Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uOjRIKwKAGuYEFv6LxLUFjhXmOg.roa
File:                     uOjRIKwKAGuYEFv6LxLUFjhXmOg.roa (raw, json)
Hash identifier:          HTSA8hGSLCRvh2o8sQ3gi3NOjsLFAwTuYZaer3bfwpg=
Subject key identifier:   B8:E8:D1:20:AC:0A:00:6B:98:10:5B:FA:2F:12:D4:16:38:57:98:E8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B5A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uOjRIKwKAGuYEFv6LxLUFjhXmOg.roa
Signing time:             Wed 29 Sep 2021 02:46:29 +0000
ROA not before:           Wed 29 Sep 2021 02:46:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        123.193.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7002 (0x1b5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:29 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B8E8D120AC0A006B98105BFA2F12D416385798E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:eb:ee:e4:c4:9d:f8:09:5b:84:4a:ea:d3:
                    29:c3:83:50:d9:6a:da:c2:6b:49:ee:8a:2c:5a:41:
                    8a:65:82:ba:44:5d:68:03:eb:a2:2a:8b:8f:1b:ec:
                    d5:89:83:a9:c3:9c:c1:52:6a:78:98:7c:92:55:ac:
                    e4:0c:6b:03:0e:19:02:95:b2:52:8c:61:d2:41:22:
                    dd:fd:9b:72:9f:78:3c:3c:70:64:e6:37:be:b5:10:
                    8e:c1:c2:71:b3:85:18:0b:ec:87:23:dd:33:72:52:
                    15:62:c8:f3:de:f3:0b:98:69:05:14:f5:2d:c5:cb:
                    01:1a:f2:90:83:15:40:68:a7:13:6b:5c:1e:bb:ab:
                    75:39:c2:06:5e:53:57:81:6d:cd:2c:42:5e:27:94:
                    61:4a:c3:a7:c0:72:57:d0:b9:93:e7:a5:49:04:e1:
                    ca:bd:e0:f1:14:7a:fc:f5:b6:d9:46:29:3a:7e:f1:
                    f1:04:ef:fe:77:de:11:13:21:3e:a5:4e:3a:27:85:
                    c9:8a:2a:19:4e:ee:0d:a9:56:20:27:e7:76:76:11:
                    dd:dc:6a:74:7c:a1:52:bd:ac:90:9f:8a:95:76:cb:
                    54:bc:92:bb:24:68:26:cf:1a:3e:71:8f:99:3b:5e:
                    62:3a:e0:16:d3:ca:a1:3b:21:03:66:9a:fb:ce:dc:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E8:D1:20:AC:0A:00:6B:98:10:5B:FA:2F:12:D4:16:38:57:98:E8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uOjRIKwKAGuYEFv6LxLUFjhXmOg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:f6:10:53:34:34:66:15:c7:b1:83:a5:99:e8:ab:d1:4a:
         a1:ad:0d:44:33:6b:80:22:07:d6:a8:d3:e1:e7:3a:bf:44:79:
         ba:2d:d2:42:3e:5b:d5:a8:e0:83:b3:e8:cb:81:33:b3:a0:4d:
         98:58:3a:7b:92:e7:76:45:09:94:3f:fe:2e:c1:41:e2:7a:2b:
         fc:78:c7:b0:3e:38:52:db:84:3c:4f:54:02:23:44:8f:71:82:
         0b:9b:47:7a:a1:cf:ff:d4:e2:2c:18:2e:82:8a:11:f6:1d:3b:
         f6:73:7a:8c:81:ee:2d:de:39:d3:c1:55:8b:3e:6e:37:68:7a:
         cb:70:f3:dc:84:8e:db:57:82:8c:b1:8b:ce:43:da:ba:e6:35:
         d9:f6:ce:02:48:74:99:38:75:56:0f:0f:e9:1f:52:61:0e:dc:
         a5:d5:94:da:63:50:05:ef:d2:2a:fd:3c:39:2b:94:77:41:0e:
         13:bf:5f:84:15:22:29:63:39:ec:de:4a:ce:ca:dc:30:bd:d6:
         60:e3:a6:7a:fe:d3:e4:a0:79:ef:40:0e:83:17:e3:cf:ff:09:
         d3:3a:18:1b:f7:30:6a:9a:14:f9:1b:b8:19:a7:b3:88:30:b1:
         af:65:0a:ae:a5:55:f7:2a:99:68:2e:41:e8:c0:00:5a:e3:7f:
         7d:f8:86:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org