Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EVIwUnXuwdUP7jGM7poTElX720o.roa
File:                     EVIwUnXuwdUP7jGM7poTElX720o.roa (raw, json)
Hash identifier:          k4xb4RCqirtN++QFLWWkgXwxhPUfi+sP5zLNtZf+NKE=
Subject key identifier:   11:52:30:52:75:EE:C1:D5:0F:EE:31:8C:EE:9A:13:12:55:FB:DB:4A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EVIwUnXuwdUP7jGM7poTElX720o.roa
Signing time:             Thu 15 Sep 2022 02:45:26 +0000
ROA not before:           Thu 15 Sep 2022 02:45:26 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.47.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:26 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1152305275EEC1D50FEE318CEE9A131255FBDB4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:66:71:60:34:b8:7e:b1:cf:f1:d4:46:66:
                    c5:91:59:49:29:07:ba:f0:a3:68:79:12:76:dd:af:
                    1a:60:1b:0c:c4:98:51:e0:a1:c0:26:96:91:6b:38:
                    10:35:de:07:83:ae:53:96:fa:c7:b8:26:24:78:e6:
                    a9:6a:54:58:e4:8e:d3:5b:5b:25:40:57:8b:2e:46:
                    20:14:e5:c7:88:28:a9:2d:8e:eb:5d:4d:92:69:fd:
                    69:d4:42:c3:65:39:0e:32:58:6e:06:ea:f2:20:e9:
                    cb:c4:4b:7b:b2:70:c0:28:1b:55:4e:b1:ea:66:d0:
                    ea:f7:e9:80:6e:07:c0:98:75:ad:1c:26:96:4a:33:
                    9d:f2:e8:cf:12:23:91:6b:ab:59:7f:95:fb:98:74:
                    b6:fe:e0:a9:95:1a:e6:64:dc:9b:b6:07:3d:c7:0b:
                    90:e0:1e:28:b2:a9:cd:5a:d9:24:7f:2c:ba:36:10:
                    11:91:24:c9:d2:24:40:37:a4:32:66:67:31:0c:14:
                    ee:b6:ab:e8:67:eb:36:6a:43:82:00:cf:c3:d8:85:
                    09:15:99:47:63:0f:05:f8:22:40:4f:b4:28:08:02:
                    3c:94:e9:ad:e8:ef:50:84:fc:2a:2a:38:28:7a:c9:
                    11:ec:6d:2c:01:fa:8b:1c:27:43:4f:99:c5:e4:2c:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:30:52:75:EE:C1:D5:0F:EE:31:8C:EE:9A:13:12:55:FB:DB:4A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EVIwUnXuwdUP7jGM7poTElX720o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.47.0/26

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:34:b5:f1:ad:3c:27:2f:72:07:f0:d4:91:06:15:4b:e5:
         2b:76:36:5b:f2:ac:03:a4:59:e5:f4:5e:61:65:29:df:1b:4f:
         bf:00:80:22:18:8e:9a:63:d1:ac:31:e6:ad:d6:a5:48:79:18:
         06:b6:f6:66:db:cd:ed:1a:fe:83:4b:37:f7:ce:d9:46:5a:77:
         8e:7b:df:70:ae:6b:76:5a:fc:e4:86:57:90:4d:ef:b9:95:8a:
         46:f2:32:93:a4:c2:dd:9e:1e:af:d4:3f:92:79:63:22:9e:30:
         6c:f5:68:0e:55:be:57:45:20:61:5c:07:6e:af:87:7c:04:4f:
         fb:14:5a:bb:d5:56:8c:47:a2:44:a0:0c:2c:ec:99:b4:39:1f:
         46:e6:48:84:1d:dc:8f:25:f1:cd:46:59:58:ff:4d:5d:d2:31:
         90:0f:70:2e:fb:10:36:48:02:59:ec:ce:09:73:4c:19:96:4b:
         0d:d8:75:98:92:6e:fa:56:65:00:5c:fd:0c:25:51:b9:73:e3:
         f4:e4:b1:aa:5c:43:29:7e:6d:e3:46:f7:99:cc:4a:45:85:82:
         6a:bd:aa:88:e6:d4:3c:fa:12:d1:3e:59:b8:a3:2b:e8:24:00:
         c4:74:e8:49:fb:c3:88:0b:6f:d7:ec:79:39:36:3f:ce:3d:cc:
         88:ab:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org