Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KDx-29DfSmhY2D76sIriXvaoKaw.roa
File:                     KDx-29DfSmhY2D76sIriXvaoKaw.roa (raw, json)
Hash identifier:          7/X6iQih9Lhz8GwV0haRi0FFHYAs60J408/slUh1FeU=
Subject key identifier:   28:3C:7E:DB:D0:DF:4A:68:58:D8:3E:FA:B0:8A:E2:5E:F6:A8:29:AC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0D89
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KDx-29DfSmhY2D76sIriXvaoKaw.roa
Signing time:             Tue 29 Sep 2020 09:54:40 +0000
ROA not before:           Tue 29 Sep 2020 09:54:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.232.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3465 (0xd89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=283C7EDBD0DF4A6858D83EFAB08AE25EF6A829AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:3c:81:fc:0f:46:52:4b:3a:5c:fd:f0:72:
                    9d:c5:68:73:76:59:be:54:a2:fd:7e:0f:1f:ad:42:
                    2e:88:e3:83:54:43:56:bd:d9:9e:2d:c8:2e:be:2b:
                    4d:2b:9a:f9:79:ed:73:2e:3e:fa:ea:0c:22:9e:79:
                    e4:7f:2c:da:39:14:c7:5a:1a:ed:35:62:01:84:dd:
                    0f:4d:2a:0b:8d:a3:76:a7:a8:37:6a:d5:07:d8:7f:
                    9f:63:8a:89:42:e0:bb:d1:ff:64:61:94:6f:b8:7b:
                    b9:60:0a:1f:59:36:0f:6c:2e:0a:50:33:69:58:46:
                    f3:1c:89:da:a1:8e:df:31:a7:7c:30:4c:6f:dd:92:
                    24:cc:6a:f1:70:37:cb:51:ee:3d:9b:04:c8:77:02:
                    b4:3d:1f:ac:2f:f1:3f:4c:e4:2e:51:75:55:e2:7e:
                    ce:40:6f:b5:08:a3:fb:75:e6:bc:ff:47:41:44:f2:
                    b6:27:3c:7e:f9:3a:a9:ca:11:fb:78:ba:86:21:e1:
                    9e:1e:23:d6:ff:78:52:17:8c:37:27:7b:c7:05:45:
                    a1:d2:65:44:be:80:f1:23:d4:74:db:f5:31:96:ff:
                    2e:88:d9:75:52:d8:bd:fe:80:13:a0:e6:2e:1c:05:
                    53:57:f1:28:18:7b:42:f3:92:02:84:02:f4:fe:f7:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3C:7E:DB:D0:DF:4A:68:58:D8:3E:FA:B0:8A:E2:5E:F6:A8:29:AC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KDx-29DfSmhY2D76sIriXvaoKaw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:02:a9:e9:d2:57:7f:3b:0b:65:fb:c0:fe:0b:c6:c1:a2:65:
         bc:2f:03:99:22:69:67:08:b8:31:b9:49:1f:b8:3f:24:19:51:
         1d:f2:1f:49:62:8f:2d:44:b6:15:d5:06:77:74:01:f9:04:ec:
         90:e4:fb:b3:0a:21:47:8c:3d:b7:e4:20:ac:98:4d:69:a4:6f:
         b0:20:8a:ea:cb:8b:d1:3d:0a:23:f6:69:1d:1e:f8:6c:63:c8:
         ef:55:62:19:7b:3b:65:3b:16:86:78:84:24:dd:a6:ee:20:8b:
         fd:e4:b9:4d:52:92:f0:eb:31:d1:bb:11:44:87:f3:35:21:c2:
         15:a9:18:76:47:20:b3:32:ac:86:24:4d:e9:9f:bf:d6:46:7f:
         5b:5b:e3:1a:05:d3:4e:34:04:30:99:df:ec:df:c9:14:0c:3d:
         b9:45:a6:a9:1e:80:28:9f:5d:81:cc:72:ad:9e:70:92:f2:6d:
         5b:9b:83:70:18:62:07:0a:b2:bb:da:2d:56:66:83:4c:0d:84:
         58:5d:c1:fe:67:f7:24:f8:5a:79:95:bd:61:49:3b:c4:69:19:
         82:5c:e6:d1:4d:c1:29:c5:0d:c3:51:88:2f:e7:a7:2d:e4:6f:
         0d:47:95:eb:b1:a7:7c:ed:fa:b7:4e:df:1f:72:de:5e:72:8e:
         96:3a:d6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org