Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YZwC6ZyKAMtvFF3UyFZR5tVb7rU.roa
File:                     YZwC6ZyKAMtvFF3UyFZR5tVb7rU.roa (raw, json)
Hash identifier:          ZGDZcDxByIqgjTAOA+gNpfGLpcPC0/VEodHL+s8TDpY=
Subject key identifier:   61:9C:02:E9:9C:8A:00:CB:6F:14:5D:D4:C8:56:51:E6:D5:5B:EE:B5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1EB7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YZwC6ZyKAMtvFF3UyFZR5tVb7rU.roa
Signing time:             Wed 04 May 2022 07:51:15 +0000
ROA not before:           Wed 04 May 2022 07:51:15 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        180.176.184.0/21 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7863 (0x1eb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: May  4 07:51:15 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=619C02E99C8A00CB6F145DD4C85651E6D55BEEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:fd:b8:fe:34:84:a0:9f:d6:c0:a7:2f:03:
                    2a:5c:67:5d:d3:99:eb:ec:b4:41:0c:1d:24:f4:00:
                    5a:c7:b6:69:be:51:59:03:5e:aa:ec:98:1c:6c:81:
                    f7:c8:d1:56:90:e3:35:0f:1e:f0:ee:5d:8e:ee:65:
                    2f:b5:b3:35:7c:11:3b:6f:9c:51:3c:55:64:62:85:
                    dd:fe:b4:36:3d:13:de:77:06:7a:c7:ee:a7:de:41:
                    0c:6d:d6:7e:71:46:83:ca:5b:32:cb:2c:e0:07:92:
                    70:4b:76:20:f7:1e:6e:6e:9d:aa:98:03:71:1d:a6:
                    71:2b:d8:9f:cc:30:e8:69:c4:45:0e:54:89:11:ca:
                    ac:98:d3:8e:dc:0d:52:08:3f:b1:77:a1:da:1e:4c:
                    df:76:d2:11:05:53:a5:17:6a:d4:86:9f:2b:e3:ee:
                    6c:c0:09:34:a9:f4:9d:cd:95:eb:c9:e5:76:80:8c:
                    3f:ee:69:52:90:64:07:1c:53:8b:e0:db:3a:a1:87:
                    71:5c:02:f4:d9:90:d3:19:64:01:74:24:10:a8:0e:
                    ad:17:8b:2e:fd:9c:2f:2a:ff:b1:78:25:d3:02:f1:
                    78:4f:ec:20:a8:18:d5:a8:78:17:f5:00:19:c5:3c:
                    da:ca:b3:91:f8:26:0d:f3:c2:73:f8:c1:a8:94:2a:
                    2c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9C:02:E9:9C:8A:00:CB:6F:14:5D:D4:C8:56:51:E6:D5:5B:EE:B5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YZwC6ZyKAMtvFF3UyFZR5tVb7rU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:32:eb:09:da:71:ea:73:52:59:73:66:16:6a:6a:05:c7:
         ba:d6:7d:f7:25:4f:d4:71:25:a4:9c:82:88:50:70:8b:2c:09:
         bd:23:36:1f:b9:98:34:e5:2e:4f:f0:ca:7f:4f:48:78:1a:58:
         b0:e0:cb:9f:db:3a:64:17:5a:9c:8d:f9:90:dc:71:7f:5f:57:
         52:70:9f:4f:b6:03:7b:eb:fa:de:69:2a:d0:64:f1:0e:76:0b:
         ad:06:c5:a7:f2:6f:bf:3c:8a:95:5c:5f:ba:9b:e4:da:8e:51:
         a1:72:be:f4:02:a7:ad:a1:7b:28:d2:63:f4:08:65:f1:2c:67:
         81:33:fe:9f:4f:af:df:06:3a:71:6c:d6:1b:9c:0d:3c:38:b1:
         6f:4e:b1:b9:9b:f3:24:9e:d2:41:c7:c0:da:86:7d:78:8f:ea:
         97:bd:38:9f:b4:02:66:a5:cd:fe:5f:26:44:c1:70:b1:0e:66:
         30:4e:69:d0:83:c8:22:da:36:7a:fb:ec:fc:51:de:f8:b6:73:
         d5:c6:7a:2f:c4:e4:16:ca:5e:63:8a:3f:c8:93:28:4a:1f:ce:
         bb:48:1f:b9:39:05:a3:e6:02:94:be:8d:5b:c4:f0:cc:b2:6b:
         ee:8a:60:93:eb:30:98:05:f8:9b:7a:69:82:ea:bd:9f:73:d2:
         31:5f:9c:ea
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA1MDQw
NzUxMTVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDYxOUMwMkU5OUM4QTAw
Q0I2RjE0NURENEM4NTY1MUU2RDU1QkVFQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmvf24/jSEoJ/WwKcvAypcZ13TmevstEEMHST0AFrHtmm+UVkD
XqrsmBxsgffI0VaQ4zUPHvDuXY7uZS+1szV8ETtvnFE8VWRihd3+tDY9E953BnrH
7qfeQQxt1n5xRoPKWzLLLOAHknBLdiD3Hm5unaqYA3EdpnEr2J/MMOhpxEUOVIkR
yqyY047cDVIIP7F3odoeTN920hEFU6UXatSGnyvj7mzACTSp9J3NlevJ5XaAjD/u
aVKQZAccU4vg2zqhh3FcAvTZkNMZZAF0JBCoDq0Xiy79nC8q/7F4JdMC8XhP7CCo
GNWoeBf1ABnFPNrKs5H4Jg3zwnP4waiUKixzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYZwC6ZyKAMtvFF3UyFZR5tVb7rUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lad0M2WnlLQU10dkZGM1V5
RlpSNXRWYjdyVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sLgwDQYJKoZIhvcNAQELBQADggEBAFM7MusJ2nHqc1JZc2YWamoFx7rWffclT9Rx
JaScgohQcIssCb0jNh+5mDTlLk/wyn9PSHgaWLDgy5/bOmQXWpyN+ZDccX9fV1Jw
n0+2A3vr+t5pKtBk8Q52C60Gxafyb788ipVcX7qb5NqOUaFyvvQCp62heyjSY/QI
ZfEsZ4Ez/p9Pr98GOnFs1hucDTw4sW9Osbmb8ySe0kHHwNqGfXiP6pe9OJ+0Amal
zf5fJkTBcLEOZjBOadCDyCLaNnr77PxR3vi2c9XGei/E5BbKXmOKP8iTKEofzrtI
H7k5BaPmApS+jVvE8Myya+6KYJPrMJgF+Jt6aYLqvZ9z0jFfnOo=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:34 2023 by rpki-client on console-fra.rpki-client.org