Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V9TMwcU1t25FrjNK_f9dcCvoyn4.roa
File:                     V9TMwcU1t25FrjNK_f9dcCvoyn4.roa (raw, json)
Hash identifier:          LaxMmLQTy+/mDMlXcun0ee9dpR+qMM65QoiaP7+j1E8=
Subject key identifier:   57:D4:CC:C1:C5:35:B7:6E:45:AE:33:4A:FD:FF:5D:70:2B:E8:CA:7E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C06
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V9TMwcU1t25FrjNK_f9dcCvoyn4.roa
Signing time:             Wed 29 Sep 2021 02:47:17 +0000
ROA not before:           Wed 29 Sep 2021 02:47:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7174 (0x1c06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:17 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=57D4CCC1C535B76E45AE334AFDFF5D702BE8CA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c5:c8:ee:32:bc:cf:a1:ed:87:d2:37:f7:9a:
                    41:8c:36:1e:da:22:9e:ce:93:de:03:ff:c3:96:10:
                    f9:37:b6:2b:6c:94:23:a7:1b:55:4f:cc:a9:2c:48:
                    50:a9:86:4a:d2:4b:4e:3b:14:9c:cf:5e:fb:fc:f7:
                    20:28:4b:b1:e2:74:30:7e:07:d5:65:7d:e0:aa:cc:
                    2f:36:b5:d2:33:db:76:4e:a3:82:3d:fe:78:f8:63:
                    11:cf:da:0b:b5:3a:48:d7:f3:1b:15:e5:a1:8a:34:
                    2c:d5:3b:2e:f0:94:ae:cd:84:b2:d5:46:06:cf:38:
                    5b:76:f4:d9:52:c5:cf:d7:a0:20:c8:8b:12:7b:72:
                    c9:a1:eb:ba:de:76:f9:f8:47:af:60:50:d5:43:d5:
                    7e:70:b2:30:6f:35:1d:51:50:09:91:8a:7d:27:81:
                    81:a2:44:4a:df:7a:6d:44:b8:0f:2f:34:10:81:45:
                    1e:a1:03:b7:f5:5c:fa:21:4c:26:cd:07:9c:2d:93:
                    12:d5:b4:3f:50:2f:4f:0b:48:9c:92:8c:45:6b:70:
                    bd:06:bf:e1:04:ef:7c:32:02:c5:e1:41:ed:9d:9f:
                    eb:18:c5:aa:3e:fd:ab:62:0a:f8:5f:e5:ee:88:fc:
                    0f:48:d0:b5:c4:b4:9b:35:1d:6d:96:f3:9e:b7:a9:
                    e5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:CC:C1:C5:35:B7:6E:45:AE:33:4A:FD:FF:5D:70:2B:E8:CA:7E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/V9TMwcU1t25FrjNK_f9dcCvoyn4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:6f:d1:9c:46:3d:4f:ea:5a:03:1f:05:ca:82:50:1b:eb:ad:
         78:9c:61:3a:e8:b4:6e:11:48:82:51:4d:a0:ce:48:68:0a:ba:
         23:7d:11:39:33:34:e3:93:ee:bc:c3:02:db:d2:d1:34:3e:fd:
         e8:94:e0:e5:58:2e:55:57:4d:7c:1e:4d:d0:64:3d:0b:bf:3d:
         84:6d:5c:4f:db:6b:e6:58:82:20:93:f6:9c:1d:fa:2e:22:e9:
         3e:ce:55:c7:61:3e:91:9f:f9:b9:3a:9d:5f:14:31:0d:3e:7e:
         37:fd:cb:83:76:0a:5e:24:2d:0d:e9:da:d2:23:9e:c5:08:4d:
         29:83:67:e4:85:e7:52:ac:d8:b5:14:de:72:f7:31:77:bc:c3:
         d8:d6:76:06:90:e0:ff:b2:7a:1b:fe:c3:3d:d0:9d:69:72:a1:
         dc:6d:d6:a4:c2:5e:b1:21:11:08:80:dd:63:af:14:55:c7:e4:
         e4:3f:1b:30:11:f0:98:49:1e:6c:ac:5f:97:41:27:ab:81:49:
         17:3d:1f:b2:37:74:df:c3:9b:e7:02:9c:7f:d3:08:53:0b:bc:
         5f:f5:43:ef:51:ff:58:93:e1:5f:94:1b:3b:9a:a4:7f:48:76:
         2e:f4:20:65:ee:3f:7f:68:3f:9a:34:fe:f6:7f:99:d3:43:31:
         98:b4:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org