Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Den_bofSWRRoMa2mdcEnZPkjFeg.roa
File:                     Den_bofSWRRoMa2mdcEnZPkjFeg.roa (raw, json)
Hash identifier:          DBTyyFSjnefpWeq7Zw4i1LATG2Z+5jbInVzkUAPdKYw=
Subject key identifier:   0D:E9:FF:6E:87:D2:59:14:68:31:AD:A6:75:C1:27:64:F9:23:15:E8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E26
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Den_bofSWRRoMa2mdcEnZPkjFeg.roa
Signing time:             Tue 29 Sep 2020 09:55:24 +0000
ROA not before:           Tue 29 Sep 2020 09:55:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3622 (0xe26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0DE9FF6E87D259146831ADA675C12764F92315E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:75:c7:76:a2:64:f2:1c:bd:46:8b:20:a0:
                    60:6e:ff:5c:93:ee:86:06:1f:4a:92:cd:e5:a5:eb:
                    bb:04:c3:c0:52:ae:eb:59:1a:98:05:3a:36:08:38:
                    f8:1d:de:b4:59:ef:cb:00:23:e5:19:76:61:72:f7:
                    25:fc:9f:bd:e6:14:81:aa:0b:6b:6e:5c:be:36:e4:
                    3d:b4:3b:82:64:97:36:97:fe:df:5e:9b:d7:e1:29:
                    4f:e2:4a:62:e6:e5:bb:6c:ba:32:fe:24:1e:56:88:
                    5d:7b:3c:cb:97:68:01:47:d6:be:69:e5:01:72:9a:
                    9f:72:4e:2a:6d:9f:38:1f:7a:1b:f3:72:7e:0f:f8:
                    f7:e3:24:ef:72:8d:fa:27:64:6e:00:67:8a:22:cf:
                    88:91:50:96:fe:c6:a9:dd:83:bc:10:c3:19:82:05:
                    3a:b9:ca:3d:20:7e:ab:01:21:d0:17:bf:a9:c6:e3:
                    19:3c:4d:88:b8:5c:e2:c5:20:d9:2e:e8:c0:e2:65:
                    76:a2:67:7c:95:08:dd:30:d7:81:2c:88:c3:09:6c:
                    b7:11:a0:72:85:7c:77:a7:41:ea:98:cc:89:f2:eb:
                    9d:31:07:05:a2:b1:ad:51:ec:3c:63:22:0f:22:d4:
                    84:c7:ec:48:2d:a2:ce:ef:66:da:71:35:54:de:b5:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E9:FF:6E:87:D2:59:14:68:31:AD:A6:75:C1:27:64:F9:23:15:E8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Den_bofSWRRoMa2mdcEnZPkjFeg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:ec:3a:8b:bb:b7:46:5e:02:08:51:38:43:6c:94:54:12:f1:
         cf:32:dc:c5:5a:c6:ce:ce:b6:bc:14:d1:ca:c0:c1:13:61:52:
         e0:8e:8b:9e:9e:7e:74:f0:23:57:a5:41:d5:3f:f1:43:c3:b9:
         04:4e:70:27:13:24:f7:7b:07:dd:15:b5:df:34:0e:ba:e3:2f:
         33:b4:7e:45:d6:d0:40:fa:2a:92:46:63:79:ec:49:55:4c:02:
         e6:46:1e:7c:97:be:7b:42:a0:7e:1e:fd:a9:a2:c7:fa:1b:d2:
         a6:4a:42:e1:d4:d6:ba:5a:05:98:0b:c8:5c:6c:11:19:d8:66:
         22:4d:b3:ac:4a:1f:b0:fd:3f:d2:1c:af:03:02:41:c8:54:28:
         55:b3:89:e1:2f:3f:a5:cd:03:ca:52:0e:4b:2d:6b:0e:dc:2a:
         c8:6f:2d:aa:9d:a5:8d:cf:f4:37:98:17:45:e3:70:46:d6:cb:
         82:ce:b0:1c:c1:c4:0f:83:c9:cd:c7:b5:3f:d2:67:48:21:05:
         7c:3d:65:41:d3:f3:50:aa:a0:bc:03:18:c5:76:22:76:ac:84:
         6b:9c:d0:58:a8:28:d7:9e:2c:ec:7e:9e:19:a5:42:29:e1:7b:
         54:bd:2a:ec:dd:85:d0:54:3c:cc:43:3c:66:d5:0e:5f:46:30:
         bc:ab:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:24 2023 by rpki-client on console-fra.rpki-client.org