Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DOg8PGdZIPuyJrhFPuMdiNetsa8.roa
File:                     DOg8PGdZIPuyJrhFPuMdiNetsa8.roa (raw, json)
Hash identifier:          bYoB5SDdJEk1WsS329c81gfX3Aa+sTr12gGYxZyfk3g=
Subject key identifier:   0C:E8:3C:3C:67:59:20:FB:B2:26:B8:45:3E:E3:1D:88:D7:AD:B1:AF
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1695
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DOg8PGdZIPuyJrhFPuMdiNetsa8.roa
Signing time:             Sun 07 Feb 2021 12:12:57 +0000
ROA not before:           Sun 07 Feb 2021 12:12:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5781 (0x1695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:12:57 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0CE83C3C675920FBB226B8453EE31D88D7ADB1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3a:8f:fa:39:bf:8f:65:88:9b:73:29:0a:08:
                    3e:ef:14:33:e0:c4:41:08:e4:d0:66:79:59:bd:98:
                    43:f6:b7:a0:0e:80:99:6e:62:c3:88:65:db:cc:bc:
                    1d:5d:9e:b2:91:5a:17:f7:5b:21:2d:26:c3:9f:70:
                    73:3a:ac:0b:c7:1f:98:8c:1f:af:23:9c:97:80:58:
                    b2:90:df:8b:c3:6b:73:e0:23:e5:4c:1a:52:37:c6:
                    10:dd:d9:ee:1a:84:20:1f:a1:d8:ae:28:96:77:08:
                    f8:c8:10:68:3b:78:6c:49:f4:b2:05:6c:d1:49:ac:
                    a0:80:24:2a:61:99:0b:7e:e3:93:64:24:3a:72:14:
                    29:f8:71:61:d5:50:7b:a6:c7:21:f5:95:9a:e6:0f:
                    84:a5:50:33:8f:e6:3d:99:31:65:9b:3e:9b:23:fc:
                    92:1d:51:7e:0b:00:53:ba:bf:0b:c5:bc:61:f7:74:
                    fa:bd:e1:2c:84:e7:e1:60:8a:5b:54:e0:be:05:d7:
                    84:db:ac:52:50:cb:c5:e2:ae:74:bb:ed:ff:55:7a:
                    26:fa:68:ca:e7:32:9a:96:c2:85:d9:a0:34:79:3a:
                    f4:a0:11:d6:40:1f:9a:a3:19:e2:af:b3:4b:04:37:
                    08:28:8e:ab:fd:12:1b:5d:97:90:68:88:1f:ed:03:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E8:3C:3C:67:59:20:FB:B2:26:B8:45:3E:E3:1D:88:D7:AD:B1:AF
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DOg8PGdZIPuyJrhFPuMdiNetsa8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:33:8a:e3:1d:24:37:05:16:43:41:32:6c:da:3f:d0:fa:ca:
         b3:4d:8b:77:91:76:cb:5c:a3:6b:5a:51:7a:dd:f9:22:e1:94:
         96:ab:47:cd:a2:03:0d:ab:e9:45:46:78:79:7f:69:e0:5d:5b:
         cc:e2:b1:f7:88:72:aa:45:ea:68:c4:e0:c8:fa:27:ef:dd:49:
         05:cf:9d:8c:8c:57:6a:a1:cc:8f:f0:c6:19:42:54:3c:73:c5:
         a2:c3:7f:ab:9e:99:ef:76:f1:06:1a:76:78:53:71:be:e5:a3:
         73:ee:45:1a:eb:8c:82:e1:39:4b:3b:b7:0e:ae:e7:22:92:f5:
         81:59:a2:7f:2e:b3:52:8d:5d:bc:bd:b7:6f:30:f2:59:63:c7:
         dd:53:c2:6c:36:25:94:75:c3:5a:71:5f:cc:93:36:18:04:62:
         eb:eb:93:c1:8f:f8:1f:7b:0e:73:0c:06:be:69:c2:aa:ef:25:
         12:af:85:ab:66:2d:05:aa:b3:af:78:4c:57:0b:ed:8e:c9:8c:
         45:0b:c5:48:09:e2:bd:73:fb:69:b5:7f:85:db:22:8a:58:fa:
         32:e0:2b:d5:65:3d:c3:a8:f7:7e:60:a0:ae:6a:9c:5e:2a:6a:
         48:e0:3f:0a:1d:19:14:6e:04:7a:20:39:8b:03:aa:5a:91:39:
         7c:76:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org