Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P13nd-3bkWyMl_fcSupL1vrJsP0.roa
File:                     P13nd-3bkWyMl_fcSupL1vrJsP0.roa (raw, json)
Hash identifier:          VvlCtj64LGrXZGS5jMevIzRKC1Jh7wBVdqrECFUyDMg=
Subject key identifier:   3F:5D:E7:77:ED:DB:91:6C:8C:97:F7:DC:4A:EA:4B:D6:FA:C9:B0:FD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P13nd-3bkWyMl_fcSupL1vrJsP0.roa
Signing time:             Thu 15 Sep 2022 02:44:40 +0000
ROA not before:           Thu 15 Sep 2022 02:44:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:44:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=3F5DE777EDDB916C8C97F7DC4AEA4BD6FAC9B0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:81:7f:79:d4:d6:44:01:38:b8:0a:ca:1d:
                    84:6e:90:6c:49:ab:08:cb:33:a2:ec:3b:9b:f1:82:
                    a5:af:61:c5:72:2b:d9:22:dc:a3:8d:8a:3b:06:b0:
                    84:0d:04:68:9b:f0:94:1c:a5:54:e5:66:0f:93:09:
                    75:13:88:a8:ba:44:b6:9e:75:f7:25:c7:df:e5:3e:
                    70:b7:02:b7:22:64:ba:04:4f:b0:c7:f0:08:97:08:
                    fd:9f:c2:d1:f4:36:0a:d7:98:b9:f9:91:1a:55:60:
                    31:49:99:3b:65:82:af:b0:8b:f0:b6:f1:9f:63:eb:
                    a9:f4:46:fc:44:3d:ac:68:cd:f9:e5:c3:e9:b1:c4:
                    8b:16:c8:f4:52:79:2e:65:ce:7f:ab:91:38:d2:2c:
                    c5:c9:05:fa:5a:fc:b8:b2:06:da:11:25:50:37:0a:
                    66:ed:d9:25:32:3f:96:40:03:3a:b5:b2:96:c0:fa:
                    52:bc:9f:c0:95:5f:0f:3a:45:f3:47:ab:8d:83:cf:
                    7e:d4:16:3a:6a:8f:e3:00:57:57:09:d0:83:64:27:
                    28:9c:53:6b:12:80:08:6a:61:c2:1b:c9:9b:d8:50:
                    42:88:23:20:00:61:ae:e8:89:1e:89:8c:a4:84:96:
                    da:5a:b3:b0:b6:73:78:e6:8f:a9:49:12:49:75:be:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5D:E7:77:ED:DB:91:6C:8C:97:F7:DC:4A:EA:4B:D6:FA:C9:B0:FD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/P13nd-3bkWyMl_fcSupL1vrJsP0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:1a:f9:79:d1:2d:64:cf:2d:28:4f:5e:d6:2d:af:e2:47:
         cc:4c:b3:e3:ae:83:82:d2:f5:12:1b:1f:0a:5f:ca:54:e1:02:
         b9:e3:61:59:fd:b0:09:60:23:79:e3:c9:9e:06:77:7b:b9:0e:
         32:86:5e:91:18:57:42:82:49:24:26:a8:bd:3f:59:91:47:9f:
         db:c4:d2:25:f3:51:80:4e:81:03:00:2c:f9:12:f0:d0:75:90:
         cc:e8:17:8d:09:48:59:0e:13:a7:6d:fa:e7:98:11:fe:74:9c:
         ec:8f:9c:ed:53:63:b9:50:16:9f:6d:da:98:62:22:d0:04:45:
         43:b4:6c:94:f9:09:da:c0:f1:a4:7b:63:45:4a:70:2d:03:f1:
         88:55:af:b5:f5:07:48:21:af:26:2f:14:3e:82:d4:6e:d2:68:
         a4:49:6a:38:bf:fe:2e:60:5c:2f:93:c0:f7:5f:e4:99:fa:1f:
         d2:2d:6d:27:76:b9:c5:e4:fe:10:48:be:2f:27:5e:bf:a1:31:
         60:75:d9:b0:79:31:1d:64:4c:6d:ae:1d:af:5f:40:e0:5e:b8:
         b5:8b:46:4f:90:e8:79:00:73:25:4e:4b:4a:b0:b3:f9:b1:33:
         2a:7f:5b:c9:74:54:09:0d:04:f5:d3:bd:15:a6:f9:ae:e4:a7:
         4a:c6:a0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org