Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R7Cg0aMGC4qvPUte1WoHH4g5xXk.roa
File:                     R7Cg0aMGC4qvPUte1WoHH4g5xXk.roa (raw, json)
Hash identifier:          BORSiMABNQw1vn1rryrrsenpx+ag6g0mpzMMwTQi2Tc=
Subject key identifier:   47:B0:A0:D1:A3:06:0B:8A:AF:3D:4B:5E:D5:6A:07:1F:88:39:C5:79
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1919
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R7Cg0aMGC4qvPUte1WoHH4g5xXk.roa
Signing time:             Sun 07 Feb 2021 12:57:06 +0000
ROA not before:           Sun 07 Feb 2021 12:57:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        180.177.46.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6425 (0x1919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:57:06 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=47B0A0D1A3060B8AAF3D4B5ED56A071F8839C579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:76:0a:ac:30:88:35:27:37:d6:7f:44:55:
                    9d:ea:22:0a:c1:9a:fa:da:75:a6:85:b2:cb:61:f1:
                    48:c9:af:d5:e1:c2:df:80:2d:da:62:8c:dc:4c:42:
                    f2:4d:47:f3:39:ef:42:c2:23:36:46:bb:0e:02:ef:
                    37:6c:d4:fe:c5:82:bf:14:b3:3e:8c:ab:d8:ce:a9:
                    e4:72:8e:b8:60:ac:c0:4e:c8:03:52:85:22:91:78:
                    e1:d5:19:4f:8d:46:78:d4:ad:b1:02:83:84:be:5b:
                    90:c7:0f:1d:84:4b:3d:a7:1b:1f:1e:9a:f8:d6:fd:
                    ea:ef:20:a7:1e:95:35:20:8b:83:03:15:ec:e0:db:
                    e9:b4:b8:ac:dd:6d:13:04:ef:b7:13:47:a1:d4:99:
                    f2:7e:3c:f9:aa:db:64:91:ec:d6:68:67:d5:76:83:
                    b0:ed:38:c6:99:e6:8e:1e:9a:c4:7e:a4:5b:fb:4e:
                    5c:17:bc:3b:2d:b5:2a:31:05:95:a3:a7:f7:96:24:
                    35:75:76:29:c1:82:01:52:d8:7a:c4:a4:57:53:6b:
                    e5:0f:b9:3f:e5:aa:c1:c8:b8:29:64:14:15:72:f0:
                    2e:87:05:93:b9:45:dd:d4:cc:04:f0:10:b3:6d:0a:
                    bb:91:c6:6c:1e:c4:80:43:63:81:bb:39:cd:2f:0a:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:A0:D1:A3:06:0B:8A:AF:3D:4B:5E:D5:6A:07:1F:88:39:C5:79
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R7Cg0aMGC4qvPUte1WoHH4g5xXk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:65:98:7f:95:bf:f4:7a:79:59:d2:28:6f:0a:03:23:83:2a:
         a9:ed:a5:89:65:ec:ea:07:7d:44:76:fe:90:32:d2:5f:5c:4f:
         dc:14:b2:fd:52:7b:23:b1:5c:0d:d3:c0:75:ff:d1:55:fc:14:
         22:eb:01:5b:91:3a:c4:50:02:c2:21:65:65:53:a9:8d:5a:ed:
         0c:3e:cd:48:56:82:18:c3:14:4c:3e:1b:a2:5c:e4:2d:17:81:
         5c:79:03:59:9d:c3:0f:15:44:e2:74:cf:44:bb:4f:4e:03:cd:
         70:2c:4e:8d:87:a0:b6:0f:8e:4c:4b:01:b3:e1:8a:f8:2d:1f:
         e0:b6:c1:13:e0:07:d8:7e:5f:16:77:16:b0:e8:6b:36:e2:2b:
         ca:3b:cc:b7:cb:f4:3e:77:bc:33:61:3e:4d:13:54:0d:45:e8:
         07:8d:1d:7b:ab:43:76:9d:51:90:b3:95:f3:b6:f4:87:5b:b9:
         15:1c:29:53:76:3a:65:f6:56:0e:f0:25:a8:d1:2e:19:b1:d3:
         96:07:6e:08:f1:51:bb:44:f5:e5:cc:61:37:49:7f:bc:65:d8:
         a8:a8:ad:58:cc:b9:b2:c4:7f:7d:8b:0a:78:35:9a:5e:9b:04:
         dd:a6:57:a6:0b:35:04:60:7b:65:4e:d7:be:89:d1:d1:a3:5f:
         88:3e:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org