Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gu5zqg68uHIV9s7RgA_wzO29dXw.roa
File:                     Gu5zqg68uHIV9s7RgA_wzO29dXw.roa (raw, json)
Hash identifier:          qwFCWO/03pFq7ChxaVQgdiaz+sQir4xgixojQxv2VxM=
Subject key identifier:   1A:EE:73:AA:0E:BC:B8:72:15:F6:CE:D1:80:0F:F0:CC:ED:BD:75:7C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1799
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gu5zqg68uHIV9s7RgA_wzO29dXw.roa
Signing time:             Sun 07 Feb 2021 12:20:35 +0000
ROA not before:           Sun 07 Feb 2021 12:20:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6041 (0x1799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:20:35 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1AEE73AA0EBCB87215F6CED1800FF0CCEDBD757C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:c4:35:0f:7c:7b:3f:9c:28:c1:c7:23:8b:
                    23:fb:11:8d:41:a1:38:66:54:b4:d1:29:26:ad:15:
                    48:68:94:7f:2d:a5:7a:13:c0:cf:14:74:e2:ad:38:
                    e2:f2:fd:e4:c5:31:48:9a:04:e6:4b:d5:de:d9:2f:
                    54:6a:1e:dc:f2:0c:9b:5f:19:69:c4:a5:09:a1:61:
                    b6:c8:26:f0:2a:01:29:02:68:ea:23:64:f5:a9:f6:
                    f7:3d:74:25:cc:7e:4b:f0:14:27:4f:b0:cc:6d:19:
                    da:02:b0:31:9c:18:15:64:64:b8:2a:f0:e0:fc:b4:
                    e2:bd:c1:65:d8:74:71:9b:30:41:29:76:c7:1f:af:
                    57:52:0c:61:c1:4b:92:3d:82:9e:aa:fa:2a:ab:d6:
                    a4:98:b4:1f:82:91:7b:86:e8:ab:87:3e:86:89:60:
                    44:6e:ae:41:3b:25:3b:32:ad:f8:80:95:31:c0:3b:
                    ec:f4:69:a6:1f:9d:59:9d:4f:4a:b8:3f:75:3c:4f:
                    20:67:0c:1c:27:9e:e1:75:3c:ee:e7:d8:46:b4:0d:
                    7c:6d:21:22:a2:19:36:10:e0:1c:ec:cd:95:7f:fc:
                    7a:08:39:03:a3:06:60:19:48:7d:1d:c5:44:89:12:
                    06:43:27:ee:cb:03:f3:18:41:46:3a:a6:d6:8d:f1:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EE:73:AA:0E:BC:B8:72:15:F6:CE:D1:80:0F:F0:CC:ED:BD:75:7C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gu5zqg68uHIV9s7RgA_wzO29dXw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:36:bf:99:c0:9c:10:d8:9b:2e:a9:1d:63:3e:59:de:66:b8:
         bf:6e:59:69:f9:93:07:1c:f6:36:3b:83:81:65:b0:db:e8:11:
         31:d1:a4:e4:01:c0:3c:6d:db:0a:46:a4:11:91:d8:4a:39:88:
         ba:00:af:b7:2e:52:70:3d:c4:1b:eb:6e:3f:d6:f0:a1:70:61:
         9b:cd:e3:01:3e:42:9a:2f:77:da:95:c4:56:fe:d3:b6:44:94:
         6d:92:af:d3:12:1c:ac:32:fc:e0:df:3a:e7:29:36:e0:5a:0b:
         19:25:63:41:ca:87:3d:88:20:d8:68:fd:a3:dd:aa:52:a9:f2:
         88:fc:07:22:84:05:f1:89:a7:3f:3b:30:56:7c:08:3f:24:e9:
         7c:1f:a5:98:51:c1:ec:c9:64:aa:3c:57:ff:4e:14:26:c7:88:
         bc:7e:16:98:c0:01:1b:bc:44:cc:8b:72:ec:ca:b6:d7:d0:5d:
         49:84:ba:07:7d:6e:e6:47:04:55:bb:be:df:4e:5d:64:a9:de:
         e9:71:dd:c9:30:63:df:58:64:c5:80:8e:9d:38:ad:49:4a:a6:
         2c:ce:e4:24:ca:57:98:ff:16:ab:79:b0:11:d2:ec:8c:26:a0:
         4b:b1:c5:7a:a8:c0:d8:ef:59:c4:98:d7:d5:60:0d:ca:c7:72:
         90:44:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org