Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Or19AR_ZKJ_ASZVQ6egf-aUtgCs.roa
File:                     Or19AR_ZKJ_ASZVQ6egf-aUtgCs.roa (raw, json)
Hash identifier:          7qkCeV2Ur9X3bDJYmtv5CDe2//V1NF7bP5ws8BKqiM0=
Subject key identifier:   3A:BD:7D:01:1F:D9:28:9F:C0:49:95:50:E9:E8:1F:F9:A5:2D:80:2B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22EF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Or19AR_ZKJ_ASZVQ6egf-aUtgCs.roa
Signing time:             Fri 25 Nov 2022 04:41:49 +0000
ROA not before:           Fri 25 Nov 2022 04:41:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.32.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8943 (0x22ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3ABD7D011FD9289FC0499550E9E81FF9A52D802B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:ee:42:d9:c4:e2:6f:db:af:59:a4:9a:91:
                    b3:f0:31:2c:61:38:2d:13:a4:e2:df:97:ad:78:a9:
                    12:7e:41:5c:70:2e:70:57:4c:27:07:dd:7b:ef:c2:
                    14:c9:92:26:1a:41:62:b9:6b:51:4e:19:08:49:12:
                    66:bf:48:5b:11:04:3f:27:67:0a:92:07:75:05:b7:
                    b2:f6:0b:64:79:1c:be:0c:57:0d:09:f9:b1:8d:35:
                    6a:76:c5:65:52:63:86:7d:96:23:8a:73:b3:58:8f:
                    ed:53:33:cb:42:a0:1c:4b:fe:d1:e3:4b:6c:9a:29:
                    d7:fe:4d:c5:ab:4b:87:96:e6:82:38:f3:b7:af:54:
                    2e:60:a6:82:96:29:0b:ac:27:43:94:ac:7f:04:c6:
                    49:3a:52:e8:e6:46:e3:0a:2c:3d:13:24:e7:f5:c5:
                    83:4a:7a:e8:c5:19:91:b1:b4:43:3c:59:09:d2:ce:
                    4a:15:59:38:ab:c3:bc:56:1f:f0:fa:40:cb:c0:aa:
                    c1:f3:7c:05:f9:ff:50:f4:e8:b0:80:f6:dd:9e:a5:
                    9d:f8:1e:42:9f:b7:48:9b:ad:85:62:ea:5a:1d:27:
                    5c:e0:f3:2e:e8:eb:dc:30:06:f9:40:ac:43:c6:9f:
                    ed:aa:fa:2f:44:c6:7d:ac:26:a4:d8:e4:56:ee:3f:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BD:7D:01:1F:D9:28:9F:C0:49:95:50:E9:E8:1F:F9:A5:2D:80:2B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Or19AR_ZKJ_ASZVQ6egf-aUtgCs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:ee:82:08:4d:61:ad:1a:b0:8c:b4:82:0a:5d:2d:4d:8c:
         53:58:e8:c0:9a:80:99:46:84:2f:94:49:1e:87:2e:e2:62:da:
         82:f8:d8:c8:ae:1a:a4:85:05:db:20:00:34:29:53:6b:c7:54:
         c6:68:90:30:eb:fd:3f:e2:4d:0a:51:28:82:25:18:e8:2a:c9:
         f6:a5:31:89:ee:b9:12:f2:f3:5b:6c:b1:7e:d2:ae:2d:89:7e:
         33:90:ff:22:00:9f:ee:cf:8c:4e:ff:35:c7:4e:fa:24:16:b4:
         e7:13:fa:58:ff:34:d9:51:d1:f9:dd:7d:6f:81:91:ad:0b:d6:
         95:97:b1:c9:ff:1f:a9:12:77:da:06:23:ce:91:22:4b:29:fe:
         e3:63:57:dc:c5:f4:1f:23:45:e7:af:cb:97:17:62:3e:8e:78:
         c3:46:a4:19:ed:a0:27:19:63:7a:f6:7f:b6:31:80:9e:f3:b5:
         3c:cd:26:09:d7:7b:f5:ff:6c:38:0d:22:f8:f0:55:d9:e4:8b:
         87:23:05:e0:87:e6:b7:90:66:19:e6:e0:6b:85:28:f6:36:26:
         e9:1f:f9:76:b2:41:ce:c1:1d:92:81:c4:13:96:d1:71:0c:95:
         cd:bf:85:f1:69:48:36:2a:83:a6:e6:d0:19:f1:24:18:f0:2f:
         5c:21:57:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org