Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CtHjqopaZ9LGFjVG8BwInKa2Hbs.roa
File:                     CtHjqopaZ9LGFjVG8BwInKa2Hbs.roa (raw, json)
Hash identifier:          tzDI58mRkbRZU6/tOrqadzPK83xlDCNHbEB7pzinIF0=
Subject key identifier:   0A:D1:E3:AA:8A:5A:67:D2:C6:16:35:46:F0:1C:08:9C:A6:B6:1D:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CDC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CtHjqopaZ9LGFjVG8BwInKa2Hbs.roa
Signing time:             Tue 29 Sep 2020 09:53:53 +0000
ROA not before:           Tue 29 Sep 2020 09:53:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3292 (0xcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0AD1E3AA8A5A67D2C6163546F01C089CA6B61DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bf:69:ee:d1:40:11:f8:3c:86:7c:32:b2:80:
                    90:b9:f7:7a:39:be:a7:c0:cf:53:fc:53:61:34:f1:
                    ef:5b:db:2a:71:da:bd:44:a1:b9:65:50:fa:7a:9e:
                    e3:0c:ca:42:55:8c:67:38:7d:2c:5b:13:52:96:58:
                    b6:36:e5:d4:a1:88:85:12:d1:c3:21:3e:3a:1b:58:
                    d3:2a:a9:50:be:c2:ce:da:65:a3:fe:2c:88:9b:90:
                    97:73:5d:ce:23:4d:7b:87:09:5f:c6:91:8b:6b:d0:
                    24:a2:0d:f3:7f:98:05:7f:8e:81:1c:7c:35:6b:fc:
                    82:21:22:c1:a6:ab:99:63:0a:d4:5c:ca:1f:5e:04:
                    8d:52:73:cf:67:aa:ec:af:bd:69:4c:ba:47:99:1d:
                    fc:f1:ab:39:80:96:7a:d5:03:62:9b:9e:63:e4:dc:
                    d7:5b:7c:e7:37:eb:77:7f:c1:60:7a:3d:32:e9:b3:
                    fa:6c:ce:dc:71:1c:40:c8:10:05:6b:df:63:e7:48:
                    53:67:ae:2a:9a:b9:d1:cd:05:bc:5c:e3:0c:73:41:
                    b7:7e:e3:a4:46:7b:fc:29:b3:60:09:90:b8:86:4e:
                    ce:3d:52:86:68:28:52:da:41:d2:b2:cb:de:db:03:
                    88:da:05:48:15:91:f8:07:f3:a8:cc:94:76:db:15:
                    1a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D1:E3:AA:8A:5A:67:D2:C6:16:35:46:F0:1C:08:9C:A6:B6:1D:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CtHjqopaZ9LGFjVG8BwInKa2Hbs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:56:fc:1f:b6:33:c4:36:2c:13:af:17:58:77:0c:b6:61:21:
         da:cf:9f:84:b8:20:73:b7:c6:44:b9:9c:4b:c2:4e:16:64:f1:
         2e:93:a7:94:87:74:74:bb:a1:f5:da:b8:75:5c:77:55:f9:f2:
         65:64:48:c3:b2:fa:0c:68:06:53:ee:69:a4:c9:2f:e0:07:48:
         4f:1f:d5:d7:4b:1f:c2:b4:4c:30:ed:ac:3c:90:f1:bb:5e:f1:
         fc:44:a9:32:c2:53:49:ea:dd:ab:f2:22:e9:9f:78:60:85:ea:
         8c:e8:e8:1f:28:21:d8:71:77:07:6f:40:58:60:76:20:1e:2b:
         55:42:39:85:07:85:a8:a9:e5:6b:16:e6:dc:db:4a:6c:a4:3d:
         40:15:0e:d2:79:f9:f5:6b:97:41:93:6d:f1:6d:0a:da:2e:0e:
         50:5e:6d:07:8f:ff:bb:0d:75:ed:48:87:b3:eb:ec:d7:d0:40:
         6b:35:79:c4:40:ef:de:40:67:b9:46:86:e0:bd:1e:6e:3b:17:
         f0:0f:37:5b:4c:a6:ee:b6:6b:e4:09:a6:28:a2:f2:d0:90:ba:
         3b:27:35:43:01:c6:ba:ce:9e:3d:f7:e6:0f:23:8f:6a:59:d5:
         05:2c:fa:83:27:f9:a6:a2:47:2b:89:00:18:8a:df:ac:64:31:
         a6:b2:bb:79
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTUzNTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBBRDFFM0FBOEE1QTY3
RDJDNjE2MzU0NkYwMUMwODlDQTZCNjFEQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSv2nu0UAR+DyGfDKygJC593o5vqfAz1P8U2E08e9b2ypx2r1E
obllUPp6nuMMykJVjGc4fSxbE1KWWLY25dShiIUS0cMhPjobWNMqqVC+ws7aZaP+
LIibkJdzXc4jTXuHCV/GkYtr0CSiDfN/mAV/joEcfDVr/IIhIsGmq5ljCtRcyh9e
BI1Sc89nquyvvWlMukeZHfzxqzmAlnrVA2KbnmPk3NdbfOc363d/wWB6PTLps/ps
ztxxHEDIEAVr32PnSFNnriqaudHNBbxc4wxzQbd+46RGe/wps2AJkLiGTs49UoZo
KFLaQdKyy97bA4jaBUgVkfgH86jMlHbbFRopAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCtHjqopaZ9LGFjVG8BwInKa2HbswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0N0SGpxb3BhWjlMR0ZqVkc4
QndJbkthMkhicy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sYQwDQYJKoZIhvcNAQELBQADggEBAF1W/B+2M8Q2LBOvF1h3DLZhIdrPn4S4IHO3
xkS5nEvCThZk8S6Tp5SHdHS7ofXauHVcd1X58mVkSMOy+gxoBlPuaaTJL+AHSE8f
1ddLH8K0TDDtrDyQ8bte8fxEqTLCU0nq3avyIumfeGCF6ozo6B8oIdhxdwdvQFhg
diAeK1VCOYUHhaip5WsW5tzbSmykPUAVDtJ5+fVrl0GTbfFtCtouDlBebQeP/7sN
de1Ih7Pr7NfQQGs1ecRA795AZ7lGhuC9Hm47F/APN1tMpu62a+QJpiii8tCQujsn
NUMBxrrOnj335g8jj2pZ1QUs+oMn+aaiRyuJABiK36xkMaayu3k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org