Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L0ngV0wMh0uqtqcSm9O_o_NmQKE.roa
File:                     L0ngV0wMh0uqtqcSm9O_o_NmQKE.roa (raw, json)
Hash identifier:          D9AvEY1pwv+/XnL2WIKNFfMLp/79cLZVNCACNGU4sDc=
Subject key identifier:   2F:49:E0:57:4C:0C:87:4B:AA:B6:A7:12:9B:D3:BF:A3:F3:66:40:A1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1B99
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L0ngV0wMh0uqtqcSm9O_o_NmQKE.roa
Signing time:             Wed 29 Sep 2021 02:46:47 +0000
ROA not before:           Wed 29 Sep 2021 02:46:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7065 (0x1b99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:46:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2F49E0574C0C874BAAB6A7129BD3BFA3F36640A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:bc:37:fd:ee:6c:be:28:63:b5:4f:34:f6:
                    5a:13:d1:85:15:92:7a:ee:9f:bd:27:ec:34:20:dd:
                    5c:22:8d:8a:6d:00:1a:a3:75:cd:90:0d:c5:b9:b6:
                    c2:d9:59:9b:f2:28:63:8c:a3:ba:5a:f3:4b:88:5a:
                    aa:3c:e6:4c:75:03:d1:8b:65:ac:21:a2:40:55:47:
                    85:71:60:27:88:62:e5:8c:17:fe:60:54:76:07:de:
                    a4:a1:16:91:f3:47:b0:1e:ad:00:c8:86:68:cc:a8:
                    de:fd:5b:7f:91:bd:70:55:86:e3:e1:41:25:b9:13:
                    79:ba:88:77:39:df:96:2a:af:45:a2:0a:1a:62:cc:
                    4f:1b:13:3e:ed:28:30:22:50:de:99:79:a1:2e:b9:
                    d3:2d:94:b8:04:45:97:23:3d:5a:22:c9:d2:29:c4:
                    b4:7f:92:28:f9:28:3f:48:41:69:10:6b:ff:71:b4:
                    62:64:38:bc:68:68:5e:df:b1:df:a8:72:82:1e:84:
                    73:6a:72:d0:cd:33:81:02:67:db:b0:06:45:bf:53:
                    1a:62:05:8b:4f:fd:91:69:4b:70:96:d8:00:d4:b8:
                    10:31:20:0a:0c:c2:74:ae:0a:f6:57:34:d2:6f:e2:
                    d1:61:02:85:39:c0:0c:80:d4:12:2f:9c:f4:a0:08:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:49:E0:57:4C:0C:87:4B:AA:B6:A7:12:9B:D3:BF:A3:F3:66:40:A1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L0ngV0wMh0uqtqcSm9O_o_NmQKE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:1e:79:e1:20:6e:34:63:cd:b6:2e:87:87:ef:a2:f5:4e:
         c7:3b:eb:ab:c1:77:21:29:a5:b4:33:ac:d5:7d:86:ef:67:e6:
         ca:60:0c:0b:1c:f6:94:08:5e:40:d5:bb:d4:c8:0b:a7:69:9e:
         f6:84:65:57:6b:3e:92:1b:7c:d7:59:0e:79:d5:0c:c2:e9:bf:
         41:b1:69:14:f3:ff:ee:61:df:dc:ac:b7:6a:9a:ab:7a:7a:fd:
         24:a0:e4:5c:be:82:af:45:b3:63:3e:c2:09:47:96:f4:83:13:
         9d:0f:96:cf:4c:90:c1:54:df:32:58:ca:16:a6:5b:bb:7e:1c:
         1e:41:81:14:04:37:6f:9d:f5:90:ae:9b:7a:02:33:93:ef:ee:
         ff:6b:de:cb:11:a3:27:a7:9f:2e:13:78:f6:d4:20:6a:1c:fb:
         7e:c5:26:bf:96:6a:22:75:4e:de:7c:e1:20:56:c2:cb:d4:2e:
         73:7d:e1:b0:ee:b2:89:ec:53:ea:51:75:cf:07:4b:de:38:a3:
         4d:69:a3:2e:54:73:d8:8d:f7:cf:07:37:7a:72:af:7d:7a:3f:
         2d:f5:66:4d:a9:4b:cc:42:66:f1:5c:74:4b:1c:ee:25:2a:3a:
         54:41:7e:48:62:b1:0e:d5:f6:f4:e5:6e:5c:49:60:3b:49:78:
         aa:09:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org