Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GHgFzVGVebgVjV4qKnKi2rzILrQ.roa
File:                     GHgFzVGVebgVjV4qKnKi2rzILrQ.roa (raw, json)
Hash identifier:          XbfGLkG7P+BGQEUj2BIAGw9Ei4OwC+i80YHOnxYLAyA=
Subject key identifier:   18:78:05:CD:51:95:79:B8:15:8D:5E:2A:2A:72:A2:DA:BC:C8:2E:B4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0CE9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GHgFzVGVebgVjV4qKnKi2rzILrQ.roa
Signing time:             Tue 29 Sep 2020 09:53:57 +0000
ROA not before:           Tue 29 Sep 2020 09:53:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.128.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:53:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=187805CD519579B8158D5E2A2A72A2DABCC82EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:bc:c9:35:70:74:b9:cb:1d:5a:96:ef:f3:
                    c4:6c:9b:c4:48:04:00:90:28:52:55:8a:36:2d:0e:
                    69:2d:04:06:a6:24:b3:8a:35:5f:9a:b8:b9:08:f5:
                    f4:d6:4f:31:75:17:96:65:78:c4:62:d8:11:83:56:
                    3a:98:5d:a2:00:c3:0e:a3:01:7b:c3:a5:21:4d:66:
                    e3:9c:a2:cb:bf:f9:40:2b:1b:b2:2f:89:7a:15:bd:
                    7a:a2:8b:1b:82:30:2e:b1:74:36:82:5c:68:b1:ae:
                    72:ee:98:5d:32:2a:64:0b:42:fb:47:98:37:c8:0a:
                    ad:ad:7e:1c:b5:08:49:24:3c:06:e5:84:77:d2:d6:
                    ed:ab:fc:b4:07:2a:74:b8:b5:b8:20:d9:57:e7:cd:
                    0c:59:c1:a6:d6:b3:8a:32:49:80:1f:3e:ff:ec:51:
                    c7:3b:d8:ac:ec:34:d6:d6:de:1e:6f:f6:61:d0:ef:
                    39:af:25:13:67:d6:b9:3b:52:d4:15:63:2e:a0:31:
                    33:fb:80:10:95:2e:42:99:ef:19:ba:c1:ff:3f:80:
                    27:d3:21:58:28:cb:3c:63:26:b3:32:c5:39:dd:4a:
                    72:54:c3:c8:42:cf:76:c7:73:25:38:dd:84:7f:e6:
                    4a:0e:68:39:0a:9c:49:21:3c:cb:38:2d:73:5f:6d:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:78:05:CD:51:95:79:B8:15:8D:5E:2A:2A:72:A2:DA:BC:C8:2E:B4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GHgFzVGVebgVjV4qKnKi2rzILrQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:cc:2c:f2:a4:c8:f3:ff:53:30:0a:7d:40:7b:67:c8:75:d9:
         11:a8:86:cc:5b:16:46:da:49:bb:c3:7f:4e:20:06:80:07:3e:
         02:d1:9e:25:e6:73:2e:81:c5:f7:96:7e:a3:86:a4:76:08:80:
         ef:95:c9:8a:f3:69:e8:f2:dc:5d:6e:69:f1:44:d3:76:fd:3f:
         f5:a5:c8:cc:fa:57:33:89:fa:50:83:cd:9c:fa:25:f7:fc:1d:
         fb:02:c1:8f:39:db:54:5b:ea:e0:0c:01:5b:4a:48:fe:b0:8a:
         7d:37:c6:b2:75:2c:a9:86:a6:4f:3e:b8:c8:cd:e1:de:94:9f:
         5c:88:6d:3d:2a:8e:98:0f:e5:52:7b:16:77:4f:28:e9:b2:1a:
         b9:38:08:3a:51:b2:42:a5:cd:34:d8:17:0e:c7:0a:7a:99:5f:
         74:b6:6e:56:c7:11:6b:a7:af:2b:74:b2:01:17:cc:42:0d:ed:
         43:a8:de:aa:fa:f3:c0:5f:fc:69:c5:34:94:db:7c:d2:e0:e9:
         ec:7e:9c:a1:2b:0c:8a:2e:8f:03:2c:08:34:47:ec:5a:39:02:
         b9:fa:66:10:39:c1:e4:cf:fd:36:60:58:13:b8:67:78:34:a1:
         e6:09:ec:e4:c0:3c:b6:61:ff:66:7c:9f:76:a5:1e:96:fb:4a:
         5e:bc:ce:ae
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTUzNTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE4NzgwNUNENTE5NTc5
QjgxNThENUUyQTJBNzJBMkRBQkNDODJFQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdJbzJNXB0ucsdWpbv88Rsm8RIBACQKFJVijYtDmktBAamJLOK
NV+auLkI9fTWTzF1F5ZleMRi2BGDVjqYXaIAww6jAXvDpSFNZuOcosu/+UArG7Iv
iXoVvXqiixuCMC6xdDaCXGixrnLumF0yKmQLQvtHmDfICq2tfhy1CEkkPAblhHfS
1u2r/LQHKnS4tbgg2VfnzQxZwabWs4oySYAfPv/sUcc72KzsNNbW3h5v9mHQ7zmv
JRNn1rk7UtQVYy6gMTP7gBCVLkKZ7xm6wf8/gCfTIVgoyzxjJrMyxTndSnJUw8hC
z3bHcyU43YR/5koOaDkKnEkhPMs4LXNfbZK5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGHgFzVGVebgVjV4qKnKi2rzILrQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dIZ0Z6VkdWZWJnVmpWNHFL
bktpMnJ6SUxyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sIAwDQYJKoZIhvcNAQELBQADggEBAHPMLPKkyPP/UzAKfUB7Z8h12RGohsxbFkba
SbvDf04gBoAHPgLRniXmcy6BxfeWfqOGpHYIgO+VyYrzaejy3F1uafFE03b9P/Wl
yMz6VzOJ+lCDzZz6Jff8HfsCwY8521Rb6uAMAVtKSP6win03xrJ1LKmGpk8+uMjN
4d6Un1yIbT0qjpgP5VJ7FndPKOmyGrk4CDpRskKlzTTYFw7HCnqZX3S2blbHEWun
ryt0sgEXzEIN7UOo3qr688Bf/GnFNJTbfNLg6ex+nKErDIoujwMsCDRH7Fo5Arn6
ZhA5weTP/TZgWBO4Z3g0oeYJ7OTAPLZh/2Z8n3alHpb7Sl68zq4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org