Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wlCgyycXDQt0JSqmg-a3GXufdGo.roa
File:                     wlCgyycXDQt0JSqmg-a3GXufdGo.roa (raw, json)
Hash identifier:          QHogf2bGgNxdZYiq9wfnTEiziP6aAZaEuP+kK29WIS4=
Subject key identifier:   C2:50:A0:CB:27:17:0D:0B:74:25:2A:A6:83:E6:B7:19:7B:9F:74:6A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       203F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wlCgyycXDQt0JSqmg-a3GXufdGo.roa
Signing time:             Fri 25 Nov 2022 04:38:29 +0000
ROA not before:           Fri 25 Nov 2022 04:38:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        211.76.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8255 (0x203f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C250A0CB27170D0B74252AA683E6B7197B9F746A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:e0:1c:d1:24:93:8d:d5:59:b3:0c:f7:52:
                    37:fd:48:96:18:cd:0c:9f:f6:d8:de:33:53:31:73:
                    19:01:12:34:5a:4d:59:ea:7f:fe:2f:ae:cb:54:e2:
                    f3:33:d3:8a:f7:74:c7:de:00:32:c4:c2:38:df:58:
                    04:b2:9f:1a:6e:c4:16:e1:9c:e4:2a:d9:71:a2:6d:
                    db:a5:67:93:2d:cd:23:08:ba:e2:4c:68:27:e8:3a:
                    bf:6a:08:47:fc:4f:7e:ed:aa:87:b4:a3:cb:6d:59:
                    37:b2:52:37:05:8c:f8:5a:80:8f:38:f6:51:c8:03:
                    5a:76:26:34:38:3e:be:61:7d:b2:bd:a6:0a:12:70:
                    74:90:a1:b1:e7:78:51:f8:9f:a9:03:20:39:3a:c7:
                    1e:b9:6b:c8:21:19:d5:f8:84:2f:0c:b4:14:20:d3:
                    58:c3:c1:9a:c9:03:03:48:e3:e1:ab:ea:37:b4:ad:
                    9f:e9:e7:40:fd:99:3f:41:b1:80:6c:8a:5e:32:57:
                    83:b7:e4:24:6a:c1:bd:3a:21:c5:34:b0:19:83:47:
                    bb:b0:f9:77:a4:77:78:6b:74:a6:1f:e1:1f:c9:d5:
                    c9:c2:98:1c:30:db:6f:ea:cb:e3:a2:12:60:50:88:
                    b2:78:54:6e:ee:b5:e5:92:bc:57:27:37:90:6c:5e:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:50:A0:CB:27:17:0D:0B:74:25:2A:A6:83:E6:B7:19:7B:9F:74:6A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wlCgyycXDQt0JSqmg-a3GXufdGo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8c:41:84:6b:89:0d:52:84:39:e5:e8:80:26:c4:1a:86:49:
         47:fb:64:fd:93:66:24:e8:d3:31:fe:ec:77:af:fe:66:ff:73:
         c2:1a:54:0e:e9:24:3c:86:19:35:ba:9e:8f:97:08:60:e2:2b:
         af:57:3f:77:23:91:01:a9:67:ac:ad:fe:cb:21:7f:37:c1:d5:
         1c:f6:eb:47:dd:52:3e:c6:50:19:f6:58:49:f2:23:6c:1c:6c:
         4d:72:2e:33:e2:96:52:a7:e5:a8:fe:35:52:fa:c5:8e:38:59:
         d9:38:0c:bf:8e:63:5c:6f:6f:2d:9d:ca:2c:e4:12:1e:f0:94:
         ef:6c:00:cb:18:ba:a3:3f:c1:66:5e:d8:bc:5a:ec:e8:1d:2f:
         65:dc:ae:d9:ca:fc:55:2b:ce:bb:75:16:62:7d:8c:a4:d5:de:
         27:64:a0:a0:27:3c:85:34:8e:90:bf:9d:89:05:58:7f:18:31:
         aa:a1:59:5a:95:82:21:70:7c:b4:42:65:8c:83:76:26:e0:99:
         42:b8:6b:2e:7b:2d:5b:9e:63:a1:5b:3e:62:48:fa:de:2c:fd:
         75:03:63:8f:41:84:d4:91:47:a1:36:d2:66:f0:78:9b:57:06:
         36:f1:91:ea:e4:4b:dd:82:b9:f3:b5:7c:17:12:dd:c2:a8:fa:
         d9:8e:1d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org