Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0tXRyCafBlsYQt5qvAAGNttnsEQ.roa
File:                     0tXRyCafBlsYQt5qvAAGNttnsEQ.roa (raw, json)
Hash identifier:          iNpBXR/xaCYb3ncklgVYPZccjRAz9EdjCmRdOg0APXY=
Subject key identifier:   D2:D5:D1:C8:26:9F:06:5B:18:42:DE:6A:BC:00:06:36:DB:67:B0:44
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AEA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0tXRyCafBlsYQt5qvAAGNttnsEQ.roa
Signing time:             Wed 29 Sep 2021 02:45:54 +0000
ROA not before:           Wed 29 Sep 2021 02:45:54 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.228.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6890 (0x1aea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:54 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D2D5D1C8269F065B1842DE6ABC000636DB67B044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:6c:f8:7c:4a:71:8a:4d:d2:39:68:e8:2a:
                    fa:4f:af:9c:bf:29:6e:1a:09:71:be:3f:94:c6:61:
                    98:62:64:a5:52:18:56:39:5f:91:f9:7b:9a:aa:3d:
                    a4:89:1d:3b:91:35:8c:a4:21:26:2f:29:b8:e4:18:
                    5a:a1:b7:98:ac:ab:a1:f6:ab:f6:d2:3e:04:50:b2:
                    70:18:19:50:e7:ec:4e:3b:5b:56:c6:1a:70:1f:79:
                    5e:6b:0e:6b:13:e2:05:c0:90:15:88:5c:cc:0c:53:
                    4b:c5:8d:c7:77:b1:99:14:e7:9f:1d:5b:36:86:ab:
                    4f:51:8f:6c:57:e6:ad:3d:80:c2:6e:6d:cf:8b:d6:
                    01:d0:20:40:31:ed:e1:d1:fc:01:e3:f1:52:a1:2f:
                    0b:78:da:ac:15:c8:82:20:77:4b:f0:9b:6c:1d:e5:
                    e0:96:e3:26:ae:7a:9c:94:c0:c2:1e:16:da:44:67:
                    8a:63:3c:a1:1d:56:5f:7b:9c:36:9d:b5:e7:48:4a:
                    3c:b1:65:75:28:66:9a:24:24:33:b1:75:6e:e5:97:
                    f8:60:54:e2:2e:b0:a1:69:b0:30:ef:cc:c5:7a:14:
                    b2:c0:76:6e:bb:d6:bb:11:4d:dc:6b:67:d2:3e:b0:
                    0d:84:43:6b:9e:98:9e:78:2a:1f:25:83:d9:05:87:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D5:D1:C8:26:9F:06:5B:18:42:DE:6A:BC:00:06:36:DB:67:B0:44
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0tXRyCafBlsYQt5qvAAGNttnsEQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:77:81:c6:88:d6:5a:21:d6:a6:cc:85:bb:a9:87:0c:bb:
         54:e0:f7:94:07:bf:d3:a5:ee:da:b9:d6:c4:55:0b:c7:f8:43:
         77:25:d4:01:eb:57:98:ab:4d:c1:20:e0:3c:5d:b4:17:2e:dc:
         fe:28:cd:70:17:c3:a1:48:ac:96:3b:eb:d4:c0:3a:df:a3:82:
         7e:7b:1a:9d:b7:80:f8:6f:2b:30:9b:42:55:b5:af:ce:1a:41:
         77:b7:c4:ce:4d:d6:63:f5:fb:51:33:bd:8a:0c:ee:e2:b7:88:
         3b:c8:b1:fc:da:a0:ca:dd:16:2f:c3:d3:a8:7c:0f:3d:25:68:
         7c:d7:82:ee:fe:3b:75:8d:a8:72:17:0d:11:d8:e2:9d:3b:59:
         97:db:bb:8a:4e:cc:5c:b4:f3:60:f9:d5:77:27:f0:e6:3b:e9:
         d1:59:26:07:50:18:fb:aa:f5:2b:a1:58:4c:41:0e:10:af:95:
         50:a1:c6:1d:0d:5d:65:9e:cf:0e:30:dc:a0:20:61:ad:35:4e:
         b5:8f:63:c9:28:df:0e:28:0c:b2:19:17:00:a4:69:fb:e1:a7:
         5f:6e:fd:93:a7:b1:bd:89:55:93:7f:7b:9b:5a:58:6d:0d:01:
         e1:1b:da:2e:c2:fc:49:5a:2e:c3:85:a8:fc:f3:b9:a5:ea:61:
         ab:62:34:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org