Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/21IZqPZ4d_LNNrMZPtfMcloMgCU.roa
File:                     21IZqPZ4d_LNNrMZPtfMcloMgCU.roa (raw, json)
Hash identifier:          +d/+B4dMKELnj/SWAz6bWH6j9mq/Krwa+jzv+nLrKac=
Subject key identifier:   DB:52:19:A8:F6:78:77:F2:CD:36:B3:19:3E:D7:CC:72:5A:0C:80:25
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16A5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/21IZqPZ4d_LNNrMZPtfMcloMgCU.roa
Signing time:             Sun 07 Feb 2021 12:13:23 +0000
ROA not before:           Sun 07 Feb 2021 12:13:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5797 (0x16a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:13:23 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DB5219A8F67877F2CD36B3193ED7CC725A0C8025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:27:ae:8e:1d:b3:b2:55:db:1f:c9:e3:d7:de:
                    d1:39:a7:2c:31:23:89:68:22:34:a7:e8:7a:55:40:
                    4c:4d:a3:7a:ea:e3:da:db:a1:70:56:0f:36:8f:ba:
                    9c:9b:ef:d3:8f:39:c4:39:61:ae:a5:f4:d4:86:67:
                    65:2c:e1:83:c3:3a:37:c0:2d:03:bd:d5:bd:09:c8:
                    73:f1:52:9c:e8:8e:35:b4:b6:c4:ef:57:62:7b:7a:
                    7b:3b:3e:8f:27:50:9d:95:09:b7:08:9c:fb:66:3f:
                    63:d2:8e:d0:2a:2e:8c:60:64:54:2e:4e:77:6a:11:
                    c4:ab:c4:5a:5d:b7:48:6d:af:49:e4:7f:4f:cb:c4:
                    b3:ad:c1:39:91:b6:32:c6:4f:e9:c3:54:c7:a7:5c:
                    53:f8:03:f2:23:52:b2:32:4d:d7:5f:14:38:d5:f0:
                    2a:e1:49:3b:2c:e8:d2:8d:c5:61:3f:28:69:48:d0:
                    30:0e:d2:74:4c:c6:fa:37:f5:8f:3d:a3:4c:8c:ec:
                    7f:e8:29:62:1d:37:8f:24:e2:46:d4:f1:56:bd:27:
                    f9:7f:ca:0d:95:06:15:7a:c4:fc:66:a4:52:c5:f7:
                    24:7e:11:39:6e:0a:dc:98:a2:c3:29:07:fb:69:76:
                    07:6a:22:02:89:43:1a:56:1b:6c:00:1b:65:48:f3:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:52:19:A8:F6:78:77:F2:CD:36:B3:19:3E:D7:CC:72:5A:0C:80:25
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/21IZqPZ4d_LNNrMZPtfMcloMgCU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:87:25:f5:df:01:e9:71:54:a5:ab:7c:a1:09:ae:f9:ff:41:
         b8:01:fd:83:e5:12:be:60:66:6c:1f:c3:76:1e:f0:dc:e0:91:
         1b:d3:86:0c:c5:6d:1c:2a:ea:7e:f4:26:a8:62:7e:cb:dc:99:
         91:ff:5e:b7:2b:99:60:71:e9:f5:11:57:fc:b0:d3:93:11:56:
         9b:2e:fb:cf:9c:d2:b9:87:bf:12:6a:62:5d:34:c2:65:31:6a:
         7e:56:84:a0:9c:fc:2c:ad:98:49:5f:e4:72:49:d9:df:fd:12:
         a9:a5:9f:96:ba:09:e2:ba:f4:eb:95:76:60:ca:ad:27:4f:b5:
         b9:a9:8e:68:3e:d8:e8:ce:18:0c:28:27:e8:5a:b8:4c:37:e6:
         da:1e:0a:58:81:d6:f5:6c:c9:4e:04:9b:b2:fb:97:17:22:3f:
         38:68:a4:f5:11:df:f1:8f:2b:6e:7c:4e:d4:fa:8e:13:00:ab:
         10:a1:2b:7c:1f:05:20:3e:52:c1:26:58:1f:4c:4f:ae:fa:93:
         0b:9a:53:5c:7d:9b:90:32:cc:18:6c:63:e1:75:82:fe:dc:fa:
         13:d3:27:64:85:6d:39:3b:4d:fa:4e:94:b2:0d:2e:57:d3:dd:
         74:24:1d:56:a4:f1:58:97:c8:04:ec:a4:04:a6:f0:5d:15:60:
         cc:05:52:ca
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjEzMjNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERCNTIxOUE4RjY3ODc3
RjJDRDM2QjMxOTNFRDdDQzcyNUEwQzgwMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtJ66OHbOyVdsfyePX3tE5pywxI4loIjSn6HpVQExNo3rq49rb
oXBWDzaPupyb79OPOcQ5Ya6l9NSGZ2Us4YPDOjfALQO91b0JyHPxUpzojjW0tsTv
V2J7ens7Po8nUJ2VCbcInPtmP2PSjtAqLoxgZFQuTndqEcSrxFpdt0htr0nkf0/L
xLOtwTmRtjLGT+nDVMenXFP4A/IjUrIyTddfFDjV8CrhSTss6NKNxWE/KGlI0DAO
0nRMxvo39Y89o0yM7H/oKWIdN48k4kbU8Va9J/l/yg2VBhV6xPxmpFLF9yR+ETlu
CtyYosMpB/tpdgdqIgKJQxpWG2wAG2VI87ZTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU21IZqPZ4d/LNNrMZPtfMcloMgCUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzIxSVpxUFo0ZF9MTk5yTVpQ
dGZNY2xvTWdDVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sdQwDQYJKoZIhvcNAQELBQADggEBAFCHJfXfAelxVKWrfKEJrvn/QbgB/YPlEr5g
Zmwfw3Ye8NzgkRvThgzFbRwq6n70JqhifsvcmZH/XrcrmWBx6fURV/yw05MRVpsu
+8+c0rmHvxJqYl00wmUxan5WhKCc/CytmElf5HJJ2d/9Eqmln5a6CeK69OuVdmDK
rSdPtbmpjmg+2OjOGAwoJ+hauEw35toeCliB1vVsyU4Em7L7lxciPzhopPUR3/GP
K258TtT6jhMAqxChK3wfBSA+UsEmWB9MT676kwuaU1x9m5AyzBhsY+F1gv7c+hPT
J2SFbTk7TfpOlLINLlfT3XQkHVak8ViXyATspASm8F0VYMwFUso=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org