Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HBE6koa92TG-6O_C_CjrRqr5c2g.roa
File:                     HBE6koa92TG-6O_C_CjrRqr5c2g.roa (raw, json)
Hash identifier:          o1VeqmvLX9CHNOSz6eAJb4QDpZyRMHUAF4fdtvpDhDg=
Subject key identifier:   1C:11:3A:92:86:BD:D9:31:BE:E8:EF:C2:FC:28:EB:46:AA:F9:73:68
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0F22
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HBE6koa92TG-6O_C_CjrRqr5c2g.roa
Signing time:             Tue 29 Sep 2020 09:56:32 +0000
ROA not before:           Tue 29 Sep 2020 09:56:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3874 (0xf22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:56:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1C113A9286BDD931BEE8EFC2FC28EB46AAF97368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:88:a0:0b:41:c1:34:1c:5a:b4:69:76:a8:
                    27:6a:65:7b:df:2f:18:65:29:92:41:15:9e:72:82:
                    dc:f7:23:10:21:46:52:d5:67:5d:c5:45:60:e7:14:
                    e9:28:70:37:7c:b4:41:f7:35:4a:11:05:3a:cc:5c:
                    1f:68:d3:bc:50:13:37:38:bb:d5:63:17:70:e9:82:
                    58:b2:f8:59:c2:f9:64:aa:75:4a:20:b0:ad:43:a4:
                    34:d6:ac:78:11:83:fd:5c:ce:3c:da:ab:f2:54:70:
                    0a:10:9e:f1:4f:00:c2:10:a2:70:c8:3e:a9:d3:8d:
                    0e:65:7c:0c:8c:a4:07:33:64:6a:53:a3:24:78:e4:
                    1b:47:12:6a:19:19:39:93:c6:41:c1:88:1d:93:07:
                    05:08:d8:0a:35:c0:90:b8:8c:90:23:0d:78:c0:d0:
                    60:57:98:bb:9b:a5:04:3c:12:a2:b9:35:db:b2:aa:
                    41:f2:f6:59:27:9d:28:e9:a8:6f:d1:36:79:ab:54:
                    20:a4:0c:d5:5f:07:f4:15:69:25:b5:a7:72:4d:fa:
                    33:40:4c:17:6a:db:71:a3:27:05:b5:79:fe:51:06:
                    71:b4:1a:de:42:30:96:32:e1:2c:d3:27:95:32:39:
                    b1:23:14:b1:34:59:27:58:94:e6:79:41:51:29:b0:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:11:3A:92:86:BD:D9:31:BE:E8:EF:C2:FC:28:EB:46:AA:F9:73:68
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HBE6koa92TG-6O_C_CjrRqr5c2g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:f7:f5:33:45:7a:c0:5a:88:b2:31:9f:f2:dc:40:b0:7a:
         31:d1:2e:e5:06:83:d1:51:32:46:55:3a:4f:7e:7f:a4:cc:93:
         e0:b8:7a:44:7f:5a:01:74:00:a5:b7:c9:04:a6:9f:4c:f7:47:
         2c:6a:49:69:15:02:c4:51:ba:18:0b:12:4a:a0:29:17:18:11:
         7b:1d:3c:5f:e1:0b:2f:3a:38:00:17:93:21:53:39:e1:7c:f7:
         32:b9:9c:87:ed:25:51:3b:18:b2:49:3b:cd:03:43:b8:a8:8d:
         82:0c:5d:0a:74:55:85:19:a8:ff:16:ce:7a:58:3a:5d:b6:e9:
         f3:84:4f:89:68:e0:ee:df:84:fd:1e:91:ed:d4:18:32:46:ba:
         83:9c:cf:76:55:34:bb:e9:dc:56:c5:0c:96:94:37:d8:34:b8:
         38:99:9a:f4:a6:5f:21:56:a0:0d:56:10:81:83:b2:f8:0a:48:
         6d:5a:66:b4:14:70:3c:92:b4:a8:bb:23:ed:f0:78:d8:c5:cd:
         6b:bc:c4:c0:ef:32:82:1f:74:af:07:42:7c:8a:b4:2b:5b:e5:
         88:aa:f0:ff:12:86:09:44:83:9e:d8:49:cc:ba:63:4f:2a:dc:
         79:70:6e:c3:bf:69:9e:1d:b3:b8:31:60:58:76:bc:5b:6c:f4:
         c8:31:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org