Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fjR5KlVkFWbDibQ6fuI6xU36VRg.roa
File:                     fjR5KlVkFWbDibQ6fuI6xU36VRg.roa (raw, json)
Hash identifier:          uIOenQmdItIC9TXNkcgSOTmrs+vbV90bQDGEpnxlmEc=
Subject key identifier:   7E:34:79:2A:55:64:15:66:C3:89:B4:3A:7E:E2:3A:C5:4D:FA:55:18
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       15D9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fjR5KlVkFWbDibQ6fuI6xU36VRg.roa
Signing time:             Sun 07 Feb 2021 12:06:52 +0000
ROA not before:           Sun 07 Feb 2021 12:06:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5593 (0x15d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:06:52 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7E34792A55641566C389B43A7EE23AC54DFA5518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:fe:64:9e:ef:18:6c:5d:36:ad:16:f1:d2:
                    d7:e1:1f:ad:ee:66:78:46:8e:0b:47:49:35:12:c2:
                    41:92:3e:b0:a9:b3:2c:38:6e:f4:f6:58:80:4b:75:
                    f8:ad:f0:e5:03:70:b9:a5:3d:ed:0c:9d:4d:ba:46:
                    fb:13:83:8c:a3:37:46:3c:8d:59:4d:60:c9:fa:f5:
                    fd:2d:14:08:91:9d:a3:c9:0f:ef:06:0f:c2:68:71:
                    b7:8e:e5:21:50:a5:33:28:81:bb:57:06:d4:a4:3b:
                    56:90:fc:91:36:df:cb:30:54:d6:4f:05:5d:45:68:
                    0d:9c:5d:f0:6e:3b:6f:48:9e:ff:51:da:96:75:e2:
                    21:76:54:01:c6:76:19:7b:1b:e9:2c:52:6a:40:85:
                    cf:0a:63:9d:30:1a:81:4a:d3:67:2a:26:c0:f6:60:
                    4f:5f:a0:a0:ff:69:a6:33:3e:6d:0d:00:91:f9:82:
                    8d:2c:57:9f:76:d0:04:23:64:54:1d:7f:6e:c4:a8:
                    a2:c7:44:11:fa:5c:80:09:63:d6:cc:e3:b5:69:3b:
                    3b:72:71:ea:5d:87:0c:0b:48:03:d3:40:04:11:81:
                    62:81:24:7a:ff:b6:ef:68:e3:83:7d:a5:79:74:3b:
                    fe:8a:b4:b1:5e:49:9e:c9:d8:ff:20:60:2a:d7:fc:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:34:79:2A:55:64:15:66:C3:89:B4:3A:7E:E2:3A:C5:4D:FA:55:18
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fjR5KlVkFWbDibQ6fuI6xU36VRg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:91:5b:ad:dd:45:4b:8c:e9:c2:2a:2c:7d:12:fa:53:00:5d:
         26:8c:7b:26:08:2c:ef:01:3b:11:36:92:77:a6:a0:a2:5a:74:
         54:b9:f0:59:01:d2:64:b1:6e:30:1b:25:f4:e6:cc:4c:6d:89:
         cc:8c:f7:67:f6:e9:6f:86:53:0e:08:ea:58:68:ac:0a:5c:27:
         29:45:4f:fc:69:0e:80:c2:d4:d6:b5:93:50:eb:5b:05:83:68:
         22:71:34:55:f7:37:6b:68:59:26:a2:b0:84:c4:5a:8a:8e:e4:
         1e:2c:b1:74:55:17:c7:8b:92:97:13:f3:d4:46:43:31:2f:d8:
         7e:f5:bb:30:80:85:2a:8f:2d:a2:01:26:cc:b3:d9:80:a5:4a:
         0d:41:09:2e:a6:de:49:72:7d:e3:4e:66:a4:94:83:34:72:f2:
         1b:c9:eb:5c:dd:a7:f4:61:1f:6e:a4:71:81:1c:91:78:ea:bd:
         2b:cf:42:0d:0e:e4:fc:14:5c:72:bb:89:61:5f:c8:a1:dd:26:
         cc:44:ff:fc:f5:03:d6:01:c6:0e:16:69:3d:b4:d1:10:17:97:
         48:8f:03:8c:ce:bd:cd:b1:01:f1:fc:3b:71:c3:8e:df:e8:a8:
         65:e8:b5:c6:40:5c:7c:95:77:4c:74:9b:26:07:75:b5:c3:3a:
         5d:f5:58:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org