Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rx7UBxBelm7N90usabp-RnvBv3U.roa
File:                     Rx7UBxBelm7N90usabp-RnvBv3U.roa (raw, json)
Hash identifier:          CrZji6FI1D6+RzqDgDEpuFiUr/86N2NEboO/UDIXFSk=
Subject key identifier:   47:1E:D4:07:10:5E:96:6E:CD:F7:4B:AC:69:BA:7E:46:7B:C1:BF:75
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rx7UBxBelm7N90usabp-RnvBv3U.roa
Signing time:             Thu 15 Sep 2022 02:53:26 +0000
ROA not before:           Thu 15 Sep 2022 02:53:26 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:26 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=471ED407105E966ECDF74BAC69BA7E467BC1BF75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4d:e1:ed:5c:f4:a3:d7:3b:48:8b:a8:a6:f1:
                    8b:26:f7:e8:54:80:35:c5:10:39:87:25:01:e7:26:
                    19:0e:82:79:95:4e:bd:7a:2a:23:c9:8e:8d:b9:4d:
                    07:9b:e4:69:62:c9:1d:9e:0b:04:30:c3:02:cb:2a:
                    2b:df:c6:fd:56:93:22:e2:3c:d2:d3:b4:c5:ee:d3:
                    50:dd:20:90:ff:cb:34:b2:df:92:65:c6:f7:bd:df:
                    75:00:b4:24:cc:b8:75:84:ce:89:0b:86:ce:5b:51:
                    79:7f:6c:04:be:a0:9b:ee:97:2a:30:89:29:a1:49:
                    6f:c3:9b:32:a2:fe:ff:45:f7:15:98:42:ad:bb:7c:
                    96:6a:0c:ba:bc:57:d9:d4:4e:21:67:2e:ef:24:9d:
                    88:32:1c:22:24:d6:1b:cb:47:2d:77:5b:12:87:98:
                    50:b1:19:04:c1:c8:57:be:c7:58:ca:52:7a:76:e0:
                    98:be:9a:d7:c2:74:1a:02:1a:70:df:33:f4:d6:71:
                    bf:ee:cc:8b:54:7e:30:ae:8c:c1:81:79:bb:17:cb:
                    92:b4:ff:50:c9:e5:62:6e:9f:3a:5f:b6:2c:d2:bf:
                    26:67:15:8e:67:c9:42:f1:51:a7:ad:46:f4:0c:1c:
                    58:c3:ee:fa:79:fc:f3:e2:7f:23:a8:ce:98:b5:cb:
                    b6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1E:D4:07:10:5E:96:6E:CD:F7:4B:AC:69:BA:7E:46:7B:C1:BF:75
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rx7UBxBelm7N90usabp-RnvBv3U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:e0:ce:a7:b9:3c:e5:cb:70:e2:63:4f:fd:f5:21:90:da:
         d0:c8:6e:fe:e2:a4:cf:f3:05:69:fa:1d:4b:d4:23:0c:ae:3f:
         5e:b4:4d:f4:bc:d5:56:d1:c5:5b:49:a1:ea:8f:77:0a:16:3a:
         b3:f6:0d:f8:66:91:53:98:5f:cb:6c:52:f9:e1:c8:12:7a:c7:
         8d:99:fb:4d:67:8b:e8:49:9e:97:59:e8:aa:58:a9:34:47:88:
         80:f6:e3:17:cf:db:7e:a0:bb:3f:21:f2:52:60:ac:e5:a7:2e:
         92:66:f9:8e:5b:82:d3:6f:dc:d3:19:5a:69:db:15:3d:8e:06:
         d5:05:5f:d1:f6:f7:4e:72:03:90:e0:61:d4:c3:9b:0a:8d:76:
         0b:6e:ad:84:83:68:66:21:e6:7e:06:4f:59:68:b0:0a:d7:85:
         cc:c3:94:d5:ac:d8:96:65:59:05:c5:8b:db:bc:e8:d3:da:1b:
         db:7e:a8:4d:ba:20:9a:f3:74:1f:51:ca:5d:48:f0:37:06:5d:
         b9:0a:1f:39:1e:8f:a7:34:9f:5d:7a:87:28:e4:74:0f:ff:76:
         8a:d0:15:32:92:73:d9:dd:db:5b:c1:8c:f6:6b:48:e7:03:ed:
         8d:b3:6b:e4:ec:6f:e6:50:26:d1:d8:1e:bd:a8:56:3a:bf:00:
         82:12:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org