Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eDR2X2dxJdemUGtzYetZM3vgOh4.roa
File:                     eDR2X2dxJdemUGtzYetZM3vgOh4.roa (raw, json)
Hash identifier:          kGEZqvvwljLyvDhAqN6y5/CJFDqE0QA0vU8FdgLVpIU=
Subject key identifier:   78:34:76:5F:67:71:25:D7:A6:50:6B:73:61:EB:59:33:7B:E0:3A:1E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       218F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eDR2X2dxJdemUGtzYetZM3vgOh4.roa
Signing time:             Fri 25 Nov 2022 04:40:04 +0000
ROA not before:           Fri 25 Nov 2022 04:40:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.12.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8591 (0x218f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:40:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7834765F677125D7A6506B7361EB59337BE03A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:d1:8d:da:67:6b:3f:b9:65:0c:51:0e:29:
                    4c:f2:16:f6:12:51:4a:b2:98:11:7b:71:c6:fb:65:
                    d8:02:f0:0e:58:d9:2b:2f:e4:f0:74:37:14:fd:08:
                    f4:3b:89:f9:03:29:39:05:ad:2d:c1:67:1e:39:77:
                    93:b1:e4:2f:f4:05:21:ce:7a:ff:1e:63:f7:36:db:
                    25:15:77:ef:16:2f:67:49:c1:46:ce:ee:8f:44:f0:
                    47:fa:2b:f3:4f:4b:a2:e4:05:91:02:5c:69:fa:5e:
                    1a:0d:12:b8:d8:05:0b:ea:78:f3:c2:5f:7d:6f:85:
                    7b:c0:bb:7f:af:35:1e:27:86:3f:12:b9:e1:9f:b0:
                    4c:b3:3b:17:3d:b1:06:e9:d4:e2:06:15:2d:d9:4f:
                    61:cf:43:88:a3:28:75:9e:c0:55:11:d7:56:72:cf:
                    b2:b2:fa:28:8f:67:ad:e6:a6:b6:98:03:cc:30:39:
                    34:c2:7a:69:53:e0:ed:1a:9a:29:9b:2c:17:6a:20:
                    80:9a:5b:c3:a2:75:0f:19:b1:a1:db:8e:89:f9:dd:
                    47:9d:8f:8f:aa:e5:5f:0d:f3:7a:52:80:26:9d:58:
                    6d:3d:5d:6c:89:76:8a:87:a1:ff:b3:88:6b:0d:4b:
                    90:4d:26:e7:eb:bf:2d:2b:9a:4d:63:d6:90:16:a3:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:76:5F:67:71:25:D7:A6:50:6B:73:61:EB:59:33:7B:E0:3A:1E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eDR2X2dxJdemUGtzYetZM3vgOh4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:71:d4:61:44:53:de:51:eb:49:4c:7b:30:a2:7b:7a:0c:c5:
         48:5e:13:47:d3:0b:4f:4f:9a:17:b6:52:7b:aa:9c:8d:15:3c:
         5c:96:8d:1e:78:31:c2:e0:42:b3:f6:27:0d:ab:d5:3f:45:87:
         22:30:17:7e:e8:8b:ff:4a:92:53:ec:60:dc:1f:04:2a:5f:dd:
         d0:62:88:8e:fe:06:ee:23:55:64:55:0d:dc:64:01:bd:0f:db:
         c8:9e:00:e5:56:6c:5f:36:3f:7f:80:0b:82:40:48:17:1a:8b:
         f0:a9:dc:b5:5b:fa:93:df:0d:4a:a8:e6:4c:bb:ed:f2:be:5a:
         07:23:4c:73:7a:93:d2:6c:74:eb:07:c5:c8:13:c8:96:16:ed:
         66:19:79:6c:b6:b8:01:29:8d:f7:d9:5f:5a:aa:3b:40:59:b2:
         e5:0a:5e:9a:18:70:61:57:1e:7e:cf:82:51:fe:a3:05:67:1e:
         24:ee:97:ef:28:34:25:9f:71:5f:f6:d1:ae:68:f5:54:8b:1f:
         64:24:55:80:86:ef:ae:e9:db:06:36:b4:fc:92:7d:33:79:ac:
         22:89:b7:67:04:ee:8f:a5:5d:97:02:9b:87:25:91:74:2c:f2:
         2d:e0:fe:38:5a:6d:a4:f2:44:65:5d:e5:8f:e8:d6:8a:f2:c2:
         f4:b6:cf:f7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc4MzQ3NjVGNjc3MTI1
RDdBNjUwNkI3MzYxRUI1OTMzN0JFMDNBMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPsdGN2mdrP7llDFEOKUzyFvYSUUqymBF7ccb7ZdgC8A5Y2Ssv
5PB0NxT9CPQ7ifkDKTkFrS3BZx45d5Ox5C/0BSHOev8eY/c22yUVd+8WL2dJwUbO
7o9E8Ef6K/NPS6LkBZECXGn6XhoNErjYBQvqePPCX31vhXvAu3+vNR4nhj8SueGf
sEyzOxc9sQbp1OIGFS3ZT2HPQ4ijKHWewFUR11Zyz7Ky+iiPZ63mpraYA8wwOTTC
emlT4O0amimbLBdqIICaW8OidQ8ZsaHbjon53Uedj4+q5V8N83pSgCadWG09XWyJ
doqHof+ziGsNS5BNJufrvy0rmk1j1pAWo6yhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeDR2X2dxJdemUGtzYetZM3vgOh4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2VEUjJYMmR4SmRlbVVHdHpZ
ZXRaTTN2Z09oNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sQwwDQYJKoZIhvcNAQELBQADggEBAAhx1GFEU95R60lMezCie3oMxUheE0fTC09P
mhe2UnuqnI0VPFyWjR54McLgQrP2Jw2r1T9FhyIwF37oi/9KklPsYNwfBCpf3dBi
iI7+Bu4jVWRVDdxkAb0P28ieAOVWbF82P3+AC4JASBcai/Cp3LVb+pPfDUqo5ky7
7fK+WgcjTHN6k9JsdOsHxcgTyJYW7WYZeWy2uAEpjffZX1qqO0BZsuUKXpoYcGFX
Hn7PglH+owVnHiTul+8oNCWfcV/20a5o9VSLH2QkVYCG767p2wY2tPySfTN5rCKJ
t2cE7o+lXZcCm4clkXQs8i3g/jhabaTyRGVd5Y/o1orywvS2z/c=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:40 2025 by rpki-client