Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AUUTN5Tev7yQf6lJdtAkWpQJtyM.roa
File:                     AUUTN5Tev7yQf6lJdtAkWpQJtyM.roa (raw, json)
Hash identifier:          +PnJpe4mCxPSePZ1X01xgvDfBHqjKitZDVHZh9mwtXM=
Subject key identifier:   01:45:13:37:94:DE:BF:BC:90:7F:A9:49:76:D0:24:5A:94:09:B7:23
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B47
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AUUTN5Tev7yQf6lJdtAkWpQJtyM.roa
Signing time:             Wed 29 Sep 2021 02:46:23 +0000
ROA not before:           Wed 29 Sep 2021 02:46:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.116.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6983 (0x1b47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0145133794DEBFBC907FA94976D0245A9409B723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:84:aa:7f:e1:ba:bb:c8:d4:be:c2:7d:5b:
                    a4:7f:6a:c7:3b:95:5e:aa:47:64:b6:42:73:dd:84:
                    2b:78:0b:1e:ba:1a:45:2c:2b:e9:1b:ed:85:3a:47:
                    c4:7f:24:69:00:fa:d3:59:6e:50:2d:f9:35:50:2d:
                    06:0f:12:02:6b:37:9f:52:18:66:d1:33:10:29:9c:
                    82:8c:ea:79:35:4e:dc:20:3a:5b:8b:15:43:15:28:
                    50:ef:74:03:ee:50:09:1a:56:18:d1:e1:fe:2f:05:
                    19:27:d8:5f:c9:65:f8:4c:9a:f0:22:ef:a7:01:6d:
                    52:a7:d6:d6:30:02:3e:07:c0:df:25:f7:06:c7:e7:
                    13:a6:9e:5e:a9:de:4e:a8:17:45:1a:9e:bd:66:ad:
                    81:c6:09:8d:7b:8a:06:6e:94:68:eb:5a:9e:06:75:
                    56:f7:e8:be:5a:94:57:14:88:b6:eb:5b:51:6f:82:
                    0b:6a:5b:61:67:dc:c8:26:e2:b3:a7:89:b9:e2:0e:
                    17:ee:a3:d3:8a:53:93:1c:cd:f0:3b:9a:ef:d9:8a:
                    12:d4:4f:a4:63:8a:09:61:da:e2:02:4e:52:41:b8:
                    79:fa:ad:8e:ed:80:d0:bd:45:f9:aa:b7:39:fa:29:
                    ad:b8:93:c9:3b:a9:59:0e:11:66:12:a2:28:37:00:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:45:13:37:94:DE:BF:BC:90:7F:A9:49:76:D0:24:5A:94:09:B7:23
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AUUTN5Tev7yQf6lJdtAkWpQJtyM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:45:58:90:86:ea:fc:2c:fe:a1:fd:d0:6a:aa:f9:25:8e:cb:
         03:77:60:9d:97:cb:9e:ca:5e:cd:4a:eb:24:13:b4:3a:15:19:
         63:12:6f:d2:c1:2c:4a:32:a9:ae:2f:aa:78:df:77:65:21:34:
         89:25:c8:16:eb:c5:90:96:06:29:c3:92:12:4a:e8:61:4b:f1:
         bd:c7:d1:d8:56:a5:df:e6:92:dc:37:1e:18:4c:65:2c:6d:9d:
         3d:fd:46:16:19:1b:da:42:36:16:93:91:a4:cc:9b:88:f5:aa:
         4c:a4:e9:6f:c1:5e:ea:43:44:26:7a:99:26:b4:f5:5e:e8:65:
         85:79:da:0a:b0:30:5c:fb:71:30:4d:a6:11:66:8a:c1:9a:cc:
         82:26:44:ed:14:6e:77:cc:43:9c:2f:08:79:3c:97:d6:57:c0:
         19:a7:e7:e4:96:fb:79:8c:30:02:9b:7a:c3:e5:90:9a:87:27:
         8e:16:eb:ed:5f:ab:c3:7f:7c:b7:95:c2:9c:fb:4b:3a:1a:e3:
         2a:24:06:93:5d:64:a0:58:7f:b1:fa:b3:ac:f9:48:fd:b9:9e:
         70:f9:6d:11:ea:3e:32:57:db:40:96:80:82:2f:88:89:3a:b4:
         a8:e7:c6:be:6c:30:23:a3:61:d6:ab:7e:83:86:ed:27:e6:f9:
         2b:51:4e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org