Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-7H610yYvcUVPKzcQ7mgddrlBv4.roa
File:                     -7H610yYvcUVPKzcQ7mgddrlBv4.roa (raw, json)
Hash identifier:          fYBv3yl0eG2kGZzkEn83DCqzLjXq2g8vuIRMa2MoGl4=
Subject key identifier:   FB:B1:FA:D7:4C:98:BD:C5:15:3C:AC:DC:43:B9:A0:75:DA:E5:06:FE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-7H610yYvcUVPKzcQ7mgddrlBv4.roa
Signing time:             Thu 15 Sep 2022 02:54:12 +0000
ROA not before:           Thu 15 Sep 2022 02:54:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:54:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FBB1FAD74C98BDC5153CACDC43B9A075DAE506FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:71:1c:46:69:a6:55:ba:fa:80:bd:1c:02:
                    a7:36:ac:af:04:43:31:ff:3e:60:d4:31:d7:bf:80:
                    d7:a9:9e:10:78:d7:d2:9b:f0:ae:9f:5b:aa:a8:28:
                    a6:37:a1:d5:f0:e6:94:e7:4a:cc:d8:03:54:1d:db:
                    b5:eb:06:7a:ca:16:53:a0:1e:76:5f:3c:65:e6:19:
                    7c:5f:61:1c:49:06:6a:4f:0f:c9:24:5a:d2:36:43:
                    07:72:0a:8e:de:1f:90:de:b5:3a:e8:4d:c8:02:12:
                    68:ba:83:58:05:cc:59:b5:41:a4:db:5a:d0:91:0e:
                    73:be:fe:66:6d:ea:f6:82:90:f4:d0:64:8f:3b:2d:
                    83:6a:ed:fe:ad:31:8d:b4:4c:04:a0:01:68:00:53:
                    bd:9a:90:d0:c1:73:bd:5d:28:d1:ec:1d:c9:eb:d9:
                    53:b1:ca:63:cf:e8:01:3f:96:69:35:30:7f:88:de:
                    c9:84:ba:1f:44:14:1f:a6:0c:1f:8c:d3:52:7c:8b:
                    d6:7c:d2:c0:86:ed:67:a3:31:5f:a7:6f:82:1f:48:
                    db:3b:9f:cc:05:d7:20:af:c3:ea:0e:1d:63:e0:d0:
                    40:44:e7:04:b2:bf:79:c6:16:0a:20:37:c8:f6:6a:
                    3d:26:3f:29:21:61:b5:7b:d1:c2:50:be:75:d1:40:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B1:FA:D7:4C:98:BD:C5:15:3C:AC:DC:43:B9:A0:75:DA:E5:06:FE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-7H610yYvcUVPKzcQ7mgddrlBv4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:f8:67:db:b5:68:85:fe:18:fb:ba:9e:82:65:6e:35:8b:
         6b:91:62:59:e7:19:1c:cf:db:9e:d9:0e:6b:98:85:5b:4c:dd:
         ae:6c:cd:cf:b6:85:82:09:bb:ca:a7:8f:c4:88:33:be:17:d9:
         3f:73:a7:26:9d:3a:7f:5d:3f:69:e5:2e:83:21:04:cf:d4:12:
         0b:88:60:ff:71:51:4f:08:57:38:2e:05:78:c6:f5:2c:e1:d4:
         0d:50:dd:08:dc:bb:f6:e0:8e:97:6c:b4:83:5c:51:a2:ed:c2:
         b5:25:74:c7:75:0b:35:f5:81:d8:06:d1:44:c5:3c:35:d7:f0:
         4f:2d:16:98:92:45:2e:64:00:f7:e9:17:f6:0d:4e:71:de:e8:
         0a:1f:33:fc:18:ba:7d:be:8f:cb:c7:a3:19:f2:b4:a3:cb:eb:
         0a:23:cc:50:a0:c5:e0:f2:f8:91:b6:2c:17:94:f4:fe:62:80:
         fc:b5:1e:61:47:91:12:67:29:1d:46:c2:ba:d2:7c:ef:67:0c:
         a4:61:f1:b8:7f:0b:7a:68:89:71:1f:70:14:ef:d1:ae:1e:54:
         39:7f:df:63:35:65:7c:4c:31:fd:5e:e8:58:6f:f4:90:e8:72:
         fe:d2:5e:5e:48:e9:be:91:d4:87:d6:f5:00:c7:69:97:11:aa:
         11:74:58:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org