Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LIroFf0EsrVJeY5FLItivtX-t5w.roa
File:                     LIroFf0EsrVJeY5FLItivtX-t5w.roa (raw, json)
Hash identifier:          ryT0DxaII0RQD9O2sdIDjyTz60DCwBw6QP8WVjjVTU4=
Subject key identifier:   2C:8A:E8:15:FD:04:B2:B5:49:79:8E:45:2C:8B:62:BE:D5:FE:B7:9C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LIroFf0EsrVJeY5FLItivtX-t5w.roa
Signing time:             Thu 15 Sep 2022 02:52:52 +0000
ROA not before:           Thu 15 Sep 2022 02:52:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2C8AE815FD04B2B549798E452C8B62BED5FEB79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:cd:ac:a8:21:e3:f3:fb:d6:48:c6:91:22:
                    9f:81:1f:9d:ca:56:95:0b:da:04:3e:50:de:e5:56:
                    43:92:50:83:be:2b:37:c4:9c:88:2c:57:c1:aa:aa:
                    e3:f5:25:b9:59:94:86:11:3c:8b:6d:f9:fd:2b:d5:
                    5f:26:8d:11:32:18:84:dd:2b:ed:bc:36:69:b4:73:
                    37:bb:3a:51:9d:ac:f9:f1:22:34:5a:90:b4:6d:3c:
                    fb:b9:65:ce:f1:9a:4a:42:7e:5a:de:1b:7d:8a:c0:
                    37:8c:46:7a:a3:85:77:ae:ec:8d:55:cd:2b:24:13:
                    bb:fb:d1:b4:1c:00:4a:06:5f:be:a0:fa:72:c4:14:
                    17:d6:4a:bb:92:48:02:2e:b6:ea:b8:46:a8:14:eb:
                    3d:cc:01:17:3a:42:5e:8a:83:cb:96:d2:ff:3d:af:
                    ee:3e:30:02:ab:6e:25:4f:92:a4:ab:b2:f5:5a:54:
                    24:6e:54:52:90:c4:ff:f4:85:a9:4a:c1:88:3f:f5:
                    52:7d:d3:3f:a0:a3:06:c2:1c:57:48:dc:51:da:40:
                    7e:12:32:73:75:e3:a0:2a:72:eb:32:13:80:b3:07:
                    19:c3:e0:0b:6e:28:c3:ca:69:fe:4b:41:d6:6a:bf:
                    33:06:1c:36:02:b5:58:60:e7:eb:71:33:2a:2e:38:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8A:E8:15:FD:04:B2:B5:49:79:8E:45:2C:8B:62:BE:D5:FE:B7:9C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LIroFf0EsrVJeY5FLItivtX-t5w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:6a:0c:88:65:1a:02:12:01:4b:3f:bf:5c:bd:28:b6:ce:a1:
         13:f2:4a:30:1c:f4:b2:9f:39:22:57:2e:75:77:9b:5e:c1:5b:
         3b:a4:de:d6:19:17:3d:3e:cd:cd:6c:72:ec:cf:46:49:6e:63:
         e9:1c:ed:73:aa:9d:b7:bd:4f:d9:be:b9:05:63:6e:6b:79:ff:
         5e:26:fc:f8:5f:5e:d4:ec:0e:ec:b3:18:bb:2b:95:3c:43:01:
         85:06:04:0e:02:1f:c4:8c:cf:f5:31:31:8e:f9:2e:13:de:2e:
         09:60:9b:6b:6c:e6:0b:06:64:eb:00:da:ad:69:19:e3:ae:f6:
         f3:8e:08:a6:88:fa:02:a5:86:cb:4d:bd:95:3e:cc:0a:93:77:
         55:15:c7:f7:06:e7:7c:53:3b:8d:83:63:69:30:2f:b0:93:a3:
         9a:74:48:bd:ed:68:66:20:5b:98:cb:e0:80:76:6c:a9:59:f8:
         ae:dd:02:8d:72:de:38:a8:a3:3c:ed:4b:6b:7d:22:ab:8d:24:
         67:61:38:d6:62:93:6c:57:ec:e3:1b:94:fa:e1:32:41:ff:2a:
         64:58:0a:47:e5:29:cc:d5:11:37:08:f4:24:7c:0b:67:46:ea:
         a3:32:1d:fa:47:13:cc:4f:7b:43:31:e1:1b:28:38:ef:41:1c:
         b6:09:cb:a8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyNTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJDOEFFODE1RkQwNEIy
QjU0OTc5OEU0NTJDOEI2MkJFRDVGRUI3OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1X82sqCHj8/vWSMaRIp+BH53KVpUL2gQ+UN7lVkOSUIO+KzfE
nIgsV8GqquP1JblZlIYRPItt+f0r1V8mjREyGITdK+28Nmm0cze7OlGdrPnxIjRa
kLRtPPu5Zc7xmkpCflreG32KwDeMRnqjhXeu7I1VzSskE7v70bQcAEoGX76g+nLE
FBfWSruSSAIutuq4RqgU6z3MARc6Ql6Kg8uW0v89r+4+MAKrbiVPkqSrsvVaVCRu
VFKQxP/0halKwYg/9VJ90z+gowbCHFdI3FHaQH4SMnN146AqcusyE4CzBxnD4Atu
KMPKaf5LQdZqvzMGHDYCtVhg5+txMyouON07AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULIroFf0EsrVJeY5FLItivtX+t5wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xJcm9GZjBFc3JWSmVZNUZM
SXRpdnRYLXQ1dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sSwwDQYJKoZIhvcNAQELBQADggEBADpqDIhlGgISAUs/v1y9KLbOoRPySjAc9LKf
OSJXLnV3m17BWzuk3tYZFz0+zc1scuzPRkluY+kc7XOqnbe9T9m+uQVjbmt5/14m
/PhfXtTsDuyzGLsrlTxDAYUGBA4CH8SMz/UxMY75LhPeLglgm2ts5gsGZOsA2q1p
GeOu9vOOCKaI+gKlhstNvZU+zAqTd1UVx/cG53xTO42DY2kwL7CTo5p0SL3taGYg
W5jL4IB2bKlZ+K7dAo1y3jioozztS2t9IquNJGdhONZik2xX7OMblPrhMkH/KmRY
CkflKczVETcI9CR8C2dG6qMyHfpHE8xPe0Mx4RsoOO9BHLYJy6g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org