Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YWWHU6pv2RymtWmz9oGGKkOD2kc.roa
File:                     YWWHU6pv2RymtWmz9oGGKkOD2kc.roa (raw, json)
Hash identifier:          iVabfFfKymRg04uMxiYJMXFw1VUSeSKb+k5ptooauZ0=
Subject key identifier:   61:65:87:53:AA:6F:D9:1C:A6:B5:69:B3:F6:81:86:2A:43:83:DA:47
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1CEA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YWWHU6pv2RymtWmz9oGGKkOD2kc.roa
Signing time:             Wed 29 Sep 2021 02:48:23 +0000
ROA not before:           Wed 29 Sep 2021 02:48:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.177.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7402 (0x1cea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=61658753AA6FD91CA6B569B3F681862A4383DA47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:6d:a1:9f:3e:27:18:df:4e:e5:f6:10:45:
                    cb:78:d5:47:19:3f:11:4f:75:a6:de:26:ae:7a:73:
                    ea:56:fe:cd:69:dc:99:dd:e7:0b:25:66:40:ed:99:
                    f3:17:fa:36:89:a4:65:02:d0:50:f8:7f:50:14:77:
                    65:66:c9:bf:c8:c7:e5:08:e7:d4:a2:21:ee:7d:27:
                    18:01:85:e9:d5:9c:32:5e:23:af:6e:b9:e0:dd:84:
                    19:10:05:f7:be:b7:59:0c:5a:0b:89:4a:28:49:03:
                    6e:6c:c1:59:7d:57:a0:e3:88:ad:02:8e:ef:96:5d:
                    29:23:0f:ac:37:ea:0b:42:0e:4a:ad:8b:b5:4f:21:
                    a4:a6:75:42:97:ff:0b:37:d8:01:f9:97:16:f7:cf:
                    17:59:e5:2f:71:83:12:9c:51:75:8a:31:1a:d1:af:
                    2e:05:53:d8:f5:32:5c:f8:e7:60:e6:9b:85:29:85:
                    ea:72:d9:67:fb:91:ca:e9:0e:a5:0c:41:cd:02:d0:
                    1f:72:23:82:fa:0b:88:2f:8c:c2:11:33:52:8b:1d:
                    88:b0:0e:4e:0d:34:b3:26:8e:fc:de:8c:98:00:9a:
                    04:eb:13:9f:a3:82:8c:cc:30:ae:e3:41:26:b5:93:
                    c7:7d:25:8b:a0:61:9b:72:cb:53:65:18:b4:a9:b1:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:87:53:AA:6F:D9:1C:A6:B5:69:B3:F6:81:86:2A:43:83:DA:47
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YWWHU6pv2RymtWmz9oGGKkOD2kc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:ed:d6:4f:ee:61:84:e4:54:2a:5e:b1:f4:cd:fb:ef:be:
         d8:b2:e1:e8:64:98:85:56:40:6e:16:4e:90:05:e6:55:02:06:
         f0:c0:6c:8a:93:94:a2:04:34:33:13:b3:75:7a:69:cb:88:17:
         c3:a6:47:2e:03:74:00:5a:45:87:d1:ef:e7:ff:63:0a:f9:80:
         28:bb:05:36:fb:ba:49:6d:df:78:c1:2c:f0:a5:bc:f6:d0:82:
         16:83:2b:cd:4c:a8:12:f8:d2:9b:e5:f8:09:99:c6:22:87:c2:
         37:39:79:e7:f2:db:b2:ea:e2:18:5e:13:04:05:16:50:7a:4f:
         8f:37:4e:22:03:63:e9:71:a0:3b:d8:1d:30:d0:46:c8:e3:0d:
         fa:73:96:f8:ee:74:54:2c:64:3f:51:40:30:86:61:5c:94:40:
         36:c4:f9:47:05:f3:89:9c:f8:62:ab:54:5d:54:5f:78:04:7d:
         d7:81:e5:64:e9:e4:57:96:4a:5d:70:44:f6:05:99:56:80:b2:
         22:1d:f1:54:be:70:1f:64:a6:f2:42:cc:76:da:95:02:50:58:
         81:88:07:62:a3:72:74:cf:69:0d:44:db:57:44:6f:f7:6d:5a:
         84:04:3e:bc:03:d3:6a:99:5c:1b:8b:e8:86:ad:32:34:0c:c2:
         f3:e7:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org