Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5I_acNEQ-90oQ4i1w7iW9XVToWk.roa
File:                     5I_acNEQ-90oQ4i1w7iW9XVToWk.roa (raw, json)
Hash identifier:          PwmVh1oZxxxokn2pngT9ZTwEsccsiidi8MC0aYBXje4=
Subject key identifier:   E4:8F:DA:70:D1:10:FB:DD:28:43:88:B5:C3:B8:96:F5:75:53:A1:69
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       238A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5I_acNEQ-90oQ4i1w7iW9XVToWk.roa
Signing time:             Fri 16 Dec 2022 03:53:54 +0000
ROA not before:           Fri 16 Dec 2022 03:53:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9098 (0x238a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Dec 16 03:53:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E48FDA70D110FBDD284388B5C3B896F57553A169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:8f:28:dc:39:b9:6f:1e:13:95:2e:5d:9b:
                    23:73:04:1b:9e:5b:e1:2a:55:47:a9:e0:18:9f:64:
                    3a:c9:f6:49:fe:88:2e:6e:89:6b:4e:27:8d:0a:a2:
                    b3:86:df:d2:65:bf:d2:e7:cf:4b:e2:e2:c6:42:ff:
                    34:02:ec:1c:f1:68:16:1b:58:5e:56:53:93:31:90:
                    56:ef:23:8b:bf:57:54:9b:01:6a:01:56:e9:8d:4d:
                    c3:d9:cd:8b:79:1c:3d:a1:6d:63:a4:ef:de:f3:0c:
                    ad:73:04:03:34:8b:bc:45:be:53:29:14:01:54:c4:
                    02:ec:16:be:71:b3:ee:9f:2d:72:94:38:a2:1f:fe:
                    58:27:94:75:96:33:8a:c5:97:aa:ce:7b:0e:d8:b4:
                    9c:4d:ec:45:9e:3c:d5:84:4b:14:4c:f9:20:27:c0:
                    c1:75:15:80:84:81:f4:66:49:60:c1:99:f8:65:99:
                    cf:41:e7:71:97:ad:55:9c:bc:4e:e5:81:e2:1e:91:
                    2b:e2:c3:c7:f6:c5:d4:fb:3b:43:15:cd:af:df:63:
                    8c:28:66:a8:f4:6f:16:00:d9:95:5c:35:02:6e:90:
                    bd:b8:4d:20:c6:13:27:34:74:70:ca:d4:5d:91:7f:
                    96:2e:d5:ed:76:4c:e7:2f:41:1f:6f:03:5b:71:0f:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8F:DA:70:D1:10:FB:DD:28:43:88:B5:C3:B8:96:F5:75:53:A1:69
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5I_acNEQ-90oQ4i1w7iW9XVToWk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         59:e4:ba:ee:28:17:90:d5:d1:4d:a5:bb:c6:42:86:da:98:12:
         4e:81:07:80:5e:27:b0:94:ed:f3:94:4c:e7:ec:90:bb:02:b7:
         1b:29:ea:8f:ee:07:df:92:a1:59:cc:70:d7:dc:0c:3f:a1:c1:
         1f:17:0c:59:ff:a4:91:65:07:46:3e:29:e9:3f:31:5e:91:ec:
         96:ba:c5:e4:21:4c:91:ff:6e:13:4e:51:58:92:38:c4:27:ec:
         00:f9:66:fb:ff:a5:1d:42:40:fc:06:b5:6a:4b:ba:df:8c:24:
         77:b3:be:8f:d4:af:20:53:5f:30:85:10:e2:05:a5:85:7e:4b:
         30:51:00:24:d0:36:a5:50:12:c3:ef:28:50:fe:50:31:51:44:
         87:63:8d:44:a2:55:27:83:df:5c:f8:41:63:ce:5a:65:23:94:
         91:57:20:94:31:47:98:f8:96:e5:84:7e:0c:eb:d9:c8:6a:3f:
         10:33:ba:3c:3d:c2:29:df:85:77:bd:7f:d4:79:5f:05:3f:33:
         49:aa:4c:bd:d2:ba:51:c8:29:2b:c6:0f:58:08:f8:c3:6e:a1:
         c4:16:c5:d6:99:83:7c:1d:32:91:e0:7f:c4:52:3e:6b:ac:e6:
         e2:6f:49:09:50:62:20:fe:8a:06:30:98:78:d5:0f:40:68:af:
         43:57:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org