Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UYqwEemcpUYJRgwfas855MNmpmQ.roa
File:                     UYqwEemcpUYJRgwfas855MNmpmQ.roa (raw, json)
Hash identifier:          fn9ySM3z7u5fvFabO1gj+QuU38dwhg8Fy4/oUyNvmQU=
Subject key identifier:   51:8A:B0:11:E9:9C:A5:46:09:46:0C:1F:6A:CF:39:E4:C3:66:A6:64
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C43
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UYqwEemcpUYJRgwfas855MNmpmQ.roa
Signing time:             Wed 29 Sep 2021 02:47:32 +0000
ROA not before:           Wed 29 Sep 2021 02:47:32 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.56.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7235 (0x1c43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:32 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=518AB011E99CA54609460C1F6ACF39E4C366A664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:59:38:f1:82:84:7f:52:bc:63:45:fa:37:
                    9a:ea:a0:74:d1:b1:9b:bd:bc:df:36:f4:a9:f5:1f:
                    bc:46:54:87:fb:52:62:5e:4f:dc:14:f0:21:1d:2d:
                    2c:05:2a:85:a8:ab:1b:df:a7:b2:2d:db:4c:de:02:
                    9c:73:72:dd:df:21:f7:7c:6b:2b:e8:ec:0c:2c:3f:
                    14:97:98:e3:7f:3b:93:f5:38:e1:5b:7d:e2:12:2b:
                    48:c2:62:f7:36:4f:2f:a9:81:13:e5:bb:cf:31:fa:
                    7f:41:b9:04:ae:dd:79:eb:da:0d:72:b3:87:45:9a:
                    83:02:a8:80:9d:d5:53:4f:ab:e4:84:55:b2:b2:e2:
                    ea:d6:0c:55:a2:cf:5a:67:22:41:e6:f9:3e:f6:1f:
                    ad:e6:87:79:ac:4f:cd:5b:f5:12:bb:08:53:42:4a:
                    1e:4d:bf:70:8c:d7:6c:75:7a:cb:3d:0f:44:c3:96:
                    78:db:08:ca:e1:4d:d7:37:05:c4:13:f5:18:ae:bb:
                    db:4b:f6:a7:c3:5e:73:a6:69:a3:01:8c:3c:0a:72:
                    39:30:99:ca:57:e4:8f:b7:d0:69:db:36:0e:c8:c2:
                    f3:cb:2e:34:16:cc:a2:77:0d:eb:8f:27:3d:51:a3:
                    3f:1a:ac:54:c0:73:cf:21:25:4a:7a:89:21:58:cc:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8A:B0:11:E9:9C:A5:46:09:46:0C:1F:6A:CF:39:E4:C3:66:A6:64
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UYqwEemcpUYJRgwfas855MNmpmQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:28:11:9c:88:f5:c2:96:e2:3c:df:38:4d:cc:4d:85:18:91:
         61:2b:c7:fe:8e:46:fb:ef:7e:13:3f:ee:0b:83:52:6f:2e:22:
         37:5e:47:f2:96:9c:71:c0:db:06:61:a8:50:04:38:ba:72:eb:
         0a:ab:87:6f:af:62:77:94:89:92:75:20:60:a0:03:12:17:08:
         cb:25:13:04:d5:6c:f7:78:33:e6:c4:c3:a1:2d:7a:7e:4d:06:
         e8:e2:dc:4c:0c:7b:aa:83:f7:53:28:56:b3:a3:43:a3:a8:ef:
         dd:a6:30:6a:5e:f1:79:39:30:7e:2b:22:04:ec:b9:3b:28:54:
         d7:e2:c0:4c:be:02:7b:c8:73:f4:c4:38:1e:76:a3:47:98:7b:
         de:95:84:50:2d:75:1c:ee:70:5b:da:76:ef:fb:0c:7f:17:66:
         92:e1:47:ae:73:66:33:17:0c:07:d7:9d:7e:58:b1:6a:d1:f2:
         0b:3d:8a:66:4c:2f:6f:c9:dc:07:87:4f:73:ab:82:68:a8:7f:
         2b:03:e7:19:10:62:d2:84:4b:88:32:7d:d4:53:88:3e:c0:65:
         ef:ce:5f:7a:1a:16:43:7d:e5:d4:50:1c:a0:e1:64:32:62:9a:
         7a:f1:46:3c:57:6b:af:04:e2:4b:7b:9f:26:bd:5d:cd:5b:d4:
         d2:c9:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org