:
                    d7:cf:7d:42:5a:90:e0:fd:96:ad:d0:a8:df:8b:c0:
                    88:00:f4:90:da:2b:36:e8:43:ef:4f:8c:cd:d9:d9:
                    d3:46:82:95:34:b5:00:b8:66:5e:05:6e:5b:d3:cb:
                    10:af:ee:3c:f8:11:47:71:27:eb:47:ea:d5:60:5b:
                    a4:f7:1d:4d:d2:79:a5:57:0a:41:52:ff:0f:8f:04:
                    52:f8:ae:8e:df:c7:82:a5:36:12:d3:72:af:be:55:
                    41:a9:08:0c:97:f0:f9:a5:88:19:a8:88:fa:92:04:
                    53:8c:0b:cc:00:e0:c7:9b:16:ac:e2:aa:b8:d7:8b:
                    37:90:71:64:50:d6:69:82:fa:c2:1d:b3:01:38:1f:
                    55:ad:18:b4:5f:c6:34:37:c2:56:b7:ef:d8:9f:a6:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:06:A9:DB:63:90:DF:2E:55:D2:7D:E0:A6:E7:49:40:B2:2B:A0:C2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qwap22OQ3y5V0n3gpudJQLIroMI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:de:6f:8d:72:c2:bd:e2:7b:01:42:04:a3:01:c8:a0:7d:c5:
         1f:51:18:f8:96:08:41:06:b8:98:c2:d2:06:7f:95:c5:a0:ad:
         e7:44:d9:6a:68:27:23:3a:cb:61:9f:93:a6:1f:ac:2a:ca:07:
         38:6f:87:38:60:cc:7d:3a:bc:86:e5:d1:2a:aa:45:5c:d4:84:
         d6:0a:8a:6d:c5:da:be:fd:24:cd:a6:6f:32:3e:62:68:d4:80:
         f9:fe:a8:cc:77:a5:9a:ab:c7:1c:ed:eb:76:d8:18:0f:e2:72:
         36:13:ce:8c:a7:a3:00:16:0e:fc:bf:7f:87:0f:0b:61:23:8d:
         68:e9:b1:20:69:7b:01:b3:11:9e:1d:88:22:54:7a:0a:3e:e4:
         ab:2a:b2:bf:32:19:f0:b9:52:e6:d1:bf:20:42:bc:42:56:c2:
         d9:72:42:b7:30:92:bd:5b:5c:db:e2:48:f3:46:ed:d7:cd:0d:
         b4:ad:04:38:5f:54:83:57:ee:28:e4:f9:df:81:a0:77:f3:3b:
         41:d1:5e:5d:42:57:4f:08:64:3f:80:34:8a:4e:58:5e:87:72:
         12:26:97:0e:c5:4f:8b:94:3c:29:96:60:b2:49:86:30:be:37:
         70:5a:92:dc:c5:35:fd:09:f5:af:dd:bf:11:ca:85:e5:b2:f3:
         95:16:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org