Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s0z4wHhobUMDky2Qzo3aNHKio0A.roa
File:                     s0z4wHhobUMDky2Qzo3aNHKio0A.roa (raw, json)
Hash identifier:          VbP9MBF9uhYOvom6+LwQ6yHVbtChSNg4eDMYD5I/R/0=
Subject key identifier:   B3:4C:F8:C0:78:68:6D:43:03:93:2D:90:CE:8D:DA:34:72:A2:A3:40
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s0z4wHhobUMDky2Qzo3aNHKio0A.roa
Signing time:             Thu 15 Sep 2022 02:54:02 +0000
ROA not before:           Thu 15 Sep 2022 02:54:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.192.0/19 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:54:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B34CF8C078686D4303932D90CE8DDA3472A2A340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:4d:da:44:6c:3a:c1:28:55:57:cb:04:ab:
                    c7:04:37:e4:91:d3:43:03:6c:5c:94:00:bc:1b:5e:
                    0b:7a:8f:05:4b:0e:ec:4a:12:a8:82:d3:5b:5a:7e:
                    a8:31:47:1b:53:ed:e8:bd:60:70:77:28:dc:4e:43:
                    ac:b2:ba:ad:c4:70:88:27:0d:38:be:36:ac:d9:f2:
                    50:1e:ec:4b:2c:46:84:54:03:d2:1b:05:09:01:9e:
                    6c:63:eb:23:b1:5f:31:b0:4e:b1:33:2b:2e:65:e5:
                    0b:a0:69:43:bc:0c:b9:7b:58:30:dd:5e:13:a5:46:
                    af:32:08:0c:4e:65:ec:4c:ef:6f:3e:0d:d9:94:73:
                    3a:ae:7d:11:df:e0:cd:02:39:64:0a:f7:a5:18:b4:
                    ed:6e:07:d0:db:9d:3d:6f:2f:5a:c8:a7:0f:02:85:
                    d8:17:0b:a0:37:42:0e:da:ee:ef:c5:e7:c8:79:0b:
                    b7:5b:35:9b:34:2d:f1:31:43:2c:ea:17:63:f5:00:
                    01:32:de:64:b8:9b:77:d3:32:89:67:57:bc:83:37:
                    c2:3a:6d:94:8a:fe:98:23:04:01:f0:ad:57:7c:e7:
                    e3:3d:31:54:7f:c1:79:36:02:65:f0:a5:44:e9:23:
                    82:7c:83:24:53:90:89:4f:75:6f:5e:3a:f8:71:48:
                    ce:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4C:F8:C0:78:68:6D:43:03:93:2D:90:CE:8D:DA:34:72:A2:A3:40
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s0z4wHhobUMDky2Qzo3aNHKio0A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:73:2a:62:44:20:12:fe:16:9d:98:ce:9b:0c:f9:3c:15:cd:
         52:50:a2:07:ae:50:82:e1:f9:e6:f7:af:fe:2f:b7:f3:5c:f9:
         8a:c0:e0:5a:6c:21:54:17:83:c1:ae:06:30:9e:ad:64:6c:fe:
         b5:54:4e:1f:9c:ed:17:8a:2a:fb:0f:13:0f:54:52:fe:e7:3d:
         6b:97:ff:d4:50:f5:6a:2e:33:6e:92:dd:f8:1b:af:84:48:76:
         81:43:ef:fd:06:5f:07:85:bf:a3:61:6a:7c:2d:3e:6d:55:1a:
         aa:84:ad:51:19:71:a2:29:34:35:b6:ca:5d:7a:a9:0d:5b:99:
         39:1d:fc:f1:e7:6d:7f:49:94:e2:e2:00:84:5c:dc:ad:c7:80:
         17:92:6a:1c:16:3c:98:4a:49:11:d7:2c:de:c9:bf:55:9d:8c:
         11:af:68:f8:ca:cf:aa:bb:e6:a1:27:34:ac:67:a8:be:10:43:
         1a:dc:1b:65:52:21:f4:ca:63:e1:c1:0f:5b:88:59:6f:e9:3b:
         5a:a6:63:50:4f:a3:4b:17:d4:5c:16:f3:e3:ac:38:bc:57:a2:
         d5:22:f5:3f:8b:6e:96:96:61:ac:98:6e:a9:cc:50:b5:0c:e9:
         1c:6d:b3:5b:4b:12:a8:4a:9f:83:52:05:d3:31:a2:6a:e9:8d:
         03:b9:86:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org