Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sy06h4fRT_2e4thCFSNCXrGiBvo.roa
File:                     sy06h4fRT_2e4thCFSNCXrGiBvo.roa (raw, json)
Hash identifier:          lqZ86/4MCCVZej2OEXjpqg7SuDGvpjzlAgX1x++gAYg=
Subject key identifier:   B3:2D:3A:87:87:D1:4F:FD:9E:E2:D8:42:15:23:42:5E:B1:A2:06:FA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C3E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sy06h4fRT_2e4thCFSNCXrGiBvo.roa
Signing time:             Wed 29 Sep 2021 02:47:31 +0000
ROA not before:           Wed 29 Sep 2021 02:47:31 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.194.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7230 (0x1c3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:31 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B32D3A8787D14FFD9EE2D8421523425EB1A206FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:8a:22:47:1e:e4:ee:53:23:32:f1:55:5d:
                    cf:14:71:33:6b:87:41:7b:0d:22:10:97:0a:fa:bb:
                    cb:5d:a6:8c:1a:ea:9f:98:00:fc:bb:4e:27:1d:5a:
                    71:b0:58:2f:04:66:ff:3f:6b:05:9c:d6:b9:ca:3e:
                    28:d3:a8:da:3b:25:c5:4a:81:ea:dc:e7:e3:58:c3:
                    8b:b3:89:52:b9:60:69:24:ea:ef:45:4e:80:08:5f:
                    29:24:f1:06:b9:c1:22:d7:06:9b:cc:bb:6d:e3:94:
                    09:d2:bb:bb:5d:07:c1:8f:5f:f3:db:cb:df:6b:6c:
                    e1:4e:2b:52:7f:60:19:39:c7:fd:c3:b7:fa:5b:23:
                    54:72:e3:f9:29:b0:9c:52:84:a7:27:94:d0:9f:af:
                    6e:44:57:31:50:e7:2e:ff:fd:53:55:c4:01:ed:9b:
                    b9:1c:b8:6c:c8:f4:87:ca:95:dc:2a:04:f8:4d:45:
                    da:11:ed:67:11:27:dc:a9:34:b3:c3:78:55:24:b0:
                    f6:4b:8b:58:0a:f9:dd:4c:d1:03:86:de:34:ea:e7:
                    35:e3:01:8e:03:b9:d0:fe:be:c8:56:bb:5a:63:01:
                    5e:f9:4e:73:ae:a1:e2:aa:4c:18:91:5a:7f:13:8d:
                    0c:c7:73:56:dc:17:a0:16:e6:69:af:7a:1f:a6:26:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2D:3A:87:87:D1:4F:FD:9E:E2:D8:42:15:23:42:5E:B1:A2:06:FA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sy06h4fRT_2e4thCFSNCXrGiBvo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:a0:ae:e1:e6:5b:8c:06:b9:fc:ff:4d:e9:ee:e9:df:02:
         96:4e:ab:a0:e3:f6:e9:a4:59:cf:ab:5d:f0:0c:14:6b:36:4d:
         c6:5e:b3:ae:78:a1:1e:fe:e9:31:07:fc:1b:03:c0:71:2d:6f:
         03:c0:db:83:27:10:45:24:75:ad:49:84:b4:18:93:a3:b3:30:
         3b:ba:6b:08:c6:cf:a1:3a:51:f1:2e:c9:4a:5b:38:81:43:72:
         e5:5c:58:9d:5d:54:b1:6a:56:0e:e3:6b:11:41:f5:3e:a7:65:
         77:8a:b6:2d:be:d8:2e:b8:6c:a6:c1:f0:bf:9c:26:9f:60:b6:
         91:98:11:6b:e4:64:b9:e0:a2:3a:b9:41:d7:de:30:c7:d0:b2:
         7e:78:7f:bd:87:ec:6a:32:e9:5d:dc:06:3f:19:bc:ed:46:c0:
         fc:78:56:5d:83:f4:ce:7f:aa:56:f9:02:03:53:3c:44:9b:3b:
         4c:80:fb:aa:78:d4:70:aa:98:7f:f4:0b:29:22:77:44:6b:d5:
         4d:97:8b:36:5c:b5:17:c8:50:fc:b9:3b:ca:29:9c:04:ae:2a:
         a0:c3:31:c5:85:c2:21:aa:fe:70:fc:9d:af:4d:bc:00:d9:ee:
         36:7b:3a:dc:81:87:68:ee:d7:ee:f4:1e:da:8f:3a:c4:d3:c0:
         62:65:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org