Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dzcHEClxl-_90PzDHvSx6Sxecxo.roa
File:                     dzcHEClxl-_90PzDHvSx6Sxecxo.roa (raw, json)
Hash identifier:          2PQfo2fAs/diu7c+PnxMgyfxX8ZMaeuwkpzfZIYvaaI=
Subject key identifier:   77:37:07:10:29:71:97:EF:FD:D0:FC:C3:1E:F4:B1:E9:2C:5E:73:1A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dzcHEClxl-_90PzDHvSx6Sxecxo.roa
Signing time:             Thu 15 Sep 2022 02:46:23 +0000
ROA not before:           Thu 15 Sep 2022 02:46:23 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:23 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=77370710297197EFFDD0FCC31EF4B1E92C5E731A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:39:ab:6d:68:80:7c:1d:ca:52:18:cb:c9:22:
                    d7:fc:11:1f:af:9d:d1:d9:d5:41:92:27:1a:7b:d3:
                    ae:1d:1a:f9:58:6d:41:7b:41:0c:72:97:09:ea:d0:
                    1e:99:d5:50:16:25:69:d6:c6:c3:b3:50:4d:24:8f:
                    8f:8a:1f:ab:40:6e:d0:5a:bf:e8:14:95:12:f6:8b:
                    53:34:8c:cd:cc:fa:36:3f:f5:3a:fb:21:94:6a:28:
                    45:70:72:8e:53:00:5a:5e:19:4c:ea:a5:66:c9:74:
                    72:55:8b:bc:92:f0:97:7d:6c:84:6e:02:f6:83:dd:
                    24:08:ad:a1:41:18:c0:fb:1a:b4:ec:02:45:6b:da:
                    71:04:65:09:b3:1c:c2:58:7e:39:f5:c1:b2:ae:15:
                    a4:cb:36:7b:15:4f:d3:78:fd:15:6f:4b:d8:eb:50:
                    c2:35:37:1c:64:17:36:e1:92:98:15:1a:ef:4e:4e:
                    1b:ec:a7:59:52:23:32:a6:08:4b:53:4a:55:88:02:
                    88:a5:94:fb:9a:ba:3e:2c:b3:0c:51:c3:31:39:b4:
                    16:ef:f7:7f:fe:da:a8:d3:93:f5:45:28:03:99:68:
                    99:c5:14:11:76:39:c1:11:3c:c2:70:9a:f8:23:b7:
                    fe:2d:3b:8d:a0:ea:8d:08:12:05:d1:b9:ea:9f:90:
                    2c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:07:10:29:71:97:EF:FD:D0:FC:C3:1E:F4:B1:E9:2C:5E:73:1A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dzcHEClxl-_90PzDHvSx6Sxecxo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:b3:3d:9b:92:a9:08:a2:30:e6:77:7f:6b:1f:e4:99:de:67:
         77:72:0e:a8:89:71:a2:34:dc:e9:62:c4:39:4f:9a:88:ae:a5:
         e9:91:bb:b0:9e:c5:a7:78:5f:a8:d5:82:ef:88:9e:cb:88:b0:
         7f:b9:e2:63:6c:61:87:f5:89:89:ca:bb:b7:69:0f:cf:3f:f2:
         dd:07:be:44:11:a5:35:8d:f0:f7:06:f7:dc:9b:83:64:fc:e8:
         5a:3e:1a:86:a1:40:b2:c0:88:b6:54:a6:6c:a8:1b:61:7a:4d:
         b1:c9:a4:96:50:14:e6:a2:06:6a:c2:01:88:67:24:e4:1a:7e:
         05:80:e6:a1:ad:75:1e:da:19:55:6b:a7:33:db:66:32:ed:64:
         2a:40:ce:2e:95:d9:79:4c:2e:71:3d:5b:95:f4:12:fc:53:55:
         51:d2:98:3d:7d:b3:63:29:75:41:0a:f4:53:12:1b:9f:a7:09:
         3a:ba:1b:d3:f2:97:e3:53:6b:f4:9d:7a:39:84:34:66:68:d7:
         2f:5a:d2:40:46:d3:78:f2:4f:ea:06:1a:8e:2f:a1:d5:a8:c3:
         40:e3:e2:f9:d8:bd:58:51:69:4e:79:b6:f2:bc:8f:7b:0e:bc:
         9c:c4:3a:ed:72:06:37:88:fc:e7:2b:11:a4:97:1a:e0:b7:56:
         7f:3c:b2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org