Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Hd_7WUD5lovnJNEO_kq5qS6TvVI.roa
File:                     Hd_7WUD5lovnJNEO_kq5qS6TvVI.roa (raw, json)
Hash identifier:          v5vJ3GRPqwv/pIgqK68BNtlRLPlAtTpfIXPImgekskk=
Subject key identifier:   1D:DF:FB:59:40:F9:96:8B:E7:24:D1:0E:FE:4A:B9:A9:2E:93:BD:52
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C6E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Hd_7WUD5lovnJNEO_kq5qS6TvVI.roa
Signing time:             Wed 29 Sep 2021 02:47:46 +0000
ROA not before:           Wed 29 Sep 2021 02:47:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.172.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7278 (0x1c6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1DDFFB5940F9968BE724D10EFE4AB9A92E93BD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ea:ee:dc:01:05:65:c5:94:27:85:7b:32:b6:
                    39:0f:b7:b1:bf:c9:1d:37:d8:f0:22:32:a2:81:7d:
                    36:e7:f9:cb:28:e8:51:25:d9:99:91:ba:f7:e9:c0:
                    95:60:c6:26:ae:2d:dc:ad:d6:e1:62:d0:70:a9:3c:
                    ac:59:b8:40:da:13:8c:e6:67:58:74:f9:b8:63:d4:
                    a1:bd:d5:3e:77:9f:29:cc:63:71:c0:31:13:a6:91:
                    f5:3c:b0:a2:81:53:08:81:f1:7d:9d:13:d6:b4:f0:
                    ed:bd:da:3e:66:e1:22:7d:50:24:40:bf:7e:b7:43:
                    03:d8:64:76:f5:fd:a7:a0:ac:36:cf:b8:e7:95:4f:
                    10:3f:1c:4a:cc:c5:25:e0:57:07:7a:a6:f9:bc:0d:
                    0c:b5:37:39:48:02:18:df:c5:c2:72:b2:2d:01:84:
                    f6:81:0c:2b:04:04:cd:69:06:d5:c9:5d:ef:ca:bf:
                    ea:73:f6:49:9c:d1:72:30:b4:ca:8a:f9:a3:1f:4f:
                    4b:48:f7:ef:60:a4:8f:9e:ca:23:0a:51:4d:79:31:
                    26:f8:74:dd:64:fa:26:0e:3a:95:c9:af:88:19:cd:
                    7c:9d:a3:53:cb:f6:4d:11:d1:b4:a2:3e:db:79:b6:
                    16:74:72:77:fa:61:e9:2a:00:9e:0f:42:12:1b:c3:
                    e2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DF:FB:59:40:F9:96:8B:E7:24:D1:0E:FE:4A:B9:A9:2E:93:BD:52
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Hd_7WUD5lovnJNEO_kq5qS6TvVI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:91:41:59:f9:d0:80:2d:1d:fc:33:f3:ff:08:56:12:c0:
         4b:01:34:86:44:9f:24:bb:af:31:2a:29:fd:29:cc:6f:17:b2:
         ab:06:63:11:25:90:2a:57:f5:42:0a:ed:45:c4:d8:ca:22:33:
         df:75:f6:3c:e5:51:bd:eb:bc:63:37:ad:c9:06:61:7e:c4:ff:
         ee:3d:9a:7c:d3:a5:4a:fc:0f:a3:8a:65:30:56:5a:f7:b7:8f:
         67:b1:9c:90:3f:9c:0c:3e:8a:e9:d4:bc:c3:6b:84:48:6b:72:
         55:f1:37:03:32:03:7e:49:e6:f2:f8:a6:fb:79:93:fc:39:b0:
         54:b8:56:f1:7a:71:e2:73:b1:c6:3b:f1:fc:79:3a:81:ec:d1:
         46:3e:2c:b7:08:9b:57:c9:48:2f:4b:16:d9:8b:56:89:48:88:
         92:d9:3f:99:34:a2:a9:3e:0c:b3:39:01:1e:5f:bb:cf:bc:89:
         b2:7c:4c:99:77:94:1d:d2:07:c0:0a:f6:18:44:18:7d:56:60:
         59:2a:df:97:66:93:f5:e6:f6:db:08:61:3a:59:34:42:da:1b:
         1d:b3:58:5d:37:b4:bb:c1:59:79:86:82:6e:fe:9e:4f:c1:c3:
         b4:9f:8d:b3:27:71:81:32:76:cf:80:b0:ec:5a:47:e6:e4:79:
         90:8c:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org