Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0s-pkPYoF39WSNrylTaL99NnVq4.roa
File:                     0s-pkPYoF39WSNrylTaL99NnVq4.roa (raw, json)
Hash identifier:          wRbLWUPGJM43kaloKQR5VuDhXOJQR2im80GGnpppnaE=
Subject key identifier:   D2:CF:A9:90:F6:28:17:7F:56:48:DA:F2:95:36:8B:F7:D3:67:56:AE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1F8C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0s-pkPYoF39WSNrylTaL99NnVq4.roa
Signing time:             Thu 08 Sep 2022 10:04:44 +0000
ROA not before:           Thu 08 Sep 2022 10:04:44 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.208.0/21 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8076 (0x1f8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep  8 10:04:44 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D2CFA990F628177F5648DAF295368BF7D36756AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:b5:53:35:7f:71:3e:e4:96:10:f3:0a:3c:
                    52:fa:4a:d6:83:5b:1b:a7:2c:09:9d:a9:8d:e4:32:
                    28:2e:88:3c:26:dd:a7:58:66:e8:69:7d:54:2d:ff:
                    47:56:cf:5c:55:6e:90:14:dc:f8:73:86:d4:72:ca:
                    68:0c:e8:70:ee:4d:04:84:46:8b:0f:f9:9e:0a:4f:
                    63:fa:9b:85:2a:18:0b:7d:c4:fb:ad:6e:30:54:74:
                    b5:fa:cd:ec:4f:43:ec:c2:cf:61:83:13:d1:2a:b7:
                    b0:20:5d:d4:91:8e:c2:cc:ad:b6:03:7d:20:66:8f:
                    23:a6:b5:d0:20:66:36:7c:eb:2f:8b:ac:a1:da:aa:
                    3d:25:0d:b8:8a:83:b9:57:28:70:e2:b7:83:bc:80:
                    70:a7:8b:69:51:20:80:fa:58:89:f5:5e:c7:fb:f2:
                    4b:5f:c5:d2:44:d1:1c:7d:42:f2:2a:71:f9:f8:7e:
                    7f:49:e0:3a:8c:d2:96:85:24:f7:25:11:1b:ee:6c:
                    ae:5e:3a:40:d5:c5:a7:95:75:ab:df:18:88:7f:b0:
                    d3:91:bb:6e:7d:05:24:82:fc:4b:33:68:15:a2:55:
                    9e:d3:81:2c:be:44:9d:0d:ee:73:b7:7e:2d:6b:40:
                    ab:2a:33:76:07:02:16:da:33:93:2c:41:15:4c:d2:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CF:A9:90:F6:28:17:7F:56:48:DA:F2:95:36:8B:F7:D3:67:56:AE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0s-pkPYoF39WSNrylTaL99NnVq4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:c8:ad:d6:ae:ab:b7:a6:a3:77:69:f5:ad:79:11:dd:db:a7:
         aa:ea:e7:e6:d2:0c:1a:1a:37:4f:86:e9:27:c5:8a:c4:9b:dc:
         2c:3e:f0:79:86:e9:b4:15:77:5f:10:8c:36:c7:f6:24:fb:bc:
         c0:c2:10:a4:85:dc:ca:53:d6:76:05:b6:dc:5b:bc:82:46:e2:
         2f:de:cd:3a:9c:f8:5e:dc:d8:39:4e:42:b0:3b:23:90:6a:b1:
         03:71:f6:22:dd:d1:11:df:13:98:f7:c0:8a:68:fb:a3:31:28:
         d1:32:f8:79:8e:b4:8b:1e:94:29:c2:b8:11:89:43:7c:85:75:
         55:43:3a:22:c5:3a:e1:3f:76:66:f2:a6:fa:89:11:cd:d2:44:
         a1:7a:99:dd:94:d8:9f:a5:e1:d3:6c:87:c8:98:4f:7d:24:f2:
         79:86:2a:6b:46:a0:71:38:d5:51:e1:92:41:be:5c:a8:17:b1:
         be:0c:c3:a7:a3:ed:61:38:7b:85:40:70:a5:61:e9:7c:7b:ed:
         ca:f0:5d:a4:b5:42:d9:04:78:d0:d7:b3:82:75:47:61:f8:f2:
         27:de:75:bd:2b:94:1a:e0:80:9c:28:40:7f:30:2a:85:fa:44:
         04:41:1d:cd:23:bb:68:d3:ec:6b:e0:06:c2:33:8f:9c:16:22:
         aa:dc:22:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org