Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wYmRwbJde-igZEkWgtnJWzXtZYE.roa
File:                     wYmRwbJde-igZEkWgtnJWzXtZYE.roa (raw, json)
Hash identifier:          hJoEdHT9mtxscEjpvljAFLKJQJ8pmwYGMgHhcpQAgdo=
Subject key identifier:   C1:89:91:C1:B2:5D:7B:E8:A0:64:49:16:82:D9:C9:5B:35:ED:65:81
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wYmRwbJde-igZEkWgtnJWzXtZYE.roa
Signing time:             Thu 15 Sep 2022 02:54:00 +0000
ROA not before:           Thu 15 Sep 2022 02:54:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.193.20.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:54:00 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C18991C1B25D7BE8A064491682D9C95B35ED6581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:d3:13:8f:65:30:47:62:2c:d3:70:06:02:
                    61:92:45:b3:6c:98:88:f6:7c:ff:bd:1d:3c:b9:97:
                    4f:ab:e4:9f:85:7f:5c:f0:4e:1f:73:33:05:b5:51:
                    6b:8b:f4:91:89:1d:c5:46:48:cf:cd:8d:7d:46:00:
                    81:aa:e0:c4:64:f3:03:24:70:35:0c:08:8f:c6:68:
                    47:08:2d:cc:3b:aa:27:5b:f5:78:7f:61:88:80:07:
                    79:fd:49:2c:c5:de:44:f4:c1:88:09:db:e6:d8:27:
                    10:d5:88:74:a6:63:62:06:1e:a1:cf:97:e0:f9:a8:
                    19:b4:fb:07:cf:53:b1:99:3e:be:e3:aa:7c:25:6e:
                    0d:44:f4:8e:2e:9b:a5:f2:77:5b:e3:25:14:37:f3:
                    91:6f:17:ca:88:f6:1c:90:9a:19:1d:9d:a2:4c:60:
                    49:86:55:72:ed:3b:4e:94:5c:e1:37:a4:82:4e:4e:
                    02:75:1b:9b:5f:9c:d7:90:69:e2:24:89:22:ac:54:
                    63:61:4a:12:dd:02:af:4a:71:0b:25:74:d8:95:08:
                    1f:8a:0c:09:e2:75:48:1b:e6:9e:72:e5:71:e7:45:
                    10:a9:34:87:70:1c:ff:98:2e:75:f6:8a:14:6f:54:
                    c9:83:51:a3:dc:89:08:a8:a5:4b:45:67:55:ee:08:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:89:91:C1:B2:5D:7B:E8:A0:64:49:16:82:D9:C9:5B:35:ED:65:81
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wYmRwbJde-igZEkWgtnJWzXtZYE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:34:dc:23:49:5e:27:51:70:aa:06:6d:ce:4b:ed:01:59:6e:
         4a:3b:a7:a6:55:f9:40:23:84:d8:b0:e6:35:ff:fc:28:77:14:
         f3:06:33:c2:92:be:dd:27:06:45:4d:6b:36:61:bf:7a:64:3a:
         a6:34:57:cf:ff:1b:0e:03:4d:2e:dc:45:a4:9a:25:05:7a:4b:
         36:e6:41:9e:76:45:2c:4e:80:9d:13:ea:37:a3:9f:cd:4b:1e:
         92:db:09:75:d4:82:6e:4b:84:ac:fd:d9:b3:1c:35:d7:49:b9:
         be:a5:a5:34:e9:7a:d0:ab:47:af:57:b7:53:23:db:9f:e8:05:
         dc:5e:73:e7:a2:18:69:84:e9:03:24:b8:27:03:88:2e:57:ac:
         08:37:82:16:a6:63:82:5f:92:09:55:c1:29:a0:f1:bb:dd:4d:
         2a:18:4a:a1:e1:e7:ca:c8:e3:7a:3d:20:64:28:87:bb:e9:34:
         31:61:97:4c:79:05:c4:48:ee:06:7f:41:ba:cf:ec:48:37:2f:
         eb:ad:71:ac:33:75:34:81:04:a4:de:7a:5b:e2:84:80:97:c1:
         cc:6c:3d:76:1c:1a:c4:47:e1:e1:7e:da:a9:81:5a:75:d1:67:
         e8:2d:a2:3d:be:13:50:56:c5:cc:2f:2f:d1:45:17:05:58:05:
         ef:cd:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org