Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OJ0i-SpWcpsTm65UWAhImcKwEjo.roa
File:                     OJ0i-SpWcpsTm65UWAhImcKwEjo.roa (raw, json)
Hash identifier:          Mo4s+vyHEyUOiS1QIo5lOQB13e9fRTsVka3IlmnV5h8=
Subject key identifier:   38:9D:22:F9:2A:56:72:9B:13:9B:AE:54:58:08:48:99:C2:B0:12:3A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OJ0i-SpWcpsTm65UWAhImcKwEjo.roa
Signing time:             Thu 15 Sep 2022 02:45:31 +0000
ROA not before:           Thu 15 Sep 2022 02:45:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=389D22F92A56729B139BAE5458084899C2B0123A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:18:67:70:0d:8f:d5:44:76:1d:39:d2:47:
                    70:e0:cb:ac:4a:ba:9d:ca:81:df:b5:d4:c6:ba:66:
                    ce:50:f7:6b:44:db:ea:33:47:0e:13:b4:39:67:a2:
                    bc:b8:75:53:bb:5c:14:f7:f7:68:21:53:0e:47:dd:
                    38:76:91:f7:f8:7a:84:f1:6c:9a:32:ba:82:02:31:
                    20:47:70:36:69:c4:62:86:c8:df:d4:7e:27:a7:c5:
                    3e:ea:f2:75:44:6b:9c:78:0e:19:05:30:25:65:9c:
                    d0:8e:fc:6d:97:19:6d:eb:bd:fc:de:05:c4:3a:7c:
                    df:1c:34:35:5d:2b:4d:32:78:17:17:b0:c4:7c:c5:
                    e0:75:d7:5c:5e:27:cb:b4:4e:d6:fb:f9:ea:90:76:
                    68:d7:ef:94:ac:3e:d9:0f:ec:7b:56:4f:48:0e:92:
                    93:58:a4:c9:fc:ec:14:a1:70:39:a1:06:2b:ad:a9:
                    70:30:ea:7d:30:62:a9:40:73:04:94:0f:68:42:67:
                    32:38:1a:98:d2:1a:e8:20:45:6e:59:3b:f0:86:c0:
                    62:e9:b5:df:a4:fe:55:14:bd:d3:9a:45:4a:cf:0b:
                    98:5f:11:5e:e1:c6:77:6c:cf:9e:1b:74:74:4b:66:
                    36:b2:2c:1a:58:8d:89:0c:40:94:bf:88:d9:43:ea:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9D:22:F9:2A:56:72:9B:13:9B:AE:54:58:08:48:99:C2:B0:12:3A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OJ0i-SpWcpsTm65UWAhImcKwEjo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:33:21:30:3b:be:1f:87:1a:23:c8:8e:a5:5c:b2:b8:c9:14:
         5f:7b:09:96:b4:5f:0b:77:88:71:0f:62:7b:d7:a7:ab:23:72:
         fe:26:29:f5:ee:85:25:30:77:2e:1f:d4:32:dd:03:38:e2:b9:
         2b:45:61:43:5b:fb:7a:9e:39:8d:47:c6:53:ee:26:b5:62:60:
         df:03:7a:c0:1f:d9:69:23:74:d5:ad:da:4d:16:11:1c:44:cd:
         0a:0a:8d:ef:eb:e5:da:a1:aa:20:4e:2a:be:d0:9e:34:2d:29:
         db:95:8f:aa:70:42:6a:21:1f:3e:b7:f9:56:d4:47:34:56:d9:
         e7:f6:e4:99:21:bc:53:51:db:bd:09:e4:26:47:01:26:ca:90:
         46:8d:c5:cd:2c:1d:35:68:19:47:40:bc:b8:f9:92:51:c6:44:
         bf:e8:51:89:44:8a:94:0b:22:f0:4b:91:ae:69:0f:4d:b0:df:
         a4:18:1f:4e:8f:e1:34:31:3f:5b:3b:cf:99:3c:43:d0:c2:6e:
         4e:42:9a:09:d6:f8:74:0e:a8:cd:24:c5:f5:f7:dc:88:56:bd:
         30:52:d4:ca:53:04:3d:e8:f6:38:e2:22:9b:5f:3b:1c:a1:90:
         0d:80:19:86:05:cd:cc:b5:37:ec:aa:7d:f0:c0:45:be:52:82:
         8b:4a:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org