Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JzabJkxKYx4OZg5DPeRVmmtLr5c.roa
File:                     JzabJkxKYx4OZg5DPeRVmmtLr5c.roa (raw, json)
Hash identifier:          zDzJq0enTdgY0HCYD2hfASU9JSIj1uZht92O+xVBnQQ=
Subject key identifier:   27:36:9B:26:4C:4A:63:1E:0E:66:0E:43:3D:E4:55:9A:6B:4B:AF:97
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B4D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JzabJkxKYx4OZg5DPeRVmmtLr5c.roa
Signing time:             Wed 29 Sep 2021 02:46:25 +0000
ROA not before:           Wed 29 Sep 2021 02:46:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.232.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6989 (0x1b4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=27369B264C4A631E0E660E433DE4559A6B4BAF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:24:18:08:2e:ab:a2:96:7f:a6:32:68:23:
                    fb:d1:4e:7a:24:9f:a4:57:7e:36:91:72:68:72:d1:
                    65:39:6a:d2:3e:1b:ad:23:25:c1:0b:77:ac:b2:fc:
                    b9:fe:bf:2e:80:ec:eb:e2:9d:26:dc:96:db:a6:78:
                    8c:cd:a5:65:d0:e5:ab:2d:b8:ef:07:a4:9a:16:0c:
                    47:b4:b4:1b:1f:f9:31:3d:0f:9e:0e:0e:d4:36:9a:
                    2b:d9:38:12:74:07:d4:41:0b:64:90:79:45:c7:0b:
                    69:5c:d2:1e:3c:a1:82:07:12:6e:31:9a:d6:01:fb:
                    5f:4a:c5:d6:7c:01:5a:cd:db:80:25:2f:5f:af:78:
                    36:0f:dc:14:a1:0f:ce:20:c7:7e:e5:cd:f7:da:54:
                    cb:e4:97:46:4b:5a:65:9e:83:52:b9:0c:45:35:3a:
                    08:1a:8a:c7:8f:a3:ae:5c:c4:d2:d5:df:a3:f3:7d:
                    c2:bc:a1:a4:b7:ed:a8:90:f0:c5:d8:03:04:8f:1f:
                    42:d4:f1:de:8b:8f:ea:f2:af:9c:6e:f3:95:f6:25:
                    67:ea:11:be:8e:d2:8d:2b:51:f5:12:4a:3f:60:55:
                    34:84:67:7c:af:10:c9:8e:57:02:8a:ea:b4:fb:1d:
                    d2:e1:5e:fe:f4:9a:37:c0:9b:91:0b:9f:3c:12:f0:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:9B:26:4C:4A:63:1E:0E:66:0E:43:3D:E4:55:9A:6B:4B:AF:97
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JzabJkxKYx4OZg5DPeRVmmtLr5c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:fb:62:1e:ac:75:59:ee:92:06:10:41:a3:47:18:f5:99:14:
         2c:93:2c:f9:59:37:c9:62:80:40:84:a2:e7:c8:d4:32:76:be:
         3b:49:39:06:01:97:5f:b8:47:80:fc:ce:62:4e:b6:47:d9:0a:
         e4:c9:b8:03:f3:58:69:d0:2c:80:ba:13:b2:db:ec:b0:6d:d1:
         74:7c:a3:d2:6f:1e:3c:c9:e0:d2:6c:e0:5c:b9:3c:a1:dc:d8:
         76:6c:46:13:dc:b8:f0:33:e6:c4:cc:36:81:6f:7f:cc:db:1a:
         07:eb:62:d4:3b:fc:2a:83:54:c7:42:7b:4f:94:fb:ef:cc:3e:
         29:76:82:1e:08:1e:14:dc:f2:e8:15:34:52:b6:ff:3c:2a:09:
         f8:3f:2d:27:10:bd:00:97:f1:d9:e2:89:01:43:c5:51:08:de:
         b8:b6:79:52:4e:fe:1c:04:19:16:db:9e:3d:29:dc:e3:f9:93:
         b7:44:16:fb:7c:25:c9:80:65:1d:da:69:46:34:85:6c:43:f9:
         43:a4:76:38:9e:de:44:95:a0:51:2a:a9:d3:e3:d4:fc:0e:0a:
         61:f8:21:07:93:f9:1f:ff:68:80:5e:e4:b5:21:3b:11:bc:0e:
         c0:33:a8:82:3a:9e:52:87:8b:64:14:f9:9f:ee:82:3b:c1:22:
         7b:22:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org