Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JTDpujjJE0JY_1nIJF8cKzodk_g.roa
File:                     JTDpujjJE0JY_1nIJF8cKzodk_g.roa (raw, json)
Hash identifier:          MTbx9AtM8oNhDYsNMc0GreDGoHEGfnu4Imfu+eQtHM8=
Subject key identifier:   25:30:E9:BA:38:C9:13:42:58:FF:59:C8:24:5F:1C:2B:3A:1D:93:F8
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2052
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JTDpujjJE0JY_1nIJF8cKzodk_g.roa
Signing time:             Fri 25 Nov 2022 04:38:34 +0000
ROA not before:           Fri 25 Nov 2022 04:38:34 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8274 (0x2052)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:34 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2530E9BA38C9134258FF59C8245F1C2B3A1D93F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:30:80:43:0c:c0:a7:00:9f:59:72:a0:8c:
                    3b:e5:35:e2:09:32:19:ce:9f:5d:ac:62:95:4e:8a:
                    fd:04:d4:59:2c:aa:2e:b7:e9:7b:98:85:40:87:0b:
                    0e:26:0f:b0:b9:14:71:4e:54:37:59:78:8a:04:b8:
                    5d:b7:c3:72:c9:07:8b:c6:4e:9a:64:45:57:22:50:
                    66:39:90:f0:71:33:e1:63:bd:da:13:6d:7f:e3:c4:
                    24:22:13:01:d5:26:05:2b:e4:99:61:cb:6b:c0:dc:
                    7b:3d:21:9f:5a:71:3e:49:0e:0b:43:03:82:ab:82:
                    23:50:ab:f9:fd:43:d7:ee:73:99:a4:00:f0:cb:41:
                    5a:8e:ef:4a:8b:5c:d4:2a:82:f5:a4:4b:fb:a8:ec:
                    9c:35:ae:d6:ef:4f:57:85:9e:2b:80:2e:e0:c0:fb:
                    22:d5:37:fb:f2:09:6f:21:6e:4f:71:f6:e8:11:e4:
                    85:b6:b9:63:16:34:2e:e2:fe:9d:01:c4:9a:41:13:
                    c7:9a:52:4a:05:9c:41:c6:8d:a8:97:68:9e:f7:1f:
                    18:cb:bc:fc:1b:5e:0e:19:79:7e:9c:c6:49:5d:e3:
                    5a:0a:7f:0c:a6:08:e5:d5:02:c4:23:7a:52:d0:0e:
                    c3:e5:be:0f:3d:e9:f9:4d:16:e1:db:6e:90:32:ab:
                    75:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:30:E9:BA:38:C9:13:42:58:FF:59:C8:24:5F:1C:2B:3A:1D:93:F8
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JTDpujjJE0JY_1nIJF8cKzodk_g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:3f:3b:0b:3e:b3:60:c8:cd:c0:49:aa:39:e0:c5:58:ba:
         d5:d5:eb:5c:84:c9:67:a6:87:ce:3a:31:fd:cd:1a:ab:15:c7:
         af:39:3b:e9:05:7e:54:3d:b1:85:b9:2e:95:b5:cd:ee:30:22:
         18:f1:de:9b:a0:10:62:60:da:53:a7:04:5b:78:d0:76:7b:34:
         b3:3b:ca:b5:20:f6:9b:5b:9e:97:56:01:08:a5:39:47:89:cc:
         de:ec:4d:e0:dd:a6:6f:bc:1b:9b:e6:1e:5f:bc:7f:2a:ed:1a:
         0c:d8:e7:15:15:59:f6:3c:d8:7d:db:c5:0c:69:cf:41:2d:6b:
         fd:17:d7:11:9c:43:fa:c6:b9:04:63:a7:18:00:db:4a:09:9f:
         50:88:d0:f6:d1:00:6a:3a:84:4f:09:f9:12:10:ff:b3:96:35:
         ec:16:23:45:1b:d8:9c:cd:1d:cd:ca:69:26:48:c1:9f:c3:03:
         47:69:42:f2:e6:5c:ba:d1:e0:99:aa:a0:bb:2f:d4:df:45:61:
         7f:30:93:03:8f:c3:ef:d7:9e:30:ee:58:a9:47:67:30:19:be:
         00:d5:82:de:68:77:a1:5b:a7:c3:e7:ed:93:a1:bb:32:ba:e0:
         85:7e:1c:77:e5:88:b9:90:69:53:c5:d4:f7:2e:bc:7f:6b:75:
         fe:8e:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org