Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BOVID_maVC7HlZGneFrytv0iE7Y.roa
File:                     BOVID_maVC7HlZGneFrytv0iE7Y.roa (raw, json)
Hash identifier:          lhAs5Zg0E3Y4G2OgfSKtvm6ZZHIN2CBdOw8aYUuQCB4=
Subject key identifier:   04:E5:48:0F:F9:9A:54:2E:C7:95:91:A7:78:5A:F2:B6:FD:22:13:B6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B13
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BOVID_maVC7HlZGneFrytv0iE7Y.roa
Signing time:             Wed 29 Sep 2021 02:46:06 +0000
ROA not before:           Wed 29 Sep 2021 02:46:06 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6931 (0x1b13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:06 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=04E5480FF99A542EC79591A7785AF2B6FD2213B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:61:69:34:b4:fc:ce:a0:6b:7f:3d:76:8a:
                    b9:a0:55:60:21:d4:01:e0:8f:d7:16:ab:32:e0:ca:
                    bc:49:5a:64:9e:cc:1f:5c:d6:15:78:f9:41:1e:45:
                    d6:bc:2b:94:cd:eb:5d:b5:78:68:5c:0a:6c:43:25:
                    51:fd:9c:f2:ef:d8:4e:e4:0a:dd:7e:49:85:df:00:
                    d2:93:6d:ac:9c:ab:16:5d:38:9b:98:1a:20:02:f9:
                    a9:a4:0e:08:46:e6:b4:4d:3f:5a:25:24:47:81:79:
                    fa:67:ae:3d:32:aa:01:96:db:de:20:c8:b9:24:1b:
                    6a:0f:e3:13:bd:8c:a0:49:e7:26:6c:30:6f:e6:95:
                    27:27:d5:5f:6f:19:0e:61:71:78:20:40:c7:9c:55:
                    b3:8d:11:97:ff:2d:c6:50:30:15:87:6c:96:8a:d5:
                    85:31:51:99:53:9c:02:1a:9b:02:ed:a6:10:0f:88:
                    f3:82:dd:8a:c2:36:27:ee:51:58:36:51:6f:ae:66:
                    ca:0e:83:25:ff:f9:ff:89:67:51:7d:23:66:0c:a0:
                    20:88:57:cd:ac:14:db:29:5c:ad:d0:66:5c:0e:f0:
                    de:c5:7b:74:3c:a3:33:9e:b9:78:e8:6d:e9:c1:48:
                    31:34:21:bc:75:1c:38:bd:75:69:70:e2:37:73:47:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E5:48:0F:F9:9A:54:2E:C7:95:91:A7:78:5A:F2:B6:FD:22:13:B6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BOVID_maVC7HlZGneFrytv0iE7Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:93:c3:bd:e4:3e:9c:53:20:c3:8d:a6:68:8d:40:7b:da:6d:
         83:fc:f2:fa:26:4b:69:08:14:56:bf:93:7b:b6:5a:e8:cd:33:
         22:a4:f4:2b:71:d1:ce:46:e8:63:83:bc:d9:0f:e2:9f:51:fd:
         23:e2:e5:63:15:fa:ca:f5:f0:67:9a:36:fe:97:a1:a3:80:94:
         21:86:62:fb:44:28:18:4c:9a:c5:af:50:cb:3c:69:27:da:9a:
         f9:af:25:de:48:c1:39:7f:df:de:6b:76:02:ed:66:34:99:b3:
         aa:90:7f:1a:9c:3c:bd:16:fc:b9:6f:d7:c5:38:13:b6:a3:06:
         4d:dd:34:9f:7e:33:7f:2a:e9:ec:0e:f0:83:74:90:18:c1:c5:
         e7:02:78:d1:56:1f:9c:1c:2f:bb:7c:8a:a1:e0:47:8b:a5:27:
         dd:1b:b9:1c:37:05:63:a4:7c:ed:ab:d9:18:d0:03:ae:cd:41:
         a2:13:4b:c8:59:76:6a:ce:3a:3a:28:c5:3e:14:6e:cd:10:ba:
         92:fe:82:12:78:7c:98:47:b6:46:98:38:08:4e:dc:52:06:64:
         da:87:e0:5a:46:99:77:0d:a8:83:84:84:c8:af:aa:67:d9:a0:
         d8:1e:e5:75:0d:25:b6:14:d9:74:e6:c2:2f:f8:f3:10:bb:e3:
         7b:14:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org