Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E5jGIIqMyFhM8vL8YLpiV6utm6o.roa
File:                     E5jGIIqMyFhM8vL8YLpiV6utm6o.roa (raw, json)
Hash identifier:          QXBhGjfGcfVMYL6suTj5Pd/RO9dG5YvrMnsgZO685ac=
Subject key identifier:   13:98:C6:20:8A:8C:C8:58:4C:F2:F2:FC:60:BA:62:57:AB:AD:9B:AA
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B96
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E5jGIIqMyFhM8vL8YLpiV6utm6o.roa
Signing time:             Wed 29 Sep 2021 02:46:46 +0000
ROA not before:           Wed 29 Sep 2021 02:46:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7062 (0x1b96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1398C6208A8CC8584CF2F2FC60BA6257ABAD9BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:15:b7:b1:fa:cb:29:13:1d:a2:6d:13:3c:
                    4e:54:13:d4:30:97:a0:8f:4a:45:5f:b6:6a:12:14:
                    f1:3e:cd:ae:1a:a9:20:d1:fd:e8:a5:3e:f7:ac:39:
                    93:1d:e8:3d:78:55:54:4b:af:0d:81:85:94:a3:45:
                    b5:9c:85:a3:6b:8d:b7:bb:c1:4a:61:f9:27:86:20:
                    e4:7a:2f:dc:01:6e:a7:5a:dd:49:13:27:73:96:a7:
                    74:99:b3:2b:1d:95:6c:41:35:a9:24:6b:5b:1d:49:
                    65:32:d3:b8:c3:ee:30:e4:5e:f8:73:c4:d2:94:df:
                    81:94:99:59:dd:40:cf:ea:d2:f8:9c:cc:80:be:71:
                    01:c9:91:a7:68:cb:bb:96:1c:67:aa:fd:f8:fe:90:
                    23:a4:5e:ce:65:c4:ce:2c:62:95:1e:a4:12:80:11:
                    a7:d6:9b:57:86:c8:d8:16:de:86:0e:74:4c:80:c5:
                    ae:28:b4:70:38:b3:5a:f4:79:b4:7a:de:73:d3:9a:
                    e4:3e:7c:7f:0b:db:0e:08:b3:07:f2:18:07:70:91:
                    23:a2:48:92:b9:15:8c:6d:3f:6a:8b:6d:1e:24:d2:
                    52:37:69:b3:c2:f8:ff:9f:75:51:4b:b7:bc:b7:09:
                    f1:32:55:ea:aa:b0:ef:02:3b:98:77:a3:6c:31:27:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:98:C6:20:8A:8C:C8:58:4C:F2:F2:FC:60:BA:62:57:AB:AD:9B:AA
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E5jGIIqMyFhM8vL8YLpiV6utm6o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:6e:f5:4b:4c:0f:b0:e8:1f:eb:6b:fa:4d:f3:c7:1b:c1:5c:
         f6:43:69:73:55:2f:d4:ff:6f:51:cd:0e:f6:d5:03:99:5a:d4:
         43:c7:f7:b4:60:0c:af:98:9b:e0:05:3b:74:07:96:db:8e:98:
         74:ca:ec:39:f8:33:2d:f1:b0:26:e3:21:fc:09:25:08:57:ee:
         62:79:83:05:73:ca:d0:35:b3:4e:78:1d:29:ed:19:2c:9d:dd:
         f7:eb:a2:78:37:2e:55:9b:46:8a:be:0f:51:5f:cd:09:d3:74:
         c9:cb:e4:48:9c:9a:28:69:46:c2:cd:8e:7f:2f:ab:05:4c:c1:
         ca:2a:a7:03:82:22:a6:c3:8c:30:36:85:bc:f3:9e:12:dd:7d:
         94:66:5c:68:2f:53:54:97:65:53:20:b4:58:2f:e9:6a:ad:b4:
         b5:68:88:88:c0:a7:3c:c4:f8:25:ee:36:63:31:09:20:42:8e:
         25:d9:01:fa:32:7f:74:a1:95:ae:5e:f8:61:c9:d3:72:a5:b6:
         a3:b1:85:2c:55:52:f1:6f:3a:1e:f6:36:24:51:5c:06:a4:44:
         e4:2e:29:3d:34:42:b6:d0:76:e6:ac:f7:e1:9c:df:d8:08:65:
         89:0a:06:5a:88:5b:9a:cb:83:f7:f4:26:b5:65:26:8b:95:69:
         33:0d:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org