Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rBMqzwClVP7Ks88UuaUdNa8ZXNk.roa
File:                     rBMqzwClVP7Ks88UuaUdNa8ZXNk.roa (raw, json)
Hash identifier:          8GP1YAnLFDsf6Szqo2zqHeRhDnX7CXbdYMDiP8DE31k=
Subject key identifier:   AC:13:2A:CF:00:A5:54:FE:CA:B3:CF:14:B9:A5:1D:35:AF:19:5C:D9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       221E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rBMqzwClVP7Ks88UuaUdNa8ZXNk.roa
Signing time:             Fri 25 Nov 2022 04:40:47 +0000
ROA not before:           Fri 25 Nov 2022 04:40:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.196.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8734 (0x221e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AC132ACF00A554FECAB3CF14B9A51D35AF195CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:86:4b:ed:52:50:3a:bc:7e:82:17:9b:d4:
                    e4:74:af:3a:c6:e1:79:be:42:f8:11:71:db:65:48:
                    2b:0b:5f:b5:3b:d0:2b:78:c6:ef:98:78:7f:16:89:
                    95:23:1c:26:c3:24:e6:13:fd:62:aa:3e:86:8b:16:
                    48:c1:ea:a4:96:67:3a:2f:90:7a:57:1b:b3:fd:60:
                    24:82:3a:11:ef:fa:5a:6c:cb:9d:c5:da:b1:60:19:
                    23:46:5a:9e:47:43:fc:70:99:c0:5f:2f:be:0e:9b:
                    47:2d:e3:b0:b9:1d:8f:7c:60:81:3b:97:b4:5e:17:
                    ec:02:32:76:36:a8:6b:1c:85:a1:79:27:ea:de:9b:
                    ce:b2:1e:1a:73:21:5d:9a:8a:9f:f4:0c:9d:1b:24:
                    84:5b:f6:e7:b5:5e:7f:85:9c:fc:4a:a4:ee:46:05:
                    ff:d9:1f:d1:8a:5b:b6:ef:80:40:71:4e:6d:d5:b2:
                    b9:58:42:80:3e:f7:57:77:0f:0a:24:29:c6:7f:59:
                    0a:2a:1c:a1:35:ba:a7:99:e5:c0:0c:9a:f1:9e:ee:
                    81:99:11:22:99:b3:94:a5:b7:a4:f1:ae:77:09:e4:
                    11:12:f2:1c:13:71:30:fb:c6:dc:aa:38:5f:a1:a4:
                    b8:01:67:ce:aa:43:ea:28:7f:56:72:31:c5:2b:7c:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:13:2A:CF:00:A5:54:FE:CA:B3:CF:14:B9:A5:1D:35:AF:19:5C:D9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rBMqzwClVP7Ks88UuaUdNa8ZXNk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:48:c4:63:75:b3:87:64:b2:7a:2e:08:6c:df:39:41:9c:97:
         f9:a7:8f:3b:ef:5f:81:e8:be:ad:bc:62:6d:2c:e8:14:ee:36:
         8f:c0:eb:5c:d7:20:a5:45:7b:0d:e3:7c:dd:8c:ea:ed:e6:ff:
         99:ad:0a:ce:a4:97:e3:7c:32:92:48:f9:4d:d7:a7:30:b3:5b:
         83:d6:64:00:6a:3b:a4:8e:3d:0d:a2:4b:83:12:93:73:10:e4:
         64:3e:7b:e1:c4:2e:6c:de:4c:89:ae:5d:5e:2c:e0:ec:e9:3e:
         21:3e:c9:80:92:0d:9b:4b:67:08:26:08:65:08:ab:6c:6e:fc:
         48:a6:88:66:f0:02:98:d6:7d:61:c7:e6:fb:21:32:cc:66:76:
         78:e0:1a:cf:2c:6d:6d:a8:5f:82:6c:dd:b3:9b:e5:5f:32:41:
         85:b1:0a:68:97:0c:7a:1a:67:e6:3f:4b:6c:ff:b3:90:6d:eb:
         02:24:75:82:35:f8:29:21:92:4d:05:ab:07:b1:45:3e:4b:95:
         d2:d1:d6:c6:81:70:56:8f:e7:01:38:9c:3d:5f:55:89:dd:c1:
         03:ca:41:4e:de:84:81:e2:82:3b:45:43:c1:63:24:53:c1:35:
         9e:80:fb:b8:90:3f:49:f9:8d:1e:b7:36:29:ae:5f:8c:08:c2:
         6a:f3:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org