Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-suFkW8IsZOxeSM_g-f6kpZor0c.roa
File:                     -suFkW8IsZOxeSM_g-f6kpZor0c.roa (raw, json)
Hash identifier:          YSsw3Y++IKuXIhaSHFC+s/AiTxrJpeouFo/bc5QWJfc=
Subject key identifier:   FA:CB:85:91:6F:08:B1:93:B1:79:23:3F:83:E7:FA:92:96:68:AF:47
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F1C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-suFkW8IsZOxeSM_g-f6kpZor0c.roa
Signing time:             Tue 29 Sep 2020 09:56:30 +0000
ROA not before:           Tue 29 Sep 2020 09:56:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.126.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3868 (0xf1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FACB85916F08B193B179233F83E7FA929668AF47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:c7:ac:17:d6:d2:d0:b0:ff:1d:d7:82:f9:
                    ca:f7:1e:9d:2a:3b:55:3d:e4:39:26:d1:4f:c1:ac:
                    4c:3c:45:89:82:22:1f:65:cb:9b:25:2b:df:ab:12:
                    44:00:60:6e:08:63:4d:0c:4f:cf:cb:bb:ab:5b:58:
                    c3:9d:0e:14:d5:ca:a9:b5:f4:f6:08:c4:d7:2b:56:
                    92:db:19:36:7f:dd:51:88:8e:fc:d6:ea:fa:d1:f3:
                    9c:5d:5c:98:d3:37:57:69:dd:aa:74:52:df:73:11:
                    28:ef:99:45:40:42:59:7b:ee:76:2b:b4:87:3c:bc:
                    50:b0:dd:80:ff:bc:6c:8d:0b:19:ab:99:d1:92:ca:
                    65:85:20:2b:ad:6c:4b:54:00:83:14:d6:b8:dc:1a:
                    c3:ff:39:8b:24:d9:cb:83:9b:07:81:47:5d:c0:2f:
                    74:ab:da:0b:7c:ec:2c:ba:78:07:27:93:08:33:86:
                    0f:4c:7f:ca:ac:3c:7e:30:55:de:5b:37:a4:37:b5:
                    34:a5:b9:c1:be:23:94:33:65:dd:54:70:a1:44:c1:
                    9f:6c:e5:63:89:e3:95:ab:65:c8:af:72:79:79:36:
                    b3:04:c0:64:c9:30:97:ee:d8:17:12:f1:b5:ea:cf:
                    7d:72:fd:fd:74:31:40:bc:96:d0:68:81:0b:c8:92:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CB:85:91:6F:08:B1:93:B1:79:23:3F:83:E7:FA:92:96:68:AF:47
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-suFkW8IsZOxeSM_g-f6kpZor0c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:e6:09:c5:67:ab:d0:56:64:a1:ca:4d:41:ea:31:7c:81:9d:
         5d:f9:05:e7:0a:16:8d:43:6b:13:2c:a5:e2:1f:62:9c:c1:7d:
         45:a2:7e:a9:bc:77:5f:a3:7c:78:6c:e6:34:c5:ac:14:fd:f7:
         aa:b5:49:2a:20:de:91:8a:6b:52:36:28:d5:39:45:19:5f:db:
         96:0b:8c:6c:63:72:e9:8b:ea:43:47:b3:45:5c:4b:ef:9a:54:
         d2:88:5e:44:6a:b4:29:c4:bb:ef:f0:df:75:8f:dc:3c:e1:5d:
         6b:21:a6:d1:de:88:c2:cd:47:c9:83:70:ce:22:9c:0a:44:ec:
         01:66:bf:e6:ee:e1:da:0e:02:8c:cd:67:51:33:9e:d9:39:b6:
         d8:ae:ea:47:c7:9c:43:95:8c:5e:83:0a:14:59:14:ea:45:0a:
         f9:c7:ac:5c:e9:7d:dd:4d:a4:6a:fc:58:17:ab:01:e1:af:cb:
         0b:20:57:c1:6e:99:88:c1:cd:96:70:05:ef:d4:38:be:8c:ec:
         16:61:c0:05:8f:02:84:8e:55:27:b9:01:9a:f7:4d:bc:0e:71:
         20:e8:a4:c0:91:10:cc:e8:11:87:35:a7:7b:72:61:eb:ec:2c:
         fc:c5:54:ad:c5:37:42:88:fd:b8:c1:5b:58:bf:ad:95:eb:3c:
         d5:0b:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org