Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bTUVKbxkh_PDIuMaVK80iHUCOK4.roa
File:                     bTUVKbxkh_PDIuMaVK80iHUCOK4.roa (raw, json)
Hash identifier:          eIUdfGaCSq3bjHYnEo4wCVV1k9kfWblocpLKgmsxxug=
Subject key identifier:   6D:35:15:29:BC:64:87:F3:C3:22:E3:1A:54:AF:34:88:75:02:38:AE
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bTUVKbxkh_PDIuMaVK80iHUCOK4.roa
Signing time:             Thu 15 Sep 2022 02:52:24 +0000
ROA not before:           Thu 15 Sep 2022 02:52:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.48.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6D351529BC6487F3C322E31A54AF3488750238AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:79:c2:ae:8f:f0:8c:89:b5:f6:8b:f3:cb:
                    82:80:c1:4d:d6:3a:c2:95:24:f5:6d:6e:0b:e8:f3:
                    af:e8:4d:b8:f2:cc:31:8e:1b:bd:bb:2f:2f:c0:4b:
                    94:5a:1d:1d:95:d3:a1:15:69:87:ad:e7:af:4e:01:
                    52:3c:f9:2a:5a:87:6d:65:9c:8b:e7:50:4d:66:ed:
                    1b:5c:82:fe:5d:42:5e:35:68:e9:b6:69:21:6c:ff:
                    80:d2:8d:fe:06:d4:d0:91:d3:cf:fc:0f:e4:0b:51:
                    32:32:f4:9b:17:d8:c7:e4:86:cd:2a:6e:43:1a:9f:
                    f1:63:ae:df:5a:87:86:02:32:dc:9c:35:0c:42:6c:
                    5b:54:98:48:52:63:e1:10:24:9f:ae:b5:d2:22:79:
                    e1:43:cd:03:d2:ee:0b:3c:78:65:6c:8f:68:f6:20:
                    23:1a:40:b8:7f:20:ef:29:b4:0e:3a:89:8b:75:f0:
                    00:33:52:a5:36:fb:30:b5:41:96:ca:0f:4f:90:99:
                    67:8e:d3:c2:0f:9e:f3:44:db:7d:ec:31:f7:35:fa:
                    6a:72:7c:69:2c:8e:51:01:62:24:de:7d:fe:93:f7:
                    62:53:de:5a:52:f2:3d:db:77:b5:21:a9:11:d1:8f:
                    ff:f7:84:60:2b:26:44:50:99:cd:cd:0c:c6:c1:68:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:35:15:29:BC:64:87:F3:C3:22:E3:1A:54:AF:34:88:75:02:38:AE
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bTUVKbxkh_PDIuMaVK80iHUCOK4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:4a:e7:c8:49:99:41:8b:ae:9d:80:c1:df:fc:6b:66:7f:0e:
         62:d4:34:75:d0:90:4e:78:10:2a:ed:e3:3a:c2:08:26:f1:cf:
         bd:58:06:1a:00:7f:b5:a2:76:2a:ed:43:f0:86:18:58:77:10:
         c6:31:f6:f4:2e:af:1a:1c:27:cc:6e:62:ce:00:79:73:0d:5a:
         5b:25:ee:d6:c3:1f:9b:41:9d:f4:bb:37:2c:3e:0d:d4:1a:6c:
         6e:e1:d4:92:b6:ae:f4:ec:3f:fe:99:d7:28:9a:66:e5:08:c0:
         25:fc:7c:13:2a:e3:4c:05:70:50:50:4c:1d:ae:18:11:48:94:
         4a:f9:83:ee:14:5e:21:05:4c:ed:dd:a2:e1:97:05:59:89:ae:
         4b:90:1a:ac:cb:cb:c8:49:db:56:64:07:d6:6a:e2:48:20:4d:
         f2:06:55:21:9b:e7:18:21:10:98:c9:0b:91:f6:57:f9:75:2b:
         da:c6:ac:1f:f9:b6:5c:40:2a:dd:63:a1:ca:b3:04:9b:bd:bf:
         d5:93:76:b2:f4:a6:78:23:6a:32:d3:f1:fe:fc:3a:63:d4:d9:
         15:58:98:35:c2:a4:93:a7:b2:a5:06:45:b4:b1:9e:90:36:ec:
         07:f7:8e:ab:52:33:2a:ec:3d:c0:bb:f1:50:3a:55:ef:a4:99:
         8c:ad:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org