Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rajlukr_rtT7wvaF4JJtlSJVY9Q.roa
File:                     Rajlukr_rtT7wvaF4JJtlSJVY9Q.roa (raw, json)
Hash identifier:          jauqrfbKaPOQXMd/u2uRlwQz/h5FZgJGfUnyQhT9An8=
Subject key identifier:   45:A8:E5:BA:4A:FF:AE:D4:FB:C2:F6:85:E0:92:6D:95:22:55:63:D4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rajlukr_rtT7wvaF4JJtlSJVY9Q.roa
Signing time:             Thu 15 Sep 2022 02:46:24 +0000
ROA not before:           Thu 15 Sep 2022 02:46:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=45A8E5BA4AFFAED4FBC2F685E0926D95225563D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:89:60:44:42:aa:ef:01:fb:59:be:c1:41:
                    88:2c:79:4b:7e:c8:bb:6c:33:ec:47:10:d9:e2:8c:
                    a9:e5:e2:a3:42:5e:1b:98:74:a7:6f:74:e1:f5:08:
                    e9:28:96:5f:a0:13:9a:18:26:52:e9:a4:a5:9c:5e:
                    2d:3b:20:df:cc:74:b4:41:a3:34:8b:69:3b:38:81:
                    01:c7:53:3a:94:bf:9d:53:6b:48:13:c4:40:c3:e0:
                    c5:bb:2e:8e:41:18:1c:b4:09:4c:d0:b4:b4:1f:3d:
                    a7:02:60:fc:fc:6a:cb:f6:9a:80:67:d4:87:83:1c:
                    96:ac:b5:a7:8e:db:d1:6c:37:15:27:eb:08:63:db:
                    df:b9:64:03:ce:47:a9:99:f1:ee:94:bf:62:5d:81:
                    ee:02:76:92:77:ca:b5:0d:93:f1:f0:00:3e:d9:4e:
                    a6:e9:07:89:43:5b:ac:2f:fb:92:07:b0:f0:07:13:
                    ab:8d:dc:a4:a6:f9:15:ff:2f:b3:31:15:15:8a:b8:
                    06:a3:e5:3c:6c:13:b8:c4:e3:94:ac:23:6c:4d:60:
                    0b:ff:5a:a3:29:cf:d8:ac:67:59:84:5e:3d:4d:7b:
                    96:10:5e:4f:c9:3a:03:df:93:6b:e4:91:86:a5:97:
                    68:43:ae:f0:91:02:53:ec:51:3b:9a:a2:6e:9d:45:
                    da:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:E5:BA:4A:FF:AE:D4:FB:C2:F6:85:E0:92:6D:95:22:55:63:D4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rajlukr_rtT7wvaF4JJtlSJVY9Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:dc:be:62:81:d9:6e:e9:50:fb:bb:8b:64:67:9d:47:35:85:
         4c:97:72:45:7a:a4:6b:c4:9f:1c:b0:14:9e:f7:63:04:76:9f:
         0f:8e:d1:6a:c5:69:ed:b0:59:23:84:91:9a:b4:3a:7c:5f:9c:
         cc:0e:6d:78:12:19:01:bf:67:2b:ec:bd:bd:30:e7:68:2f:ba:
         53:1c:68:24:dd:2a:01:8a:9e:09:76:d7:9b:d9:af:03:0a:64:
         b0:3a:fc:d6:37:70:2c:b3:a4:7b:14:6c:00:58:09:09:63:ef:
         b4:76:42:47:79:81:13:5d:eb:a3:b1:58:d6:41:e7:ed:2e:58:
         6a:fa:8b:de:e5:dd:ea:c5:39:58:a9:eb:3a:a0:ae:0b:4c:5c:
         ba:af:79:e5:1b:49:c1:59:3e:60:2d:88:ec:ed:e3:4e:fc:0a:
         a1:c3:1c:13:db:e3:6d:2d:85:a6:77:12:dd:8c:a8:e1:0a:4d:
         f7:f8:5f:ea:30:5c:2b:eb:b4:94:30:f5:8b:f3:7a:3b:26:dc:
         36:8f:6c:76:03:83:a9:22:4e:5d:5e:e8:4e:d2:90:18:79:ed:
         4c:c6:ec:45:a3:21:65:a4:2a:f0:bd:11:67:3d:19:5f:ee:86:
         cf:63:95:ad:e2:ec:ca:41:bd:6c:cf:07:10:6b:20:cd:cd:b9:
         23:49:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org