Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wB-ubKkUE5MhRYPGvvRdWrbv_YI.roa
File:                     wB-ubKkUE5MhRYPGvvRdWrbv_YI.roa (raw, json)
Hash identifier:          5PI2Q0jTsWk9IyDbQUbdtwRQ0t9ew2U/XNzJVSFW8oY=
Subject key identifier:   C0:1F:AE:6C:A9:14:13:93:21:45:83:C6:BE:F4:5D:5A:B6:EF:FD:82
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       17AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wB-ubKkUE5MhRYPGvvRdWrbv_YI.roa
Signing time:             Sun 07 Feb 2021 12:22:40 +0000
ROA not before:           Sun 07 Feb 2021 12:22:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        118.232.120.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6061 (0x17ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:22:40 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C01FAE6CA9141393214583C6BEF45D5AB6EFFD82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:81:75:55:f4:0c:45:13:bd:5a:da:ff:ea:
                    5e:a8:2e:e1:36:56:aa:6f:1e:40:89:54:92:eb:06:
                    0c:20:e2:a6:d2:c1:36:3d:a7:45:87:fd:b0:5e:5b:
                    89:1b:d5:27:41:86:59:59:60:d2:82:17:98:ab:83:
                    77:06:7f:ca:8a:0f:10:c2:6f:a3:df:d5:d4:bc:99:
                    0e:9c:e9:ac:e6:87:c2:8c:25:7f:35:1b:79:9d:61:
                    02:51:a5:07:78:0d:b4:e3:19:05:6a:f5:7f:25:9e:
                    75:cf:6e:7c:06:c8:e4:ae:2e:78:97:44:53:dc:46:
                    0c:e6:22:de:01:84:73:63:c8:c3:32:d6:1e:a2:0f:
                    60:db:bd:bd:02:d5:99:81:d7:ca:c2:97:25:93:dc:
                    1c:b5:2e:66:ee:6c:56:b4:de:b7:02:93:35:2a:1f:
                    74:c6:a7:f7:e4:5d:74:53:0c:8e:61:3b:46:14:65:
                    68:18:c6:81:ed:ae:d1:8d:ea:ea:5e:39:db:15:a3:
                    9b:e7:ca:6b:4e:05:b8:a2:49:8e:69:9a:74:e9:bd:
                    a1:57:f5:2d:a2:8c:3d:1f:e6:a0:1c:1b:40:a4:50:
                    48:8d:51:24:cf:f4:cb:7f:56:84:25:69:fc:11:87:
                    69:d0:92:81:0d:93:04:d7:e7:1b:74:86:7e:7b:05:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1F:AE:6C:A9:14:13:93:21:45:83:C6:BE:F4:5D:5A:B6:EF:FD:82
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wB-ubKkUE5MhRYPGvvRdWrbv_YI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:b4:f3:60:be:27:44:04:70:33:8e:09:66:b2:02:b6:1f:87:
         d2:12:43:c3:18:ce:81:3a:33:4c:42:b0:b7:a6:c9:03:40:75:
         20:9e:51:01:90:b6:14:5e:b6:3d:eb:91:aa:71:e5:f2:d9:a3:
         45:c4:c4:32:39:3e:dc:73:4a:3d:e3:f1:e5:d4:24:1d:65:6c:
         41:87:36:b5:6e:c0:8b:e4:72:b5:e3:2c:43:95:46:7c:57:c8:
         9d:01:f0:17:d4:85:bd:25:45:54:40:aa:cb:75:72:92:eb:f4:
         59:1a:32:21:ea:00:b2:18:5a:76:4d:e9:e9:e0:7b:69:a4:25:
         72:97:31:fb:86:98:6a:24:01:81:71:26:f7:9c:1c:e1:cc:58:
         f6:1d:a8:74:ab:51:ea:38:81:59:1d:29:05:83:64:6b:94:be:
         4f:f8:55:e8:94:88:61:72:88:d5:dd:b6:2e:d6:cb:d1:86:a5:
         b1:5f:72:b8:fc:ac:ea:21:3a:03:34:93:20:1e:7f:3d:a5:1a:
         6b:c4:41:62:66:94:bd:be:0e:fd:1c:4d:5e:0c:83:1f:5e:f1:
         a4:0b:6e:18:d3:01:dc:ff:ce:33:49:98:bd:69:c8:30:44:36:
         08:24:dd:30:db:fb:ff:a5:39:4d:ad:6d:2c:8a:cb:34:10:75:
         d3:77:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:31 2023 by rpki-client on console-ams.rpki-client.org