Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/saeY_1onKnoW202c1_5DrkQ6_hs.roa
File:                     saeY_1onKnoW202c1_5DrkQ6_hs.roa (raw, json)
Hash identifier:          4LeI5hTCRYIoiJ1nTsgKNJKdI2FIsq1gUxYM/wvZc5w=
Subject key identifier:   B1:A7:98:FF:5A:27:2A:7A:16:DB:4D:9C:D7:FE:43:AE:44:3A:FE:1B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       185D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/saeY_1onKnoW202c1_5DrkQ6_hs.roa
Signing time:             Sun 07 Feb 2021 12:28:41 +0000
ROA not before:           Sun 07 Feb 2021 12:28:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.192.204.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6237 (0x185d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:28:41 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B1A798FF5A272A7A16DB4D9CD7FE43AE443AFE1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:5d:c9:b4:2d:b8:c4:10:c7:ca:77:ee:41:
                    c3:71:49:8c:53:1e:c5:dc:0b:3e:ac:da:a8:d8:3a:
                    7d:50:a4:f8:46:8d:e5:40:de:13:ab:cc:26:ef:fd:
                    db:f8:85:29:71:e0:2b:4a:7e:2f:62:65:a9:e4:11:
                    a4:57:bd:a8:44:03:b2:d4:66:dc:1e:48:cf:b1:5b:
                    65:63:58:b7:db:3e:93:51:99:53:12:57:81:e4:ea:
                    a8:ad:82:ed:fe:86:88:3d:59:a7:97:64:49:58:f7:
                    58:aa:3a:2a:3d:45:5e:db:3b:4d:ff:54:ea:cf:bd:
                    77:2b:5a:ea:e5:11:af:9d:75:eb:d1:ac:98:d4:68:
                    c2:87:6b:4c:70:11:58:d9:27:48:84:a8:c0:d8:81:
                    7e:fb:2c:bd:72:0f:e3:82:44:3a:23:bd:2e:7e:42:
                    8b:c9:18:c8:e0:16:d0:8a:4b:f0:d6:90:e4:dc:1d:
                    05:0e:6d:1b:0e:30:f0:a5:87:df:89:0b:f4:eb:8b:
                    66:16:51:f9:ed:8c:95:54:5f:2d:73:74:34:06:ab:
                    f7:c0:fe:c0:1a:e1:f8:2d:65:6a:0f:f0:e5:a4:04:
                    89:11:1e:fd:2f:7a:1e:f2:8b:ed:a5:88:c1:13:d7:
                    73:bf:ab:e5:c6:de:46:57:72:7c:3e:81:1c:2f:4f:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A7:98:FF:5A:27:2A:7A:16:DB:4D:9C:D7:FE:43:AE:44:3A:FE:1B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/saeY_1onKnoW202c1_5DrkQ6_hs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:f9:66:f8:33:95:42:59:93:32:08:b9:11:50:33:be:e1:01:
         9b:ec:59:b4:dc:b7:bc:2d:79:5f:8b:5b:bf:17:f6:4c:3f:23:
         9b:ea:c4:c7:38:32:3e:51:6c:e1:b5:fd:16:13:52:3f:07:ca:
         13:79:f3:19:7e:51:66:85:35:76:aa:3a:ed:53:63:59:ae:f6:
         64:f5:bd:60:95:ef:aa:22:63:f9:39:82:b8:bc:8c:4e:49:2a:
         28:f1:c8:74:d2:bd:9c:ff:71:86:be:35:63:eb:17:53:1f:14:
         99:0e:40:55:93:d6:29:40:24:24:f7:4c:ed:f7:da:1d:09:63:
         ee:90:41:cb:c5:99:4e:ad:34:22:1d:83:8d:6c:41:81:26:af:
         b5:68:e5:f8:5b:04:47:ae:e1:81:c5:c5:25:6f:3b:4a:04:b6:
         d6:a6:56:67:60:95:fa:5a:72:cd:06:33:43:35:e0:e7:41:05:
         7e:78:47:08:64:a5:fc:1a:a3:77:22:96:35:75:37:55:31:8a:
         e9:1c:fb:89:25:b8:cf:1a:8d:2b:2c:39:34:0d:46:00:da:29:
         95:b2:d8:63:96:6f:5d:5f:4a:dc:b7:b2:5c:80:6d:c1:72:2b:
         6e:22:e0:4d:07:42:31:2d:0f:b8:71:63:37:7a:79:d5:52:cf:
         5b:14:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:29 2023 by rpki-client on console-ams.rpki-client.org