Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HfM2YGXbZftJEd-oZS8UjmA0WzQ.roa
File:                     HfM2YGXbZftJEd-oZS8UjmA0WzQ.roa (raw, json)
Hash identifier:          WijKXtuJyY5H9nomC1qW+IkKYIG+oSkZD43upeCu11o=
Subject key identifier:   1D:F3:36:60:65:DB:65:FB:49:11:DF:A8:65:2F:14:8E:60:34:5B:34
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1693
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HfM2YGXbZftJEd-oZS8UjmA0WzQ.roa
Signing time:             Sun 07 Feb 2021 12:12:54 +0000
ROA not before:           Sun 07 Feb 2021 12:12:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5779 (0x1693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:12:54 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1DF3366065DB65FB4911DFA8652F148E60345B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e1:a4:e5:88:c1:e6:fe:89:e8:9d:ff:bd:62:
                    21:23:57:43:df:3e:79:ee:af:9f:19:e1:0f:4f:32:
                    33:9b:74:f9:7e:cb:8c:04:7c:a5:08:09:35:f0:83:
                    b9:4f:c7:68:c7:01:81:fa:ad:10:73:cd:5d:b7:13:
                    96:ca:7c:2b:7c:70:c7:4f:6a:5d:30:da:5b:7c:1c:
                    4b:4c:e2:49:d6:49:30:f7:26:98:ea:6c:8a:bb:3b:
                    51:6f:66:88:9b:fe:d1:ca:38:63:e4:c0:46:02:81:
                    d2:cc:4e:e5:a6:65:da:93:a6:3d:59:64:a7:9e:17:
                    57:71:9f:93:16:18:03:75:db:66:b0:fe:60:f4:ed:
                    68:fc:56:94:53:a4:39:78:aa:c6:c3:91:71:f9:96:
                    d8:12:1d:e0:34:a6:c4:b2:33:b2:fa:62:b7:d7:62:
                    c3:43:09:8e:c9:59:cb:28:43:5d:56:aa:1d:18:2b:
                    d4:39:28:1c:45:cf:fa:b6:3c:ef:a2:cd:3f:69:2b:
                    05:8f:c4:ec:64:fb:ea:06:bf:e5:ca:67:68:b7:26:
                    ee:e4:dd:d3:00:e9:2c:86:93:f9:df:fd:5c:cd:ec:
                    e7:b8:3d:9d:e9:72:46:3f:b2:d7:80:ae:f5:2c:1f:
                    73:57:31:c7:9a:ba:0d:6b:3e:a5:e7:b0:ff:0f:20:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F3:36:60:65:DB:65:FB:49:11:DF:A8:65:2F:14:8E:60:34:5B:34
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HfM2YGXbZftJEd-oZS8UjmA0WzQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:49:80:65:db:48:5f:74:99:49:c8:46:4f:3b:98:a2:05:
         0a:87:3d:15:cb:5e:0b:e3:11:62:e7:7e:6d:c6:c0:5e:2a:bd:
         de:87:c9:0b:7e:db:5a:bf:7a:c0:67:31:a0:91:bd:6b:8c:e6:
         4e:4d:af:18:8c:7e:02:7c:5a:dd:de:11:26:e9:cd:b6:8e:4e:
         5a:3e:4d:21:7b:4d:0a:22:4b:4d:e1:89:96:a4:9a:b7:97:84:
         c5:dd:36:39:76:56:39:0e:87:5a:3c:92:10:9f:25:44:88:78:
         c3:57:32:de:fe:e5:20:d0:4f:a3:58:32:a5:2c:93:9a:ad:6a:
         d7:05:8f:82:bd:05:38:6b:70:a7:6f:b3:3b:bb:09:fd:74:9a:
         ac:0f:ee:74:2c:eb:d9:35:b4:03:5d:9f:09:9c:6f:aa:a6:59:
         00:bb:a2:c7:4b:03:11:3e:11:3b:bb:5d:57:b5:47:12:30:3b:
         df:91:a4:06:c2:f5:68:8b:df:ed:3e:76:e3:25:1b:89:8e:47:
         1a:9f:44:53:7c:a5:ec:3a:b0:55:08:d7:79:dd:ca:41:4c:5c:
         14:7d:9b:4c:ad:d2:cf:b3:94:9d:9b:16:f2:cf:95:c2:16:e8:
         43:66:cf:28:b6:92:aa:7c:9f:f1:9c:04:32:77:68:c8:db:14:
         de:e8:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org