Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UrVw_edERi4gKCScvUWUW5fMlDY.roa
File:                     UrVw_edERi4gKCScvUWUW5fMlDY.roa (raw, json)
Hash identifier:          7eLY/0mJTkyaB2kS5jy0YQgj+I6TC8bFXjaU4iwTkdw=
Subject key identifier:   52:B5:70:FD:E7:44:46:2E:20:28:24:9C:BD:45:94:5B:97:CC:94:36
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       21E5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UrVw_edERi4gKCScvUWUW5fMlDY.roa
Signing time:             Fri 25 Nov 2022 04:40:31 +0000
ROA not before:           Fri 25 Nov 2022 04:40:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8677 (0x21e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=52B570FDE744462E2028249CBD45945B97CC9436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:33:b6:5d:8a:15:db:c1:48:52:ab:b8:e5:
                    36:80:89:b5:11:9f:8b:c5:0f:0a:47:bd:31:2a:68:
                    73:c4:e1:e1:82:88:04:91:ee:64:b1:b6:80:18:ee:
                    6d:c9:12:04:f3:ca:91:61:6f:b6:03:4b:d0:57:0f:
                    71:54:dd:32:ad:9d:db:f2:d4:52:4c:3c:e2:7f:42:
                    06:5c:7a:7d:54:70:4a:6f:4f:d3:68:5e:83:1f:2b:
                    6a:3a:66:2a:d8:0a:e0:03:97:46:83:f1:6b:5b:dd:
                    02:92:b9:40:6a:b9:91:9b:fb:74:0b:f4:49:57:df:
                    a8:4f:0f:8d:5d:79:a8:ac:af:d1:a0:94:d3:92:2a:
                    7c:e2:39:f9:e5:12:04:98:fd:73:93:2f:1a:7e:e7:
                    33:b0:c0:8a:3b:af:08:bf:0e:61:4c:0a:ea:3f:38:
                    3b:4d:d9:2d:5f:a2:4f:07:c3:c1:b2:dd:94:34:f2:
                    f6:b8:32:ab:2e:34:3f:c9:1f:e5:30:9b:43:8c:7a:
                    3a:72:d0:b4:bf:5d:7d:79:86:91:41:72:ff:9b:66:
                    2e:a7:de:dd:df:ca:04:91:ed:20:7a:2e:ff:2c:59:
                    2a:66:15:4a:95:f3:d9:d6:7a:0e:0f:90:27:22:a3:
                    0a:2c:26:47:00:d4:81:b4:33:82:2e:9a:a2:73:48:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B5:70:FD:E7:44:46:2E:20:28:24:9C:BD:45:94:5B:97:CC:94:36
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UrVw_edERi4gKCScvUWUW5fMlDY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:bd:90:19:9d:4c:51:fc:12:d8:57:63:42:a1:0e:4e:d3:ea:
         c0:67:e3:6c:b8:93:2e:04:98:ab:12:f1:0e:4b:27:9c:2f:0b:
         3b:8a:16:d8:a8:67:67:f9:3b:f9:e2:65:08:44:72:67:d9:b6:
         65:87:80:3b:84:b0:51:8c:91:50:39:c0:e5:66:ad:59:3f:de:
         5d:2e:52:96:08:3f:f5:a3:55:63:b9:e0:44:a0:9c:f0:4b:3e:
         d6:e4:ec:1b:86:2a:5f:c5:ab:c9:79:51:c5:84:a0:ed:8d:63:
         fd:b2:17:1b:50:8e:e3:ce:b4:4d:94:fa:9e:0a:a1:f0:16:04:
         f8:66:b0:34:65:e0:ee:eb:68:0c:81:32:59:27:79:0d:be:51:
         8f:40:c5:9f:46:2f:60:5b:b8:c5:86:16:65:77:71:60:03:7b:
         2c:47:a9:da:6f:0e:cc:65:52:9b:cf:cc:1d:fc:ed:15:51:ad:
         7c:1c:ce:ed:3c:6a:55:09:a6:c8:a6:91:0b:26:7a:07:2d:86:
         0a:fd:66:1b:4a:a1:25:98:c4:22:31:8c:d2:75:0e:eb:73:8b:
         e2:4c:bd:96:47:fc:ca:d3:33:96:44:68:65:94:bd:c6:6e:a9:
         d7:d6:70:0e:88:f0:9f:e2:ca:fb:95:d6:cd:d0:ac:39:0f:f2:
         f8:47:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org