Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/At4si9kVBozgLSx4lKoUihTcJpk.roa
File:                     At4si9kVBozgLSx4lKoUihTcJpk.roa (raw, json)
Hash identifier:          9hSfKzSasNlSt03zpBRH27GHIGiWJOCnAwz+dERpVSg=
Subject key identifier:   02:DE:2C:8B:D9:15:06:8C:E0:2D:2C:78:94:AA:14:8A:14:DC:26:99
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1EA9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/At4si9kVBozgLSx4lKoUihTcJpk.roa
Signing time:             Wed 04 May 2022 07:07:16 +0000
ROA not before:           Wed 04 May 2022 07:07:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.184.0/21 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7849 (0x1ea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: May  4 07:07:16 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=02DE2C8BD915068CE02D2C7894AA148A14DC2699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:fe:00:99:ac:ca:7d:e1:b1:c1:1e:b6:62:
                    bb:4c:49:d5:b1:cd:70:81:52:83:c3:5d:a8:bb:06:
                    42:99:de:ec:57:23:e5:fb:83:a2:66:11:c9:18:23:
                    f5:ed:fc:20:6a:c8:13:c7:55:25:91:1c:80:4f:cf:
                    00:5e:15:4a:71:86:2c:8b:58:6d:d3:be:b2:b6:25:
                    74:6e:4e:ae:ab:6d:d2:4a:84:d5:e2:1a:01:ca:de:
                    01:ad:f3:4a:36:db:dc:f0:24:cf:82:ff:d3:8d:b2:
                    32:07:49:92:53:61:60:d1:ce:c3:d2:6e:30:44:eb:
                    59:56:1d:d5:d4:ab:17:e9:6f:49:4e:8d:85:ac:c0:
                    73:c6:1a:f5:b4:18:63:87:8e:30:70:a0:2e:92:5f:
                    0b:f4:8b:20:5b:f9:aa:f1:e8:14:55:01:8a:f4:56:
                    e1:78:b5:6d:31:94:d6:38:72:7d:b2:b9:52:05:29:
                    6e:d0:2c:0b:f5:e1:39:f7:8c:cb:75:f9:85:68:31:
                    3f:a5:71:09:44:12:38:45:0d:c0:12:8a:e8:2b:36:
                    e2:9f:72:47:e5:16:8a:20:88:90:93:94:c3:85:c4:
                    30:db:ca:05:06:5c:34:4b:8c:82:37:71:c2:95:00:
                    79:72:90:84:af:c9:d6:e2:1f:29:c1:8d:e3:53:10:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DE:2C:8B:D9:15:06:8C:E0:2D:2C:78:94:AA:14:8A:14:DC:26:99
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/At4si9kVBozgLSx4lKoUihTcJpk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:92:6b:26:10:ae:d7:80:e9:50:34:e8:b1:f4:5a:c6:28:31:
         4d:b0:3b:56:57:5b:8b:cb:3d:0a:91:e4:de:bb:ec:bc:1d:4b:
         d0:8a:47:18:e0:3a:ca:0a:a4:8e:dc:03:76:21:75:50:1d:10:
         29:5c:fc:8b:70:8d:37:f5:8a:46:6f:d0:f1:e2:ff:34:c6:3e:
         72:0a:d3:86:5f:15:fb:14:cd:3c:ba:ee:06:73:c7:fc:c8:38:
         56:40:49:c4:86:e9:02:0c:52:25:d4:18:21:47:d1:f8:f0:f9:
         22:a4:eb:a0:ed:e0:1f:3b:0e:b8:5c:7f:c8:b3:a5:f4:83:58:
         63:fa:20:06:6a:50:e3:85:46:48:73:a0:6f:4f:14:e1:bf:ed:
         cd:10:bf:63:24:0e:63:f9:61:a3:65:64:11:c6:f3:64:85:16:
         ca:61:b8:0c:71:39:aa:84:15:48:2d:ea:41:99:5d:c8:b2:87:
         2a:11:52:2d:0d:d8:0c:14:d6:53:0e:0a:68:44:44:6b:d1:e4:
         53:d3:90:1b:d5:73:31:82:45:0d:f4:c4:8c:12:8f:7f:f8:ba:
         9b:b7:76:31:02:7b:8f:d0:a3:8b:3f:70:a0:c3:0d:72:10:d0:
         02:74:f6:9e:05:ed:95:40:24:d8:ee:09:57:af:3f:fc:7a:19:
         75:46:02:67
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA1MDQw
NzA3MTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDAyREUyQzhCRDkxNTA2
OENFMDJEMkM3ODk0QUExNDhBMTREQzI2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmdP4AmazKfeGxwR62YrtMSdWxzXCBUoPDXai7BkKZ3uxXI+X7
g6JmEckYI/Xt/CBqyBPHVSWRHIBPzwBeFUpxhiyLWG3TvrK2JXRuTq6rbdJKhNXi
GgHK3gGt80o229zwJM+C/9ONsjIHSZJTYWDRzsPSbjBE61lWHdXUqxfpb0lOjYWs
wHPGGvW0GGOHjjBwoC6SXwv0iyBb+arx6BRVAYr0VuF4tW0xlNY4cn2yuVIFKW7Q
LAv14Tn3jMt1+YVoMT+lcQlEEjhFDcASiugrNuKfckflFoogiJCTlMOFxDDbygUG
XDRLjII3ccKVAHlykISvydbiHynBjeNTEKkZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAt4si9kVBozgLSx4lKoUihTcJpkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0F0NHNpOWtWQm96Z0xTeDRs
S29VaWhUY0pway5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sbgwDQYJKoZIhvcNAQELBQADggEBAJqSayYQrteA6VA06LH0WsYoMU2wO1ZXW4vL
PQqR5N677LwdS9CKRxjgOsoKpI7cA3YhdVAdEClc/ItwjTf1ikZv0PHi/zTGPnIK
04ZfFfsUzTy67gZzx/zIOFZAScSG6QIMUiXUGCFH0fjw+SKk66Dt4B87Drhcf8iz
pfSDWGP6IAZqUOOFRkhzoG9PFOG/7c0Qv2MkDmP5YaNlZBHG82SFFsphuAxxOaqE
FUgt6kGZXciyhyoRUi0N2AwU1lMOCmhERGvR5FPTkBvVczGCRQ30xIwSj3/4upu3
djECe4/Qo4s/cKDDDXIQ0AJ09p4F7ZVAJNjuCVevP/x6GXVGAmc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org