Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w0hDB_crxzg81E4MBp1h7A92HZM.roa
File:                     w0hDB_crxzg81E4MBp1h7A92HZM.roa (raw, json)
Hash identifier:          AqW1dLkfVFeCucKU34FjUa1m1cKoghbYiGeRaW2hBtE=
Subject key identifier:   C3:48:43:07:F7:2B:C7:38:3C:D4:4E:0C:06:9D:61:EC:0F:76:1D:93
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FB5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w0hDB_crxzg81E4MBp1h7A92HZM.roa
Signing time:             Mon 26 Sep 2022 02:22:02 +0000
ROA not before:           Mon 26 Sep 2022 02:22:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.16.0/21 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8117 (0x1fb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 26 02:22:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C3484307F72BC7383CD44E0C069D61EC0F761D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:76:d5:ac:f7:1d:29:e9:3f:66:d1:7a:9b:bc:
                    7c:a9:bb:4c:1b:a8:bf:4f:ee:e8:0f:1f:8c:28:81:
                    19:6f:09:4a:16:5b:17:c2:b8:e4:ae:ad:ff:b8:64:
                    ad:03:1f:f4:d1:b9:b4:a5:05:cf:65:b9:23:42:20:
                    b2:c5:08:ae:ec:d4:af:f2:9f:c6:a2:fc:87:9a:2c:
                    a8:d8:82:0b:f7:6c:6a:65:61:71:ef:ec:99:e0:f8:
                    a8:ba:c7:31:82:27:c4:d0:b4:ee:e7:8f:43:3f:16:
                    28:c7:9c:f7:bf:9e:eb:9a:07:54:a8:cb:34:ec:c8:
                    2f:e1:2d:7f:18:bd:3e:65:26:ba:99:af:c6:d3:26:
                    40:db:4c:c1:a5:a3:5a:db:1a:cf:96:e3:48:6d:86:
                    03:9f:e2:0c:64:45:af:3a:ff:57:2a:92:ec:48:1f:
                    e0:6d:8e:e9:3b:ae:fe:28:2e:ca:2d:9d:d4:60:17:
                    75:77:49:7f:93:e1:d6:c2:23:85:51:1b:cf:2b:d6:
                    d7:75:bd:63:12:3d:b6:ff:e2:12:ce:2b:83:19:c4:
                    ea:31:fa:9d:d4:8a:bf:d6:ca:08:dd:e5:f1:63:0b:
                    0f:7f:f5:b0:16:8b:22:c7:b0:4c:2f:6c:3f:d6:46:
                    cd:c3:29:93:d5:ba:83:24:3b:2a:49:44:43:62:5d:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:43:07:F7:2B:C7:38:3C:D4:4E:0C:06:9D:61:EC:0F:76:1D:93
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w0hDB_crxzg81E4MBp1h7A92HZM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:e6:f3:35:0e:52:2c:77:1f:79:d9:2f:00:9b:02:80:b5:bb:
         ad:1d:25:28:3d:97:68:ba:d8:0c:ad:e4:c2:95:f9:fa:b2:5c:
         30:cc:dd:7d:9e:53:b4:9a:e6:66:10:73:53:31:29:81:d3:b2:
         27:f6:0e:00:f9:11:d4:cd:8c:9b:7c:46:d8:23:41:6e:c5:ca:
         99:56:a4:21:f1:af:12:33:38:10:c0:29:8f:ee:01:0e:05:69:
         66:fb:60:e7:8b:b4:69:fb:11:f0:27:34:60:0f:aa:c0:72:a1:
         c6:65:2b:59:9e:d7:4f:c7:98:77:61:27:21:0b:02:50:d4:a7:
         de:13:44:e4:91:a5:14:ee:5d:f0:af:b3:f3:ba:5c:8d:97:95:
         43:b1:4b:77:23:8f:e5:c2:75:b9:00:e3:e4:b1:e7:00:87:88:
         2b:0c:fe:f4:c1:d0:02:be:ef:98:c3:f5:4b:72:7b:3b:54:70:
         73:0a:77:ca:4b:ba:75:70:25:ef:3a:61:93:bb:4d:d9:c4:a1:
         d1:58:d5:1f:74:2d:b3:f6:2f:28:f3:d9:d4:2e:37:45:61:55:
         f7:5f:74:52:7d:d8:a3:37:3c:e7:76:b0:bd:20:08:ac:93:23:
         cb:58:c6:8e:9f:c6:4b:a0:63:61:37:ac:2e:0a:dc:e4:61:49:
         41:e9:7c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org