Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/55ux2CSXrOAhGW60PQBqUTOaWlo.roa
File:                     55ux2CSXrOAhGW60PQBqUTOaWlo.roa (raw, json)
Hash identifier:          OZLA9ZvE1Wck3Tsn8lYDiZ8FB7WD9lqiVVVA1GzaxQw=
Subject key identifier:   E7:9B:B1:D8:24:97:AC:E0:21:19:6E:B4:3D:00:6A:51:33:9A:5A:5A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/55ux2CSXrOAhGW60PQBqUTOaWlo.roa
Signing time:             Thu 15 Sep 2022 02:52:38 +0000
ROA not before:           Thu 15 Sep 2022 02:52:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E79BB1D82497ACE021196EB43D006A51339A5A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:76:7b:bc:7b:d9:c8:a0:d2:56:e5:15:20:
                    11:10:69:cc:e9:12:83:b0:5e:6f:f3:30:55:f7:35:
                    15:e6:75:f4:0b:0a:12:98:8c:68:f8:85:56:4e:4a:
                    9d:cd:ed:05:1a:74:43:7f:e1:4e:f1:5b:44:c5:75:
                    c5:73:7f:1e:22:8f:69:b5:19:e6:f6:d1:38:09:ef:
                    fc:2e:40:00:67:69:64:77:0d:ae:7b:45:e4:f6:b8:
                    95:be:2d:89:67:ba:a7:1e:88:fb:26:ff:6b:c6:cc:
                    01:7a:63:67:0f:e4:90:09:af:e2:88:0c:6e:67:ad:
                    77:f9:90:ea:a6:d9:39:3a:43:8c:4e:fc:f8:70:cc:
                    d4:6b:da:00:a7:2e:7a:b2:d1:e1:f2:50:1b:8e:85:
                    ac:1f:5b:87:c9:d0:09:f4:1e:e5:d4:7c:d1:e7:c3:
                    b0:01:4a:a6:da:b3:53:41:f3:0f:6b:6a:ad:6c:b1:
                    64:e0:62:a0:6f:a5:75:ae:e0:99:f5:42:fd:b8:88:
                    ce:a0:7c:66:98:3e:f6:5d:c9:08:1c:81:fc:fe:f4:
                    6d:f4:3b:1e:de:8c:3c:fe:64:97:7a:f1:5c:76:d4:
                    4b:90:68:14:d0:32:40:98:63:1f:e0:ff:28:45:df:
                    b0:86:28:74:f4:51:0c:0f:1a:25:d9:2a:7c:23:2f:
                    42:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9B:B1:D8:24:97:AC:E0:21:19:6E:B4:3D:00:6A:51:33:9A:5A:5A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/55ux2CSXrOAhGW60PQBqUTOaWlo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:a2:0f:d7:20:24:3d:08:6b:68:c5:19:fb:67:eb:d2:9c:
         e1:43:a4:e2:c1:61:69:ed:0c:67:ea:7a:65:d2:90:6e:71:da:
         de:6f:33:d5:a0:16:10:4f:fc:a2:43:9e:5a:0f:8a:65:d9:77:
         07:92:de:1f:95:84:09:49:79:a5:72:11:c3:33:fb:80:9e:2e:
         08:1b:fa:06:40:43:95:c3:e9:15:5c:6d:4a:a8:ce:dc:7d:60:
         6e:94:68:7d:83:03:c0:a7:1d:b6:d1:e5:74:87:d5:c8:96:7d:
         16:1c:5f:61:e7:c5:45:30:98:83:e7:40:a8:f3:0c:a0:32:b0:
         e4:a5:a5:b5:22:24:89:5c:79:9c:ab:c2:4b:29:a1:07:70:09:
         60:aa:ea:50:14:e3:8a:6e:07:c6:f6:48:45:7e:05:b6:12:66:
         5e:75:99:1c:d5:42:f5:37:d3:46:40:f4:e5:03:30:7e:22:d1:
         51:56:e5:ea:81:69:fa:ae:2f:a9:d3:0e:2c:2e:04:4a:7f:1d:
         1c:bf:f4:24:1e:37:c9:9d:58:5c:c9:6d:a0:c4:a1:4b:a3:d9:
         e6:36:6d:ba:6e:b1:12:d3:80:eb:5f:3d:b1:a4:00:9d:02:bd:
         b7:21:b8:e5:f5:34:ed:f1:6e:38:80:0b:b5:fc:60:9f:c6:94:
         3d:cc:0e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org