Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e-y48CHUeqHDZvgi4H0iPIP0KCE.roa
File:                     e-y48CHUeqHDZvgi4H0iPIP0KCE.roa (raw, json)
Hash identifier:          aQEanChZNwvjhUeYBl1BI5YctpKzJi29a9Y+URh0mIQ=
Subject key identifier:   7B:EC:B8:F0:21:D4:7A:A1:C3:66:F8:22:E0:7D:22:3C:83:F4:28:21
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       15E3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e-y48CHUeqHDZvgi4H0iPIP0KCE.roa
Signing time:             Sun 07 Feb 2021 12:07:05 +0000
ROA not before:           Sun 07 Feb 2021 12:07:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.224.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5603 (0x15e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:07:05 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7BECB8F021D47AA1C366F822E07D223C83F42821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:c4:24:f1:3c:81:32:42:b3:8e:1f:63:3b:
                    48:8d:9f:b7:f8:24:eb:1e:0e:23:8e:61:8f:74:05:
                    2d:a9:d8:de:9a:20:42:13:28:53:1c:81:8d:8c:a5:
                    a1:f1:ad:18:0a:a1:bd:21:2b:20:c0:a3:53:06:82:
                    11:4a:85:37:50:84:66:12:90:88:f8:10:4d:e9:30:
                    70:05:3e:2a:c4:86:17:c5:04:07:88:96:e1:49:2a:
                    3b:08:6a:74:cf:f9:b7:d8:72:75:e8:cc:59:22:e3:
                    3b:62:3d:a5:99:d8:91:41:fe:a8:c5:89:35:bb:08:
                    60:93:b6:76:f0:31:a9:a7:c0:5d:87:d8:fa:2e:1b:
                    28:0e:43:6f:df:ad:da:f4:16:ad:29:87:73:96:9d:
                    fe:d9:a8:a9:81:e1:1a:a8:e0:7b:46:94:de:cb:fd:
                    d9:38:88:44:65:5f:5a:7c:fa:80:cc:b3:0c:23:51:
                    d9:3c:c8:3c:1f:09:d7:14:dc:d0:c3:67:17:4b:a0:
                    be:69:03:14:f1:88:6f:69:d7:41:1c:78:2c:82:37:
                    9d:ba:b8:d9:9a:af:20:6e:a8:79:72:be:42:f6:81:
                    cd:de:0f:10:ac:8e:54:32:fb:bd:f2:09:5e:23:45:
                    e3:ff:4d:4b:e1:14:47:64:a0:33:ed:05:47:7c:e1:
                    1d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:B8:F0:21:D4:7A:A1:C3:66:F8:22:E0:7D:22:3C:83:F4:28:21
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e-y48CHUeqHDZvgi4H0iPIP0KCE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:51:d4:8f:62:76:67:d5:b1:b8:f2:f0:91:6c:68:88:0a:89:
         27:6b:68:bf:f0:6b:06:de:b2:2c:2d:aa:10:99:48:3a:04:ad:
         a4:c8:25:b6:a7:be:25:b2:c0:88:be:67:f9:46:85:b5:41:24:
         8d:03:e1:9a:4a:29:7b:85:c1:65:15:37:5a:d3:aa:4d:fd:ae:
         dc:05:8d:8a:3a:4f:f1:e8:45:d1:73:e8:97:b4:fc:db:4c:78:
         6d:eb:5b:11:51:0a:e9:d0:49:a3:3a:87:57:71:97:19:df:9a:
         0f:fd:cf:84:8d:2e:75:64:c9:4f:ff:30:ec:bd:cc:b2:95:52:
         d4:e3:e0:7e:31:40:6f:b5:6c:15:1b:d9:8c:30:ed:92:6f:0e:
         53:59:3f:c2:2c:ea:98:85:19:a4:7c:ae:32:9b:a5:7a:e0:22:
         1e:00:42:4c:9f:3d:b9:e6:28:1b:e7:42:e2:f7:30:23:39:7e:
         a0:6b:ae:eb:6b:4f:59:9c:2b:3f:ee:36:36:4d:94:b0:8e:4f:
         0a:d2:18:05:2c:d9:e9:39:7c:4a:a0:94:8d:91:4f:d2:59:61:
         f0:27:6a:dc:4f:44:2a:f6:0d:32:63:c7:05:9b:99:64:5f:bb:
         51:72:34:6b:74:20:16:d6:66:e4:88:ce:df:01:1e:6a:25:b1:
         63:7e:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:36 2023 by rpki-client on console-fra.rpki-client.org