Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8YY5__DjQKAfy0gLNsaFAdksYZ8.roa
File:                     8YY5__DjQKAfy0gLNsaFAdksYZ8.roa (raw, json)
Hash identifier:          qWtCcZhdz2n2KSBdjSEvvYjlwx7rv3veAZak+pfZUF4=
Subject key identifier:   F1:86:39:FF:F0:E3:40:A0:1F:CB:48:0B:36:C6:85:01:D9:2C:61:9F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B70
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8YY5__DjQKAfy0gLNsaFAdksYZ8.roa
Signing time:             Wed 29 Sep 2021 02:46:36 +0000
ROA not before:           Wed 29 Sep 2021 02:46:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.36.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7024 (0x1b70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F18639FFF0E340A01FCB480B36C68501D92C619F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:fa:bc:42:63:32:e3:4e:d7:ee:13:24:47:
                    64:a9:93:8a:0e:0b:c8:d2:df:34:fe:32:f0:5d:f1:
                    f7:f7:90:65:6f:00:c7:cc:02:1c:dc:01:8a:25:21:
                    04:62:12:f4:7d:6b:c1:ce:de:28:bd:be:50:a9:25:
                    fe:4d:ae:a0:1e:2b:7a:c4:f6:7d:81:10:6e:6b:fb:
                    04:84:eb:e8:ce:0e:34:e6:60:5b:3f:cf:d3:92:2b:
                    61:91:f0:15:b1:26:6c:2e:07:8e:0b:e9:27:c8:eb:
                    5c:dc:b0:fc:bd:69:ec:b5:1a:0f:77:77:ca:b3:0b:
                    f5:71:cd:56:75:74:ef:d8:7e:1f:82:8a:59:1c:1e:
                    9b:8e:c3:bc:76:66:90:d7:43:48:b8:be:67:e0:c1:
                    87:ed:81:47:cd:1d:d9:10:41:c2:8d:8f:52:e2:4f:
                    96:0c:e1:a3:97:08:f3:c6:72:f9:21:c3:1e:c6:b8:
                    78:51:50:99:eb:76:cc:04:e4:26:20:bb:3a:17:00:
                    83:00:8a:07:20:9f:d6:46:1d:2a:a4:47:a8:a7:71:
                    c5:3d:7c:40:11:ea:21:58:57:e8:23:85:a6:94:5f:
                    59:47:4e:90:2d:b1:23:ee:b4:05:ae:1f:87:90:b6:
                    54:96:3a:9e:a5:d5:3e:b6:b9:6d:1e:02:57:14:72:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:86:39:FF:F0:E3:40:A0:1F:CB:48:0B:36:C6:85:01:D9:2C:61:9F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8YY5__DjQKAfy0gLNsaFAdksYZ8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:40:5c:ac:1d:d7:14:e8:41:ef:59:49:69:db:d4:6e:9f:
         df:67:c6:72:e3:f5:1f:80:4a:cb:fb:1c:d1:e9:89:94:63:26:
         19:54:5c:52:1e:80:5e:43:97:aa:ba:4d:c9:65:2f:0e:0b:7e:
         f1:6f:89:ab:78:27:f7:af:33:cd:f9:8b:ba:b1:94:d4:57:3e:
         91:8a:94:6a:e4:44:08:34:75:a4:75:6d:7e:bf:de:f3:d4:08:
         ce:09:67:81:8f:8a:67:a7:31:03:21:5e:9f:2a:bd:57:70:ad:
         4c:4e:f2:bc:95:8d:9e:f8:f4:28:46:20:fe:f7:6a:3d:3c:c1:
         f3:79:11:2e:b9:44:6a:83:f8:d1:4a:ec:a0:d4:56:ed:c5:00:
         37:05:6b:67:39:0f:98:2c:5c:19:4f:8b:30:dc:80:5a:f6:58:
         a6:58:3b:f7:ba:24:2d:a6:2f:40:a2:47:8e:fd:f6:2f:2b:f8:
         00:46:88:24:cc:cf:a8:fc:da:07:98:db:15:8f:de:3d:4e:9a:
         6c:0a:cf:e0:38:d5:96:b3:28:a0:0d:d6:09:0e:10:7e:7a:e2:
         88:de:f1:7a:25:35:21:a0:2e:5c:33:46:4e:b6:6d:f3:6f:88:
         e3:31:71:7f:3c:8b:6c:55:a6:f8:ce:09:ac:06:5c:4d:f9:4c:
         e3:38:80:03
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ2MzZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEYxODYzOUZGRjBFMzQw
QTAxRkNCNDgwQjM2QzY4NTAxRDkyQzYxOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9PPq8QmMy407X7hMkR2Spk4oOC8jS3zT+MvBd8ff3kGVvAMfM
AhzcAYolIQRiEvR9a8HO3ii9vlCpJf5NrqAeK3rE9n2BEG5r+wSE6+jODjTmYFs/
z9OSK2GR8BWxJmwuB44L6SfI61zcsPy9aey1Gg93d8qzC/VxzVZ1dO/Yfh+Cilkc
HpuOw7x2ZpDXQ0i4vmfgwYftgUfNHdkQQcKNj1LiT5YM4aOXCPPGcvkhwx7GuHhR
UJnrdswE5CYguzoXAIMAigcgn9ZGHSqkR6inccU9fEAR6iFYV+gjhaaUX1lHTpAt
sSPutAWuH4eQtlSWOp6l1T62uW0eAlcUcuUDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8YY5//DjQKAfy0gLNsaFAdksYZ8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhZWTVfX0RqUUtBZnkwZ0xO
c2FGQWRrc1laOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sSQwDQYJKoZIhvcNAQELBQADggEBAG0WQFysHdcU6EHvWUlp29Run99nxnLj9R+A
Ssv7HNHpiZRjJhlUXFIegF5Dl6q6TcllLw4LfvFviat4J/evM835i7qxlNRXPpGK
lGrkRAg0daR1bX6/3vPUCM4JZ4GPimenMQMhXp8qvVdwrUxO8ryVjZ749ChGIP73
aj08wfN5ES65RGqD+NFK7KDUVu3FADcFa2c5D5gsXBlPizDcgFr2WKZYO/e6JC2m
L0CiR4799i8r+ABGiCTMz6j82geY2xWP3j1OmmwKz+A41ZazKKAN1gkOEH564oje
8XolNSGgLlwzRk62bfNviOMxcX88i2xVpvjOCawGXE35TOM4gAM=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:22 2023 by rpki-client on console-fra.rpki-client.org