Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tBtvtLeJb4gQvs0puEUhKhospLs.roa
File:                     tBtvtLeJb4gQvs0puEUhKhospLs.roa (raw, json)
Hash identifier:          09fuORTGlwm/QSPa0cpOuArs9JBikaM0vN02nNMfvdU=
Subject key identifier:   B4:1B:6F:B4:B7:89:6F:88:10:BE:CD:29:B8:45:21:2A:1A:2C:A4:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tBtvtLeJb4gQvs0puEUhKhospLs.roa
Signing time:             Thu 15 Sep 2022 02:52:21 +0000
ROA not before:           Thu 15 Sep 2022 02:52:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.194.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B41B6FB4B7896F8810BECD29B845212A1A2CA4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:1c:9d:24:91:0a:d9:20:55:78:0a:4d:b3:
                    86:57:7c:94:56:93:07:84:e9:ce:00:59:b7:f2:80:
                    9e:6c:aa:d0:f1:fa:09:ac:7d:ce:e8:bc:e1:15:b6:
                    96:1d:a5:b6:53:51:3a:3f:01:8a:a4:da:60:bb:db:
                    77:88:ca:a7:b3:ce:3b:1e:1d:53:bb:a4:fc:e0:bb:
                    67:84:3d:48:94:31:94:43:e1:8f:d9:75:de:9b:d7:
                    9b:34:a2:97:39:be:86:9e:f4:e0:b5:c7:98:a9:4f:
                    5b:e1:a3:75:38:d3:7b:d7:ee:f9:e9:33:58:0c:4a:
                    51:67:77:97:d7:b7:26:e7:ab:e9:e7:40:09:b3:6c:
                    26:27:d8:18:37:78:e2:48:b7:a2:cb:27:02:ff:dd:
                    40:5f:4f:24:2c:14:95:22:24:9a:4c:20:c5:d6:e7:
                    12:8a:0e:91:b2:96:29:74:33:74:66:f4:47:91:e1:
                    6d:88:98:a4:92:0d:41:f0:90:a8:53:31:55:f9:d4:
                    6b:a9:8e:26:ec:5c:0b:0f:e0:4c:c8:9e:c3:91:f8:
                    02:e9:39:a5:4e:d7:a8:1e:a8:b1:14:e1:5a:8d:cd:
                    65:f7:23:ba:40:6c:44:85:27:35:ac:c8:5b:ba:85:
                    bb:93:d4:96:81:ea:ce:09:3d:ce:f6:5a:5d:3c:3d:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:6F:B4:B7:89:6F:88:10:BE:CD:29:B8:45:21:2A:1A:2C:A4:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tBtvtLeJb4gQvs0puEUhKhospLs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:b6:a9:00:d2:2d:69:9d:57:79:04:86:36:d5:c5:e5:42:68:
         29:bd:af:57:e7:9a:aa:a9:93:a8:14:da:73:2a:1a:37:54:fc:
         83:07:0f:8e:3c:1b:03:c4:af:a3:4e:60:c9:57:fe:d5:13:37:
         f1:00:07:a8:bc:2f:76:79:59:9a:7a:19:be:29:b8:9f:e9:d0:
         0a:0b:47:3a:fd:a6:8e:30:09:16:86:48:0e:bd:6e:0f:8a:98:
         c8:4f:53:e5:5c:18:94:25:50:cf:e8:90:eb:a1:ca:c6:3e:bd:
         f1:27:30:20:f2:35:2b:ff:9c:af:c4:6a:9e:2e:b4:c6:49:8d:
         d1:73:e2:e8:54:36:bb:b5:e6:eb:fd:ce:dd:49:04:e0:53:9f:
         10:aa:ef:6c:34:0e:30:38:4e:79:4d:72:ef:5f:87:78:6e:56:
         ca:28:f0:bd:e9:cd:5a:67:ca:34:e2:74:6e:f5:8f:e0:6d:19:
         4f:f1:2e:2c:0b:9e:59:fe:45:43:16:72:df:07:3c:73:ab:02:
         9a:a5:5b:0e:07:8b:41:22:a6:09:17:34:45:fc:52:c7:7b:53:
         49:60:d0:63:45:e8:cd:91:9b:33:68:ec:dd:7f:a2:49:37:42:
         49:ce:7e:e7:18:13:80:69:3f:10:b6:b1:70:56:63:18:bb:7a:
         d2:56:09:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyMjFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI0MUI2RkI0Qjc4OTZG
ODgxMEJFQ0QyOUI4NDUyMTJBMUEyQ0E0QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsuBydJJEK2SBVeApNs4ZXfJRWkweE6c4AWbfygJ5sqtDx+gms
fc7ovOEVtpYdpbZTUTo/AYqk2mC723eIyqezzjseHVO7pPzgu2eEPUiUMZRD4Y/Z
dd6b15s0opc5voae9OC1x5ipT1vho3U403vX7vnpM1gMSlFnd5fXtybnq+nnQAmz
bCYn2Bg3eOJIt6LLJwL/3UBfTyQsFJUiJJpMIMXW5xKKDpGylil0M3Rm9EeR4W2I
mKSSDUHwkKhTMVX51GupjibsXAsP4EzInsOR+ALpOaVO16geqLEU4VqNzWX3I7pA
bESFJzWsyFu6hbuT1JaB6s4JPc72Wl08PVxnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtBtvtLeJb4gQvs0puEUhKhospLswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RCdHZ0TGVKYjRnUXZzMHB1
RVVoS2hvc3BMcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
woAwDQYJKoZIhvcNAQELBQADggEBAKa2qQDSLWmdV3kEhjbVxeVCaCm9r1fnmqqp
k6gU2nMqGjdU/IMHD448GwPEr6NOYMlX/tUTN/EAB6i8L3Z5WZp6Gb4puJ/p0AoL
Rzr9po4wCRaGSA69bg+KmMhPU+VcGJQlUM/okOuhysY+vfEnMCDyNSv/nK/Eap4u
tMZJjdFz4uhUNru15uv9zt1JBOBTnxCq72w0DjA4TnlNcu9fh3huVsoo8L3pzVpn
yjTidG71j+BtGU/xLiwLnln+RUMWct8HPHOrApqlWw4Hi0EipgkXNEX8Usd7U0lg
0GNF6M2RmzNo7N1/okk3QknOfucYE4BpPxC2sXBWYxi7etJWCZ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org