Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XSy-0e6GvAKk28bhLRg0F0tQswg.roa
File:                     XSy-0e6GvAKk28bhLRg0F0tQswg.roa (raw, json)
Hash identifier:          UgN4UDz7GrGVr1ymkhXKZW6xVd37WQwLbpESvoKDQ3Q=
Subject key identifier:   5D:2C:BE:D1:EE:86:BC:02:A4:DB:C6:E1:2D:18:34:17:4B:50:B3:08
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C40
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XSy-0e6GvAKk28bhLRg0F0tQswg.roa
Signing time:             Wed 29 Sep 2021 02:47:31 +0000
ROA not before:           Wed 29 Sep 2021 02:47:31 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7232 (0x1c40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:31 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5D2CBED1EE86BC02A4DBC6E12D1834174B50B308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:2d:ca:ca:5c:28:73:3e:b4:49:75:40:e8:
                    8a:b4:20:f2:13:22:8f:c5:48:b7:60:80:5d:19:15:
                    c1:47:bd:b7:17:70:59:4a:1b:ae:d5:2b:15:7c:40:
                    01:18:c9:6a:98:14:eb:f0:61:77:b6:2f:b5:10:8e:
                    fe:9b:ef:38:a1:4f:4f:a6:3c:5f:7e:53:06:fa:ba:
                    97:05:29:17:bb:6e:df:aa:b3:61:56:fa:29:b4:fc:
                    48:cd:a6:d3:ca:62:d2:fb:84:c6:49:c4:23:14:fb:
                    a5:55:0c:2d:d0:87:0a:70:41:9c:8a:11:f0:26:b0:
                    ff:b7:ce:de:4b:1c:d5:86:60:8d:9d:18:93:6d:ac:
                    49:2c:6f:6c:8d:48:4c:81:09:b5:6f:34:da:e0:60:
                    95:c3:6a:fd:08:ca:d1:d5:5e:ca:31:11:b8:5a:64:
                    99:82:2b:f7:9e:31:de:ff:b6:70:0a:3d:f3:d5:01:
                    2a:bc:9b:76:df:c1:b0:c8:52:81:f6:0c:c6:c4:96:
                    ca:ae:93:a7:2d:e7:b5:7c:5c:9e:95:2b:fd:ac:bb:
                    37:89:60:54:bb:22:1f:f4:6e:48:bd:a8:c4:07:6c:
                    b1:c2:e5:6f:29:2d:6e:81:d2:d9:9d:93:fb:21:2b:
                    37:c0:07:e8:9d:1f:aa:16:7c:ca:8b:50:2d:be:28:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2C:BE:D1:EE:86:BC:02:A4:DB:C6:E1:2D:18:34:17:4B:50:B3:08
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XSy-0e6GvAKk28bhLRg0F0tQswg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:38:38:12:41:3f:2a:b6:21:7f:05:7d:31:6a:76:b4:bb:09:
         44:a8:f1:22:aa:3b:41:23:2b:64:ed:be:22:b7:e5:c4:7a:1f:
         4d:46:f1:c4:bf:fb:1b:50:8d:24:25:9a:f6:66:96:26:4f:67:
         fa:d2:10:08:c0:a1:3a:61:21:e5:91:8e:50:9f:43:5d:dc:84:
         43:b4:8c:b5:ce:18:10:cc:4f:9b:0d:a5:a9:f2:48:b4:27:c0:
         23:17:80:71:0c:2e:3d:dd:b5:1d:3e:9a:61:d8:55:09:82:16:
         c9:0c:34:3e:bf:5f:06:de:32:fe:4b:c6:8d:b3:6f:81:8b:88:
         32:c0:44:cf:aa:9e:05:a5:37:bf:bd:3a:49:c9:b3:3e:aa:40:
         06:85:fa:a7:a0:0c:0f:e9:87:4f:4c:b1:0c:71:af:61:c5:67:
         48:da:9d:b9:93:dc:50:7f:06:c5:37:df:a6:15:f2:c3:1d:ed:
         94:c1:3f:56:6b:ca:8e:be:79:c5:bc:b1:54:5b:e8:9f:f4:98:
         71:80:dc:e2:dc:53:eb:55:ad:20:9e:28:d8:2c:9f:32:c1:71:
         17:50:2b:36:11:b6:44:dd:b6:21:56:03:97:74:98:15:11:77:
         8f:5b:15:6f:58:e2:65:e5:b4:d3:ab:5e:c1:7f:c9:07:38:25:
         3d:81:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org