Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vGYrQM967Xc1InWNiCZEs0A0Eh8.roa
File:                     vGYrQM967Xc1InWNiCZEs0A0Eh8.roa (raw, json)
Hash identifier:          KhmOkjS1eL9yS8Fp+WmAKSszJvSZAGkddAPhi2GG6uQ=
Subject key identifier:   BC:66:2B:40:CF:7A:ED:77:35:22:75:8D:88:26:44:B3:40:34:12:1F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vGYrQM967Xc1InWNiCZEs0A0Eh8.roa
Signing time:             Thu 15 Sep 2022 02:52:45 +0000
ROA not before:           Thu 15 Sep 2022 02:52:45 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        118.233.232.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:45 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BC662B40CF7AED773522758D882644B34034121F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:37:b4:eb:10:fd:f4:cf:91:41:51:dd:ed:
                    fc:61:fd:58:9b:03:80:ca:b5:5d:3d:33:95:3f:1a:
                    3b:e7:37:3b:c8:46:f6:e1:31:9e:56:3f:ad:80:bd:
                    4b:d1:da:06:6e:1a:17:27:c2:8b:9b:90:a0:54:50:
                    f9:c1:a2:f1:c9:3c:0e:23:56:17:d7:95:4b:14:36:
                    5c:6e:d1:65:e0:ea:64:17:3a:ee:02:fe:12:cd:52:
                    5e:2c:8e:0c:cc:d3:e1:c8:b4:cf:43:07:a9:63:f2:
                    0a:3f:32:9f:84:ac:b3:1b:f2:cf:70:28:f2:91:35:
                    9d:8a:b3:f3:6d:19:59:65:1b:4a:6b:47:c9:8e:6e:
                    2a:cb:4d:f7:8b:3a:1c:63:8f:e0:9c:c0:c5:5c:85:
                    b7:a4:b2:f9:dd:3b:24:8d:ed:59:78:0b:1e:e2:78:
                    15:43:9e:70:3f:a6:15:75:e2:9a:8b:0f:fb:72:af:
                    01:c9:74:9a:fa:bb:1a:b5:b1:14:2f:1f:24:0a:4f:
                    9f:27:47:52:57:e1:7a:34:e6:b3:ff:b4:75:18:d1:
                    60:dc:ee:2d:3a:81:af:2c:75:9b:b8:14:fa:17:ab:
                    e8:9a:ed:8b:78:aa:44:92:d5:56:e5:ce:7a:cd:e7:
                    4f:b8:81:22:49:98:9c:29:9c:d0:4b:be:57:76:04:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:66:2B:40:CF:7A:ED:77:35:22:75:8D:88:26:44:B3:40:34:12:1F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vGYrQM967Xc1InWNiCZEs0A0Eh8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:2c:8b:30:d1:87:c8:f4:3b:29:d5:1d:ed:55:34:3b:e7:47:
         40:ed:a1:76:a6:bf:b3:8e:26:a8:dc:c6:03:6e:ce:4f:19:99:
         ce:1e:83:b7:10:b3:59:8e:e1:b8:f8:a9:87:4e:c4:fe:81:9d:
         52:6f:5d:7d:da:a8:90:60:7d:ed:61:c4:fb:79:1c:97:70:4e:
         86:d6:e6:ba:9a:e8:37:c2:d2:8f:e5:93:da:38:3b:d8:45:70:
         ec:a0:04:c8:69:e4:80:1a:96:75:1e:a4:1f:df:9e:c4:b9:ee:
         3b:e6:6b:5e:88:e4:0c:cf:96:a4:02:cc:67:70:3c:14:20:10:
         21:37:6a:bd:14:75:8d:a3:34:7e:63:ad:f3:21:00:a0:dc:b4:
         aa:55:b0:23:7f:42:0e:db:a2:46:73:f0:c3:9e:fc:a6:64:8a:
         bd:75:94:c5:9a:6f:3d:de:5a:77:d2:29:4f:ae:b8:65:2e:73:
         07:0f:38:fc:17:f2:71:1e:6c:a8:e4:51:97:93:f3:11:a4:20:
         fc:74:a1:40:f6:81:d2:06:9b:cc:46:1b:be:23:c1:16:6a:3e:
         a0:0c:8e:24:79:33:30:33:c4:a1:ef:8e:60:73:ef:48:c1:2f:
         05:e2:dc:75:83:65:85:91:dd:4d:29:b1:3f:2f:90:6a:27:29:
         44:7b:e4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org