Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zW3-h2PfPgfmfo2dJkghJEivBeI.roa
File:                     zW3-h2PfPgfmfo2dJkghJEivBeI.roa (raw, json)
Hash identifier:          C9DHjlwwAEmEeKS6sjN1HqTSWyPN62BMCQzdzV1A8Ms=
Subject key identifier:   CD:6D:FE:87:63:DF:3E:07:E6:7E:8D:9D:26:48:21:24:48:AF:05:E2
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zW3-h2PfPgfmfo2dJkghJEivBeI.roa
Signing time:             Thu 15 Sep 2022 02:52:29 +0000
ROA not before:           Thu 15 Sep 2022 02:52:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        123.193.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=CD6DFE8763DF3E07E67E8D9D2648212448AF05E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:06:9e:69:b5:31:ef:92:53:fb:35:77:83:
                    06:00:d0:22:6d:d4:bd:ea:24:7b:8d:72:0f:f5:bf:
                    99:56:51:4b:76:4e:ca:e6:d2:a4:57:0e:9b:f1:56:
                    b6:c4:a7:0d:35:29:2e:7c:17:69:3f:bf:98:95:37:
                    81:8a:a7:1b:ac:a5:f8:e9:ae:bb:8b:b1:f2:ff:f0:
                    fe:1d:ea:d4:ac:be:62:38:f4:27:0c:8a:56:33:8c:
                    c0:fc:5b:c6:01:ed:29:44:4d:b6:f2:b9:5b:c1:43:
                    ef:90:97:77:50:b6:bc:58:b5:1f:05:0e:ce:ca:2a:
                    61:91:fa:f6:7d:27:df:26:5a:e6:c7:03:70:b3:27:
                    97:05:fa:d1:f4:2c:1e:0e:4b:da:c6:f6:e0:21:6e:
                    9f:1c:82:5d:4f:29:31:a4:dc:85:0e:a2:70:bc:3f:
                    f0:be:6b:f9:de:f3:5d:57:fc:30:ff:74:de:bc:23:
                    9c:6b:37:9c:a3:c6:a8:cd:c8:c6:81:e0:38:5c:46:
                    05:d9:63:03:b5:93:19:f2:57:3c:31:21:d3:9b:60:
                    09:6f:ee:10:01:54:65:57:21:b7:bf:5a:57:81:1e:
                    aa:f9:4d:f3:4d:2c:ba:aa:a8:1a:3e:ff:d9:c5:f7:
                    eb:41:9c:88:1c:69:65:e7:eb:a9:ae:d2:19:81:3d:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6D:FE:87:63:DF:3E:07:E6:7E:8D:9D:26:48:21:24:48:AF:05:E2
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zW3-h2PfPgfmfo2dJkghJEivBeI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.193.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:be:54:f7:88:bc:2d:d2:7e:6b:a6:00:3d:6b:e6:d7:03:e7:
         35:f5:42:b8:b8:33:17:7f:7b:02:ad:f4:53:39:0f:af:72:b8:
         6c:ad:38:12:44:61:6e:02:ce:9e:4b:b7:d2:01:0d:fc:64:9a:
         9f:78:e1:e5:da:96:a9:6b:b5:c8:38:c7:c0:5f:bb:7a:2a:4f:
         0a:ea:a5:8c:9b:09:f3:39:80:e9:f1:a7:c2:68:12:8c:a6:b7:
         93:bf:a1:40:dc:ad:c0:15:0d:14:58:cf:f2:7f:2c:4d:45:46:
         d2:b3:fc:57:84:50:6e:39:37:49:84:a7:58:00:ff:21:66:f6:
         e3:1e:82:86:20:47:96:2b:a3:f8:ba:3b:f0:8a:b5:35:46:76:
         8f:c9:8d:17:94:28:d9:7b:48:9c:e2:f2:e8:c4:97:d5:21:08:
         ec:4f:f2:60:44:53:61:06:a5:40:f9:a5:2a:d1:76:a7:6a:68:
         5c:d2:f1:3b:55:d7:b4:ab:cd:34:6e:3a:17:65:42:89:4a:44:
         d9:b5:19:58:8d:99:b3:64:50:95:e1:c5:11:b2:26:d8:3f:25:
         5d:2a:d1:65:fa:b2:77:be:00:f8:58:d4:09:47:c3:4e:ba:bd:
         25:20:a2:6c:15:05:e1:e9:28:27:92:fb:b4:66:43:45:2c:c6:
         46:b8:a6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org