Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xpeGU_5rXLu5TVlAcjodjIcMJ_c.roa
File:                     xpeGU_5rXLu5TVlAcjodjIcMJ_c.roa (raw, json)
Hash identifier:          p0ck1EJgxsWlP2OdzVkFwhkNsxrisD6dNJK52PTol30=
Subject key identifier:   C6:97:86:53:FE:6B:5C:BB:B9:4D:59:40:72:3A:1D:8C:87:0C:27:F7
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2300
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xpeGU_5rXLu5TVlAcjodjIcMJ_c.roa
Signing time:             Fri 25 Nov 2022 04:41:54 +0000
ROA not before:           Fri 25 Nov 2022 04:41:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.104.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8960 (0x2300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C6978653FE6B5CBBB94D5940723A1D8C870C27F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:53:00:99:ed:4e:8b:3e:3c:6e:e9:3b:ad:3b:
                    c6:37:e7:c4:4d:61:77:72:31:6d:7d:f0:9c:4f:f3:
                    9c:3c:53:90:6e:6f:0d:8a:ef:19:54:f0:fd:c6:83:
                    01:92:5b:27:18:36:f5:18:14:50:5f:43:62:34:fe:
                    b9:39:37:bd:66:a3:86:3c:39:ad:00:1b:60:ae:08:
                    be:9e:7e:c6:e5:5b:07:0e:32:c1:4f:df:13:99:72:
                    0e:2a:3a:15:ab:0b:a7:5e:cd:bc:60:8c:19:e9:ba:
                    05:b3:46:f9:ab:03:e8:ab:a1:1d:5d:6e:7b:4a:e2:
                    66:61:b8:84:45:ea:85:98:5e:8f:14:fe:9a:b4:92:
                    19:3d:5b:8d:c8:fa:33:44:b7:64:32:49:28:34:1a:
                    c8:8f:eb:78:43:80:ee:fe:77:5b:ae:2a:7a:d4:6d:
                    98:21:24:ed:9b:43:5e:c1:78:f2:88:77:a5:1e:ad:
                    fb:24:f7:47:23:9a:97:95:24:4a:36:51:95:38:7b:
                    02:08:09:92:93:c6:1b:df:b6:7c:0f:37:fa:60:9e:
                    fd:64:6e:c9:5c:9b:72:4c:fc:e1:50:0c:95:7e:c1:
                    2f:5d:8d:88:cb:da:78:11:0f:8a:5e:c1:2a:20:93:
                    b5:d1:ec:20:f6:7f:9e:a3:73:5c:c1:1e:bf:61:51:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:97:86:53:FE:6B:5C:BB:B9:4D:59:40:72:3A:1D:8C:87:0C:27:F7
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xpeGU_5rXLu5TVlAcjodjIcMJ_c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:35:da:6f:0a:1d:ca:0b:21:19:22:48:10:31:a2:86:8c:a6:
         41:be:58:3c:79:fb:1c:74:38:b2:54:96:4a:73:29:3c:76:19:
         d4:03:9f:c1:35:cb:da:d7:37:c6:86:fa:67:12:77:c5:f6:f8:
         ee:a7:cc:f6:85:77:5c:a5:83:37:83:37:50:ef:f5:19:d8:89:
         c4:f4:94:5e:b3:a0:3c:fc:9d:32:6d:9f:20:d9:0c:4a:fd:14:
         a4:bb:01:f6:46:c5:b0:e5:2e:5e:16:b2:95:18:11:4a:18:7c:
         56:22:7b:67:88:59:bc:6f:a2:7b:19:98:9f:12:e8:15:b8:45:
         17:3f:2f:66:85:97:bb:65:53:78:fe:16:4a:8f:23:fb:f9:11:
         83:1d:6a:63:a0:6a:68:28:f5:2c:b3:b2:21:4c:52:5e:4c:0f:
         64:a5:99:70:03:75:45:f9:7a:44:62:c1:7f:8b:e5:c9:42:87:
         7a:18:9d:de:a2:54:7c:5d:58:a6:01:4a:23:c4:be:66:72:77:
         58:1b:24:05:98:e6:80:3d:63:27:42:0e:8d:2e:23:ef:3c:42:
         6d:f6:03:38:15:4e:04:5a:fc:26:32:f0:cc:3f:ac:d6:cf:5b:
         e2:1a:bf:02:81:d4:97:47:73:bd:59:bd:ca:6a:10:1a:e0:7a:
         2c:64:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org