Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eCoW9xZw33zC5ahD6VWiOf0GYUU.roa
File:                     eCoW9xZw33zC5ahD6VWiOf0GYUU.roa (raw, json)
Hash identifier:          RFeopo/X7zLkQYPY0AEz13zIAwZNomnVE2gJbQbesEY=
Subject key identifier:   78:2A:16:F7:16:70:DF:7C:C2:E5:A8:43:E9:55:A2:39:FD:06:61:45
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2227
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eCoW9xZw33zC5ahD6VWiOf0GYUU.roa
Signing time:             Fri 25 Nov 2022 04:40:50 +0000
ROA not before:           Fri 25 Nov 2022 04:40:50 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.24.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8743 (0x2227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:50 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=782A16F71670DF7CC2E5A843E955A239FD066145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:86:12:df:12:bc:4c:6c:0c:2b:e7:e3:29:
                    1e:f7:ca:25:e6:c9:50:91:17:a5:0f:07:0e:92:f7:
                    01:0e:57:a1:0a:75:cc:08:32:86:56:74:df:24:34:
                    b1:c9:ee:b0:2c:32:c6:20:c7:ee:16:2d:6e:b4:ef:
                    0c:97:fb:b7:4c:ee:2b:72:02:87:73:85:8b:5c:65:
                    2e:6b:7a:a3:e0:69:ba:18:1b:cf:f9:76:72:26:6b:
                    0b:73:3c:9c:73:27:18:a4:4c:f3:3c:eb:25:2d:7e:
                    46:e4:33:6d:57:01:03:a2:cb:01:e1:8c:16:18:62:
                    bd:e3:54:3a:bd:59:34:28:a5:c1:58:63:f5:2b:e9:
                    8c:82:84:20:8b:58:cd:3e:73:9d:1d:07:50:c3:5c:
                    da:84:40:8f:18:a9:24:9f:8d:ff:06:c0:fb:bf:a2:
                    4a:e6:c3:e2:c8:5d:a3:73:9c:12:6d:8c:28:f8:88:
                    95:f2:d7:f4:fa:a0:af:8c:4b:93:fa:31:8b:ab:d6:
                    69:b2:a6:80:77:2c:3a:7e:78:2f:62:a1:30:d3:c6:
                    ca:08:88:7b:cc:90:84:31:2a:2b:f0:dd:ef:cc:26:
                    24:8b:1c:d5:61:8d:86:21:06:ba:2c:26:a0:53:4d:
                    36:66:cf:52:c2:4a:92:40:41:aa:a7:bf:33:40:e1:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2A:16:F7:16:70:DF:7C:C2:E5:A8:43:E9:55:A2:39:FD:06:61:45
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eCoW9xZw33zC5ahD6VWiOf0GYUU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:9d:32:9b:85:2c:31:5a:b0:39:c5:8f:07:18:a8:13:ad:08:
         ed:6f:fd:f2:cf:70:3c:4d:ac:31:a0:89:a7:cf:81:7a:ed:75:
         16:ac:a1:b3:48:76:49:f1:21:a6:5f:7d:47:19:b9:2e:09:53:
         4e:9b:5d:87:c5:58:bd:58:af:2b:e9:28:24:90:26:bc:67:bd:
         ee:92:4f:41:da:82:50:53:11:31:c9:6a:ca:88:0a:98:1d:af:
         8a:53:1a:7e:a4:72:1d:44:1f:7f:f6:d8:d1:5f:0b:64:04:38:
         46:77:32:f8:1c:3a:e9:21:e6:17:80:80:07:fe:64:19:53:90:
         55:c5:48:e6:da:05:42:dc:b3:95:50:19:d8:05:3f:76:dd:06:
         e1:5b:2c:3c:5d:be:a8:11:9c:be:08:4d:c1:5e:78:f1:e2:55:
         3c:b0:80:18:7b:78:b2:a9:f8:ff:8e:96:b4:74:e2:5e:8d:25:
         d5:f6:da:65:bf:be:b3:f4:17:cf:49:7f:03:3c:92:be:f1:bf:
         b4:11:f7:32:cb:2f:6e:1b:70:c2:21:cd:17:0a:20:6c:29:f0:
         aa:f6:f9:34:78:34:70:6f:74:69:57:07:5a:7e:e1:1f:fc:69:
         9d:d5:c2:0d:98:fa:b6:e4:e2:28:00:c9:2c:b3:5c:18:14:46:
         24:e9:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org