Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CAn9qrj-0xbJJiCvam0tKrRt_qA.roa
File:                     CAn9qrj-0xbJJiCvam0tKrRt_qA.roa (raw, json)
Hash identifier:          RVDIekqHSaTgIGpSi/5q7R4LF/MOsOt6tFT0bMlhTAQ=
Subject key identifier:   08:09:FD:AA:B8:FE:D3:16:C9:26:20:AF:6A:6D:2D:2A:B4:6D:FE:A0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CAn9qrj-0xbJJiCvam0tKrRt_qA.roa
Signing time:             Fri 25 Nov 2022 04:40:26 +0000
ROA not before:           Fri 25 Nov 2022 04:40:26 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.48.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8655 (0x21cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:26 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0809FDAAB8FED316C92620AF6A6D2D2AB46DFEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:22:e5:1e:91:7e:44:13:74:5a:ea:ad:35:
                    6c:cf:ca:ae:e7:86:69:65:ac:cb:9e:c5:69:0c:d6:
                    74:71:09:c4:5b:cf:06:1b:1b:72:4e:ab:8c:3e:f3:
                    3e:df:c1:c8:ef:6d:42:09:77:39:a2:0b:91:52:2c:
                    74:a0:19:36:5c:aa:53:76:5c:54:7d:ad:88:91:41:
                    1d:0c:5b:d9:2a:e1:71:34:41:12:c3:e2:11:bb:1e:
                    0f:7b:b2:db:8c:4e:11:b7:0e:05:d0:25:c5:7a:11:
                    2b:d9:93:97:e7:25:aa:5f:8f:5b:bd:e5:fe:97:61:
                    97:0d:12:0c:c7:79:66:26:a0:d0:d9:3d:ab:60:96:
                    b0:5e:d6:17:1c:e0:ac:25:54:92:70:c5:18:aa:52:
                    0b:99:4c:7d:f8:1c:90:ae:a1:03:11:04:4d:c7:65:
                    b1:70:b3:8d:d3:e6:9b:56:b5:ca:aa:b3:31:74:ab:
                    9b:ca:1e:fe:54:14:01:b2:de:cb:77:7c:fd:a0:6f:
                    d0:41:db:49:6f:d2:5a:2c:27:cc:9d:06:da:a6:2a:
                    3d:28:09:80:fb:81:1d:72:cb:af:72:eb:ff:68:72:
                    d1:67:b1:02:ac:e8:a0:6c:c5:93:f4:9c:1e:be:b9:
                    ed:05:29:6a:dd:3e:a8:d4:2b:66:6f:26:d0:09:c1:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:09:FD:AA:B8:FE:D3:16:C9:26:20:AF:6A:6D:2D:2A:B4:6D:FE:A0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CAn9qrj-0xbJJiCvam0tKrRt_qA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:6b:d6:b3:53:3c:9e:f2:83:32:cb:cc:3b:c2:3b:86:40:0f:
         c2:76:a9:fd:0f:24:3e:1a:2c:f2:fc:01:ee:f5:ce:fe:73:57:
         3e:eb:45:ea:84:56:b6:19:d9:d5:07:c2:82:3c:01:45:72:61:
         c3:6b:d4:10:e3:aa:9f:e5:e6:a0:33:e1:9f:09:46:34:ea:54:
         a7:b0:86:42:c5:fd:8a:ac:bf:53:ab:52:54:d8:01:2a:9b:23:
         11:34:eb:08:d1:aa:c8:60:3d:ee:36:a5:b6:74:b3:28:69:1d:
         7f:67:60:e6:ff:99:ab:57:81:fe:c2:d8:bf:a9:df:92:b2:a9:
         67:e9:9c:b4:82:98:15:10:69:c7:88:bd:ea:8f:8d:84:08:c5:
         33:23:ef:3e:8f:dd:39:42:20:b1:de:ec:42:f9:8a:57:73:89:
         1b:25:56:51:30:f7:f8:e4:39:14:06:98:5e:27:52:45:69:b1:
         0d:a0:3a:10:56:3c:27:53:bb:a3:7d:47:ef:1e:8c:10:ea:70:
         2f:46:16:dd:b7:bd:83:49:dd:5b:8e:92:1c:a4:8b:4f:7d:43:
         b6:f0:33:4e:22:06:da:70:fa:a5:a2:7f:7f:34:d7:d8:10:bf:
         58:c9:8c:af:65:ca:f9:50:bd:89:19:b0:5f:7f:fc:09:2c:9d:
         58:24:96:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org