Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/svthbgimH0O2u0BkJ8GNKj4w6Lw.roa
File:                     svthbgimH0O2u0BkJ8GNKj4w6Lw.roa (raw, json)
Hash identifier:          lTo7lmm/tyQq9WxgT09ZPG+YpdKYKrHhaO/FjJHyreM=
Subject key identifier:   B2:FB:61:6E:08:A6:1F:43:B6:BB:40:64:27:C1:8D:2A:3E:30:E8:BC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       157B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/svthbgimH0O2u0BkJ8GNKj4w6Lw.roa
Signing time:             Sun 07 Feb 2021 12:04:52 +0000
ROA not before:           Sun 07 Feb 2021 12:04:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        123.195.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5499 (0x157b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:04:52 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B2FB616E08A61F43B6BB406427C18D2A3E30E8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:c9:07:ba:e8:4c:a0:28:1c:e1:b5:67:31:
                    23:e5:33:c3:ea:6a:ce:e3:18:02:9b:b9:9b:8f:47:
                    8d:24:37:99:96:e1:0a:c5:5b:11:b1:48:e7:38:b2:
                    65:22:a8:5a:43:63:a7:70:30:1b:b3:5a:41:b1:3d:
                    c3:a0:e3:66:2d:cc:24:15:0a:32:7f:54:f8:a8:93:
                    4f:8f:5d:9e:08:69:cd:32:b1:2e:c5:95:7a:ee:d3:
                    0c:96:1e:78:00:fc:6d:f5:da:b1:ed:c0:bc:01:db:
                    48:c6:97:7e:f1:75:a6:5c:52:91:8f:90:e0:88:c2:
                    0c:64:38:05:9f:83:ee:69:06:d4:75:38:12:e9:97:
                    94:ef:c3:67:c9:54:ec:9c:86:9a:b9:5e:59:81:a1:
                    e3:fd:dd:ee:1e:68:09:df:19:54:9c:7f:70:7e:9e:
                    13:af:23:49:09:1c:68:3e:c4:de:c8:96:a8:2c:23:
                    45:a5:0d:17:c3:6c:e4:14:f0:ba:e8:c5:5f:1d:7d:
                    ed:87:2c:04:81:31:08:97:bc:a7:f0:81:01:9b:64:
                    19:c7:7a:67:17:b6:02:a2:16:53:c7:98:6e:8d:27:
                    cb:1c:1f:30:ac:cd:e8:89:5a:5b:70:0c:33:11:c6:
                    4b:98:30:aa:1c:02:78:26:2f:d2:bd:39:bb:6b:ec:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FB:61:6E:08:A6:1F:43:B6:BB:40:64:27:C1:8D:2A:3E:30:E8:BC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/svthbgimH0O2u0BkJ8GNKj4w6Lw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:f6:25:2b:78:2f:76:d9:01:6f:32:93:29:d6:53:01:e2:e4:
         13:e6:29:ca:70:03:0e:83:18:5e:b8:d3:b0:26:f1:ba:f4:40:
         48:7c:4f:ae:0f:f4:aa:1d:63:77:ed:7d:4c:67:65:d7:9c:2e:
         52:14:89:44:af:84:14:1d:50:cf:57:02:e2:23:14:a7:76:c8:
         d2:96:cd:34:92:07:7a:1d:96:53:5c:2d:57:20:c3:01:4c:fe:
         80:ad:cb:b3:f6:5b:a9:b5:95:68:bd:53:b2:bb:3f:a4:43:9b:
         6b:12:c9:98:22:d5:34:23:35:6a:aa:72:cd:2a:c9:e1:60:03:
         0d:c8:30:ac:dd:18:84:b4:04:71:a3:8a:18:7d:85:fd:93:56:
         f9:57:7a:4e:50:3e:95:a4:67:39:01:53:3a:3c:f3:51:fd:99:
         59:ea:00:16:45:dc:f1:e9:ae:c5:19:55:82:91:0a:ce:47:d2:
         9c:25:42:4f:e7:89:bd:fe:d7:f5:72:42:3b:ce:f4:7d:e8:81:
         dc:93:b7:89:73:3b:43:d9:c3:ef:10:b3:21:50:35:a2:40:bc:
         d7:d2:74:1d:8b:57:9b:ca:dc:83:91:85:ea:ac:f7:1b:7b:c9:
         bf:2c:20:81:75:24:ee:c1:a8:9e:54:86:93:aa:6f:af:81:35:
         f3:06:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:29 2023 by rpki-client on console-ams.rpki-client.org