Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eqhVgaR3jZXDnb16ZkgT41lnYhg.roa
File:                     eqhVgaR3jZXDnb16ZkgT41lnYhg.roa (raw, json)
Hash identifier:          N9SLSrZSgVgCD+8eqvu6qsqqccSIuN6AQT5X4gSznJo=
Subject key identifier:   7A:A8:55:81:A4:77:8D:95:C3:9D:BD:7A:66:48:13:E3:59:67:62:18
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       162B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eqhVgaR3jZXDnb16ZkgT41lnYhg.roa
Signing time:             Sun 07 Feb 2021 12:08:45 +0000
ROA not before:           Sun 07 Feb 2021 12:08:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.20.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5675 (0x162b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:08:45 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7AA85581A4778D95C39DBD7A664813E359676218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:85:a9:fa:2b:fc:47:6b:d4:ee:08:4b:94:
                    d1:2f:20:af:e8:be:f5:c2:aa:82:4b:b1:f1:f1:d1:
                    e6:17:fe:75:b6:b6:c4:c0:77:92:bf:40:e2:5f:1d:
                    16:2c:c9:d8:6b:3e:2f:56:cf:b6:03:c3:41:cc:01:
                    09:c6:89:4a:69:9d:ef:eb:9f:79:d3:a1:33:54:07:
                    42:31:48:ee:12:7e:32:9d:12:09:49:9f:11:74:0e:
                    be:cc:98:d9:08:ae:11:28:74:71:09:06:f4:6e:90:
                    7f:ee:1b:7e:3a:59:d7:25:23:84:03:e1:5e:96:f7:
                    e0:87:de:0c:6e:ed:57:d1:a1:81:b7:90:0d:fc:07:
                    d5:e3:3e:15:11:cf:e5:dd:b6:2c:2b:e3:20:1a:5f:
                    70:9b:04:b9:b0:2d:de:15:e5:c9:3d:9d:2e:85:d7:
                    99:11:79:0e:a2:2e:7c:af:ed:c7:23:ce:c0:4d:a1:
                    a2:6a:65:90:26:20:66:22:cb:ff:39:ec:78:30:5d:
                    ed:ba:d7:92:64:b2:99:38:b0:12:d5:79:2f:20:8d:
                    5b:38:11:ca:80:7c:e7:72:dd:65:18:3c:f6:4f:5c:
                    40:f8:30:a5:57:0b:d9:8a:8b:70:9a:1d:14:83:0a:
                    6c:f1:89:f8:d5:7a:d5:50:8c:e5:20:42:ed:ad:ed:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A8:55:81:A4:77:8D:95:C3:9D:BD:7A:66:48:13:E3:59:67:62:18
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eqhVgaR3jZXDnb16ZkgT41lnYhg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:8e:b5:df:1a:21:e3:18:ae:04:a0:21:19:a2:d7:8e:86:28:
         a7:be:8f:44:2f:fa:cf:52:c6:3c:0a:5c:98:39:d4:54:06:9d:
         01:36:16:34:41:10:45:47:2c:3a:21:22:bb:ad:df:26:5c:fc:
         1d:9f:48:a6:91:23:5f:48:92:1f:1b:c2:5d:a2:c5:95:f2:cd:
         ee:be:bb:a1:88:a8:a6:eb:54:69:43:6f:ff:91:cc:d1:be:11:
         95:ee:43:e3:43:86:c2:6f:1f:01:a3:ee:9b:b1:c3:1b:9d:50:
         ad:48:98:53:95:17:84:1c:f8:45:e2:03:ff:5d:8c:27:e8:80:
         d2:d0:f1:8e:49:81:63:fd:cd:18:dd:94:03:e1:06:92:26:7b:
         fb:56:fd:f8:1d:0c:70:51:5e:09:a0:c1:59:ea:9b:36:19:da:
         ed:34:ea:7d:b8:2c:4c:62:9e:86:dd:f7:12:70:71:c3:ec:25:
         60:83:32:e6:2f:24:27:e0:cf:2a:53:03:93:37:d0:46:15:9e:
         49:57:95:49:02:92:b6:e2:92:83:13:9e:fb:cd:43:05:3d:aa:
         51:52:a1:30:cb:0a:47:8e:0a:c6:0b:05:df:4d:42:ff:35:dd:
         df:67:c6:2d:cb:84:1b:0a:9d:0a:c0:ba:c5:e3:85:5d:57:a0:
         4d:88:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org