Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uwsFSq_04MnBOoJXL-G7wZtaLKw.roa
File:                     uwsFSq_04MnBOoJXL-G7wZtaLKw.roa (raw, json)
Hash identifier:          zCYaivEQHbED4C7PXY8JO3olsi3DKVPeElLgk1ohBpw=
Subject key identifier:   BB:0B:05:4A:AF:F4:E0:C9:C1:3A:82:57:2F:E1:BB:C1:9B:5A:2C:AC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       216D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uwsFSq_04MnBOoJXL-G7wZtaLKw.roa
Signing time:             Fri 25 Nov 2022 04:39:55 +0000
ROA not before:           Fri 25 Nov 2022 04:39:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.193.80.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8557 (0x216d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BB0B054AAFF4E0C9C13A82572FE1BBC19B5A2CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:be:34:11:c5:25:be:8a:63:17:7a:82:cc:
                    c5:ae:24:e5:f1:64:0e:6c:71:a3:6a:1e:8b:69:95:
                    2e:e5:c6:03:b3:51:0b:42:1c:60:ce:94:de:a0:97:
                    4e:cd:26:cf:10:51:a5:ef:14:60:b9:38:4a:0b:fa:
                    fd:ed:37:05:e6:1d:f7:4c:cf:19:b1:ec:02:8c:99:
                    a2:46:2d:97:08:07:d8:bd:71:2b:4b:9c:2f:18:0f:
                    99:e0:d6:7e:12:51:63:3f:4f:1e:ee:f5:f6:91:85:
                    19:d8:9e:18:79:b6:f6:07:0d:16:c0:26:15:e9:fb:
                    0b:5d:d1:88:26:4e:ad:3d:a3:84:5e:36:a5:0b:f1:
                    b4:d7:74:fb:92:4d:31:21:d0:fa:56:02:ec:63:ba:
                    ec:31:d8:db:1d:18:e6:08:17:75:fd:fc:18:55:2a:
                    60:f0:5d:6b:de:dd:c6:bf:54:00:02:17:8b:f5:a4:
                    1a:e5:77:80:61:1d:09:97:6e:7b:7d:6b:e4:f8:4d:
                    c0:94:c4:32:8a:e9:0f:94:e3:02:1a:98:da:32:95:
                    82:c7:f4:e8:fa:f0:7f:6c:16:95:09:28:49:1d:16:
                    f0:f3:ee:bc:eb:97:b4:2f:24:20:a2:59:ee:93:6a:
                    0e:1b:ee:69:dc:d8:43:6c:02:ea:56:39:80:41:f9:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0B:05:4A:AF:F4:E0:C9:C1:3A:82:57:2F:E1:BB:C1:9B:5A:2C:AC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uwsFSq_04MnBOoJXL-G7wZtaLKw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:d5:01:92:c9:6b:92:99:31:f5:e6:2a:b6:ee:2f:dd:5a:
         41:42:e0:ba:5e:15:13:13:68:83:f8:06:e6:af:d0:6b:0a:5e:
         9c:91:86:a0:25:fe:df:68:f4:46:3e:8a:90:0d:1a:10:08:8e:
         58:50:74:a7:d9:19:3d:4e:42:51:af:9a:08:53:be:5a:35:2a:
         08:df:3d:3b:38:fa:05:04:a5:53:ea:55:0a:ce:d6:3e:16:e5:
         29:da:6f:fa:aa:48:75:ea:30:c8:ba:f4:4d:8e:f1:54:e5:17:
         f4:70:bb:aa:3b:bb:6e:1c:ae:cb:ae:f8:ac:ad:1a:98:09:c7:
         81:09:f2:9d:81:b2:b6:84:0b:9c:91:00:1e:df:71:c3:95:f2:
         20:03:6b:f4:db:99:9d:74:a7:4e:a3:fd:cf:00:8e:d0:0d:48:
         20:3f:2c:3f:4c:70:df:77:e5:68:94:ec:5f:36:98:23:fb:68:
         8f:60:5e:a7:9f:62:3b:c8:3f:b3:e4:a6:4c:b3:40:fa:ea:7d:
         14:8c:03:1b:7d:74:f8:13:28:0d:44:ee:aa:34:06:e8:fe:6f:
         2c:1a:f1:67:c9:f9:7c:81:dd:ce:cb:0d:96:f9:c5:4b:1e:19:
         4b:54:f7:95:1f:26:d9:96:b7:48:ed:26:42:26:93:ea:0b:8b:
         a8:4d:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org