Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rK6k92pz_uHzo-bMxvpq6t_3dMA.roa
File:                     rK6k92pz_uHzo-bMxvpq6t_3dMA.roa (raw, json)
Hash identifier:          bC2dHii6OPHLxdaVMPZqVD46u8eq1Ak3zsi20Ptqjws=
Subject key identifier:   AC:AE:A4:F7:6A:73:FE:E1:F3:A3:E6:CC:C6:FA:6A:EA:DF:F7:74:C0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16F1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rK6k92pz_uHzo-bMxvpq6t_3dMA.roa
Signing time:             Sun 07 Feb 2021 12:15:30 +0000
ROA not before:           Sun 07 Feb 2021 12:15:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.48.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5873 (0x16f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:15:30 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ACAEA4F76A73FEE1F3A3E6CCC6FA6AEADFF774C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:f2:1a:6f:e3:26:92:11:bc:12:41:1b:0d:
                    99:25:93:72:ba:79:b2:4a:ec:c9:ba:4d:dc:82:7b:
                    9d:72:cc:fa:be:a4:3a:20:46:b1:ee:46:67:75:2e:
                    85:22:70:5f:e4:57:d1:40:90:84:38:54:f1:cf:88:
                    f8:91:fc:32:49:48:76:f2:88:85:26:09:d7:f6:33:
                    bd:87:09:64:bd:e0:8d:8c:ff:69:23:dd:13:cc:01:
                    f8:90:70:b9:d2:98:ec:5f:be:88:a9:9a:24:fb:32:
                    c3:20:29:50:e7:73:1e:5a:d7:60:44:53:9b:45:d4:
                    be:1f:94:a3:9d:4f:a9:15:09:b9:18:42:e0:43:71:
                    33:53:66:be:80:b3:a7:23:52:87:f3:2a:4b:9d:21:
                    a0:d7:d8:29:bf:73:f6:bd:2c:45:8a:dd:9b:12:d1:
                    af:62:c6:e9:b1:dd:5d:31:60:2d:bc:72:cb:c7:12:
                    12:bf:f0:f8:79:21:89:02:18:34:47:06:52:28:cb:
                    f8:72:95:01:01:6f:4c:09:98:7f:df:46:0a:8f:43:
                    07:2f:e9:29:58:34:21:45:ea:b4:4c:34:b4:45:a6:
                    26:02:8d:54:c0:cc:e4:7c:f6:03:59:46:0f:3e:7d:
                    4a:68:49:f8:72:9d:80:11:57:25:84:30:3a:67:82:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AE:A4:F7:6A:73:FE:E1:F3:A3:E6:CC:C6:FA:6A:EA:DF:F7:74:C0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rK6k92pz_uHzo-bMxvpq6t_3dMA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:6b:94:78:c4:60:7a:5f:e4:04:35:cf:c0:38:b3:9a:01:
         ed:2e:d4:ed:e3:a9:22:f9:c5:da:fe:ee:81:c8:7c:2a:da:6f:
         87:58:b5:ed:76:60:86:d2:e1:bf:d5:1f:b2:31:ce:55:fa:33:
         9a:5c:ac:28:fd:61:3c:fd:4f:e8:a8:d5:d4:a1:97:fb:19:c0:
         82:0d:30:c2:07:5b:5b:27:d8:03:63:d4:a8:3c:5d:d5:12:40:
         2b:34:b1:dc:ce:40:50:44:83:f2:2a:3e:0f:1d:25:7b:eb:5b:
         85:95:41:ae:1f:47:2d:c3:0c:c4:62:c8:7a:42:01:81:7b:17:
         63:f0:e2:64:a4:44:0e:20:09:72:bf:17:18:22:7e:a2:ae:35:
         5a:f7:0b:cd:0a:02:93:59:ed:07:4a:f7:53:5f:58:a1:2c:03:
         d1:73:20:b8:07:0b:9d:a1:41:60:de:24:b6:be:62:7e:dc:a5:
         de:46:b3:b7:60:89:3a:2a:eb:6c:88:78:26:c0:5f:7f:c8:04:
         7c:92:df:3d:a8:8b:6c:9e:e7:b8:d2:a7:f8:f8:b6:c2:a7:11:
         ef:f8:7e:9b:1e:9f:69:b0:8e:3b:dc:b1:22:fe:6e:38:2a:c9:
         ef:8c:7e:a9:5f:64:a6:7b:71:1e:b2:a9:79:f2:53:a3:1a:d3:
         b0:60:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org