Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J5_oECJJ-A59WW6EDZS8huBc0wg.roa
File:                     J5_oECJJ-A59WW6EDZS8huBc0wg.roa (raw, json)
Hash identifier:          yDBiu85aedqhFUtldR5IeDX8foQavtopL4qT6HofG2k=
Subject key identifier:   27:9F:E8:10:22:49:F8:0E:7D:59:6E:84:0D:94:BC:86:E0:5C:D3:08
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20FB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J5_oECJJ-A59WW6EDZS8huBc0wg.roa
Signing time:             Fri 25 Nov 2022 04:39:22 +0000
ROA not before:           Fri 25 Nov 2022 04:39:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8443 (0x20fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=279FE8102249F80E7D596E840D94BC86E05CD308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:ce:ed:4f:9c:cc:e0:25:fc:83:3c:2d:6d:
                    ea:77:d6:4f:cf:49:c7:b0:60:3f:c6:db:c0:dd:68:
                    32:47:0f:46:86:3e:e4:74:67:09:f2:a0:6e:e5:bb:
                    d5:43:76:30:30:5f:8b:4e:dd:83:0a:9e:05:69:6e:
                    41:96:27:89:19:50:1a:b6:5f:6c:70:fa:4a:23:b4:
                    5c:15:f1:f7:d6:eb:89:f2:b7:6a:02:9c:6c:fd:34:
                    ff:a7:15:29:60:91:51:9b:b8:6d:c6:4b:86:f8:02:
                    3c:cd:94:5a:91:f3:2c:39:0c:67:34:6d:a2:13:83:
                    82:fb:37:65:44:70:49:49:95:2a:cf:a5:db:2d:9b:
                    b8:ff:57:58:da:29:ef:82:b6:6f:b8:1e:8b:e7:68:
                    4f:e1:42:0b:40:e8:94:b6:50:d7:24:a7:e3:27:20:
                    d8:7f:90:a7:b3:c3:a2:b5:7d:af:94:9f:e6:47:9b:
                    52:4f:c5:c1:66:ca:23:45:b5:34:d1:fc:7d:ac:40:
                    99:a4:78:26:d4:ac:21:e0:7a:10:60:0f:ff:e6:bb:
                    b4:66:a5:53:7b:b9:ec:8c:f2:7b:ae:54:f9:15:e9:
                    14:99:0d:8c:70:a9:2b:c5:09:d6:4b:62:e2:0f:f7:
                    d0:db:bd:f8:46:43:32:2e:d9:49:33:80:67:54:c8:
                    15:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9F:E8:10:22:49:F8:0E:7D:59:6E:84:0D:94:BC:86:E0:5C:D3:08
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J5_oECJJ-A59WW6EDZS8huBc0wg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:68:59:3e:b0:a9:25:28:53:7d:08:f4:ff:f9:b0:af:30:1a:
         d8:08:e5:ce:23:2e:db:c8:f7:d6:f5:ac:1a:3e:65:a1:99:f2:
         69:aa:75:79:ff:c5:bb:e2:12:25:ad:42:c8:18:ee:d3:b0:07:
         e1:53:d5:32:75:4c:00:c3:43:a7:94:ea:f9:14:7a:26:0e:3a:
         95:ca:64:c7:ab:82:ce:8f:d6:5c:c6:b3:79:cb:64:92:3f:e5:
         9c:ea:0b:90:86:13:56:cb:44:9d:07:d7:72:f4:b6:c6:fd:c6:
         bb:a4:72:aa:4b:d6:50:3f:2a:8e:eb:d6:74:be:31:1f:26:47:
         1f:90:05:51:ac:27:98:e5:d2:43:0a:9a:b2:49:91:34:0a:95:
         2a:7f:23:16:c8:56:a1:a2:76:c1:c7:ee:ca:fd:cd:56:e5:e9:
         47:53:26:24:97:c5:1c:ab:51:16:05:8b:5d:e5:99:17:b4:4a:
         e0:01:4a:24:37:19:17:11:bb:7b:9e:f0:77:d0:22:56:64:95:
         50:d1:75:f4:19:41:c3:b7:90:e7:d4:58:5a:43:07:25:46:d9:
         30:ef:38:98:2a:36:be:85:b4:07:fa:c8:94:28:9a:0c:40:35:
         46:8d:70:6e:ea:bc:52:ba:05:3a:e3:c8:cb:c8:de:fb:c1:19:
         23:54:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org