Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UlMSrIaAT4OTjo6n2-Xbpn-1L7Y.roa
File:                     UlMSrIaAT4OTjo6n2-Xbpn-1L7Y.roa (raw, json)
Hash identifier:          1G+wfuVyahum9A3A4JxS0cP/rOmbZkhg9p6KxWDlfZw=
Subject key identifier:   52:53:12:AC:86:80:4F:83:93:8E:8E:A7:DB:E5:DB:A6:7F:B5:2F:B6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       15E5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UlMSrIaAT4OTjo6n2-Xbpn-1L7Y.roa
Signing time:             Sun 07 Feb 2021 12:07:08 +0000
ROA not before:           Sun 07 Feb 2021 12:07:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5605 (0x15e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:07:08 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=525312AC86804F83938E8EA7DBE5DBA67FB52FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:44:04:aa:4e:6a:80:9b:5e:96:78:a3:c7:
                    2d:d5:85:47:fb:ef:a2:f0:10:c0:f3:b4:23:fb:d1:
                    44:3c:37:0d:08:65:d0:6a:43:ef:b9:e4:6d:e8:7d:
                    0f:fb:45:88:05:51:e8:fc:6e:6c:d3:d9:42:19:3c:
                    88:01:43:50:31:f1:4a:ba:43:44:0a:cc:d1:6e:eb:
                    f1:64:d0:6b:64:7e:b7:7a:ba:32:bf:44:99:fd:10:
                    a7:00:9a:a0:67:15:c7:e7:a5:2c:0f:1e:ab:26:16:
                    62:fd:d2:7c:05:47:b8:65:5e:ae:c2:fe:0b:20:22:
                    b2:7e:d4:e5:3e:b9:44:32:63:12:09:f2:75:8d:8f:
                    31:95:aa:a3:ab:1b:fe:c4:9c:e4:84:89:6e:1c:e1:
                    84:82:69:90:43:dc:95:8f:d8:51:6a:96:a1:29:34:
                    fa:84:71:d3:0d:1e:f0:55:92:72:a2:82:92:c1:17:
                    4a:51:f2:74:29:0f:d2:8a:f6:0c:b6:a0:de:87:b2:
                    bb:75:b3:eb:37:58:4d:c0:3a:95:8f:ef:81:de:c0:
                    0c:f5:c2:8e:fa:6a:f8:66:a0:ee:ad:30:79:30:e7:
                    2b:5d:7e:d1:39:88:4e:bf:43:15:83:32:05:f6:21:
                    8c:f3:0a:b1:b2:b7:05:85:45:f0:fa:eb:ae:6c:a3:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:53:12:AC:86:80:4F:83:93:8E:8E:A7:DB:E5:DB:A6:7F:B5:2F:B6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UlMSrIaAT4OTjo6n2-Xbpn-1L7Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:c5:1b:74:20:07:53:a6:73:f5:fe:ff:03:70:00:f7:e6:
         aa:1b:82:ad:f9:e5:d6:66:12:89:87:78:c8:42:4e:82:95:6b:
         93:40:8b:03:a2:fe:bd:ba:f2:d2:4b:3b:a9:9e:55:88:95:b3:
         db:c1:a5:75:76:fc:4a:c9:01:81:81:4b:c9:0e:72:45:4b:53:
         d2:8b:f4:3e:ad:89:8c:e5:97:86:1f:40:6f:9f:95:48:33:b3:
         d6:26:44:5c:54:15:5e:f7:66:87:22:c2:83:3c:f0:5c:4e:21:
         6f:06:2b:41:23:c3:3e:0b:bd:9d:65:ee:8f:6b:e2:50:70:d2:
         9c:f4:b3:2d:3d:d3:a7:ca:95:0f:b5:3c:68:1f:3a:d2:df:e4:
         fb:e9:b6:b4:ae:8f:39:cc:d4:97:0e:f9:79:8b:a0:b8:63:4b:
         b6:47:ca:3a:71:98:7c:d5:2b:67:83:08:f7:5e:16:dc:d4:ce:
         b6:66:12:b2:30:22:4c:dd:fb:ee:f8:c4:1e:22:0a:a2:0d:3a:
         30:a8:e7:65:79:87:eb:60:8d:e6:50:2b:1a:11:2a:7a:ca:24:
         2b:42:6d:cb:be:a0:b6:c2:22:c3:11:09:24:6f:1d:51:29:ef:
         70:2f:13:7c:16:42:84:7b:b8:6d:2b:45:45:af:36:9f:45:20:
         59:a6:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org