Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5YVXuaqp4BsCTay8xOTYWY8uGo0.roa
File:                     5YVXuaqp4BsCTay8xOTYWY8uGo0.roa (raw, json)
Hash identifier:          oBjCs/vINsy8uQf95qWgvzdL64ayLLImP9KDYKDi/94=
Subject key identifier:   E5:85:57:B9:AA:A9:E0:1B:02:4D:AC:BC:C4:E4:D8:59:8F:2E:1A:8D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       162D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5YVXuaqp4BsCTay8xOTYWY8uGo0.roa
Signing time:             Sun 07 Feb 2021 12:08:48 +0000
ROA not before:           Sun 07 Feb 2021 12:08:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5677 (0x162d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:08:48 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E58557B9AAA9E01B024DACBCC4E4D8598F2E1A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:32:aa:8f:b5:b5:6b:9b:47:bf:1c:00:a3:
                    0c:f0:f2:c5:ee:d0:b7:fa:67:e9:35:09:80:37:f9:
                    e7:fd:16:9f:da:62:0e:d5:43:f1:90:c5:33:19:d7:
                    e8:57:91:b8:33:6e:67:bc:36:e3:22:2a:9b:f5:24:
                    62:34:9c:35:96:11:a3:6c:e7:f5:15:d7:7e:cb:1a:
                    18:31:34:81:23:6d:47:ce:01:fd:f0:25:2a:a2:f1:
                    bd:61:ba:d8:8f:f2:33:d8:d5:8c:6a:c5:89:ef:96:
                    0f:34:37:1a:cb:f7:8d:ad:06:35:ea:a0:f8:85:a0:
                    43:e9:8c:b3:63:85:97:5c:65:ba:34:5e:e3:eb:83:
                    2e:20:95:c4:82:7b:f1:fc:1b:f5:d3:7d:17:65:5c:
                    ee:f2:9f:99:dd:9e:8a:63:6d:96:b2:c0:eb:21:a6:
                    d2:80:63:f7:b1:4b:d6:d6:7a:5d:d2:2f:1e:bf:58:
                    97:4c:80:24:8f:9e:23:09:fc:ec:3b:4f:1d:d7:94:
                    75:a4:bd:65:b9:e6:a0:3b:ca:10:9e:2a:da:eb:dc:
                    c5:03:f1:1b:2d:9b:87:bc:21:cc:88:a4:51:6e:b5:
                    c9:97:12:26:65:ff:1d:c2:5e:01:2a:37:b3:26:31:
                    9a:52:ec:a8:43:b6:9c:7d:2a:12:9c:62:23:c7:f8:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:85:57:B9:AA:A9:E0:1B:02:4D:AC:BC:C4:E4:D8:59:8F:2E:1A:8D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5YVXuaqp4BsCTay8xOTYWY8uGo0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:19:d6:b5:57:88:48:1a:ec:9a:50:8f:02:6f:47:cc:b7:4c:
         40:1b:18:fd:39:98:c8:35:f7:08:3c:58:b9:97:b3:7b:42:fe:
         7f:02:b1:30:26:b7:7a:d5:24:32:e5:fc:3f:aa:5a:85:68:bc:
         bd:78:0d:f5:70:46:11:97:aa:87:44:c3:e0:20:21:d2:9f:1c:
         8f:c2:e9:30:cb:95:3c:ae:c2:b0:4f:7c:70:0d:bf:92:c0:1c:
         34:e9:42:52:d4:ab:ca:99:eb:f1:b3:ec:3d:91:d8:9a:a2:0c:
         c3:39:f7:54:f8:93:b5:51:a1:a5:d1:64:54:8f:3d:b4:a4:26:
         5c:e2:c8:ef:6b:41:46:ec:fa:b3:57:fa:ed:57:ae:03:d9:da:
         f1:3b:34:7b:b5:c6:5b:fd:f2:1b:22:e9:8b:7b:87:34:47:b1:
         50:26:20:97:50:48:47:bd:b4:58:11:ba:1c:5e:41:3f:3e:95:
         4f:1e:da:42:c2:d4:f6:dc:84:8f:32:4a:7d:ca:1a:fc:7d:52:
         3a:a4:43:06:49:67:2a:30:bc:9c:0c:64:7f:db:de:be:d4:85:
         99:87:44:72:45:ac:1f:c5:ce:92:04:b5:52:10:c8:e5:85:f4:
         44:9c:a4:2d:72:26:74:d8:00:02:50:e6:fe:70:37:76:71:80:
         f8:94:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org