Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gCjH3FV2W2mYkSNXI5vwgEyypmU.roa
File:                     gCjH3FV2W2mYkSNXI5vwgEyypmU.roa (raw, json)
Hash identifier:          M0OJ0vNaur1y1ASEIYLPlAJXrkCdqjJUNJs8Z0n11G8=
Subject key identifier:   80:28:C7:DC:55:76:5B:69:98:91:23:57:23:9B:F0:80:4C:B2:A6:65
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       20B9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gCjH3FV2W2mYkSNXI5vwgEyypmU.roa
Signing time:             Fri 25 Nov 2022 04:39:02 +0000
ROA not before:           Fri 25 Nov 2022 04:39:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.47.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8377 (0x20b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8028C7DC55765B6998912357239BF0804CB2A665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:e7:7b:1d:e9:7a:aa:de:09:10:39:fd:b8:
                    6f:3e:ee:8a:9e:1c:0d:55:c8:e0:14:2d:25:68:d3:
                    3d:0e:99:e3:44:10:26:c4:33:90:44:cc:dd:60:73:
                    a8:d1:46:fc:40:ae:7f:d4:33:f9:34:ab:75:df:2c:
                    7e:2d:2a:3a:aa:fb:56:51:88:6a:0f:0e:d2:fc:b2:
                    64:8e:67:4b:94:04:66:d3:d4:4b:46:be:e9:76:83:
                    13:c3:bc:c8:43:05:dd:34:32:d9:75:25:59:ca:af:
                    a3:a9:e0:2e:85:0e:72:ce:f0:af:36:92:79:f0:5b:
                    2a:98:22:79:6c:60:63:11:79:5c:23:ef:59:45:67:
                    fa:e7:bd:df:57:23:ed:ef:aa:a4:4e:8c:3d:cb:0d:
                    62:c3:cc:b8:cc:a1:3b:59:43:87:74:e4:c3:b3:2c:
                    12:e9:4e:5d:fe:bb:7e:38:4a:80:f0:75:65:ea:5f:
                    5d:82:c5:2a:26:b3:e3:3b:e7:d7:8a:9a:c2:2b:03:
                    f7:3b:bb:96:0c:d6:d6:19:22:e4:67:58:68:4c:1a:
                    e5:8c:f2:ba:ea:c9:3e:bb:94:4a:be:3c:a5:91:a3:
                    c2:bc:aa:6f:27:c7:a8:85:0c:c3:45:a1:5b:1f:ed:
                    02:c0:7a:1d:7c:f1:26:ca:19:36:cf:bf:c3:15:52:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:28:C7:DC:55:76:5B:69:98:91:23:57:23:9B:F0:80:4C:B2:A6:65
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gCjH3FV2W2mYkSNXI5vwgEyypmU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.47.0/26

    Signature Algorithm: sha256WithRSAEncryption
         67:e1:d0:bf:1a:61:b9:55:23:fe:2d:64:8c:bf:a7:e4:f5:81:
         32:ef:3d:fe:8c:08:81:04:6b:d3:6d:c6:3e:13:44:bd:e8:cb:
         a4:c1:2a:80:96:f1:3f:30:e5:41:2b:a1:68:9a:96:ce:62:16:
         0a:51:d3:6f:28:53:98:a0:44:19:aa:5d:05:e1:91:db:d0:67:
         ac:6a:bf:b2:81:50:03:25:ea:a4:c6:8d:5f:e6:47:08:09:5e:
         11:f3:ec:1a:96:34:5b:4f:38:0a:ee:8a:3e:77:8c:2e:7e:34:
         74:4f:43:7f:37:c9:a4:aa:3d:01:34:f2:af:7d:7e:35:fd:7a:
         ff:a9:82:3a:1e:aa:f9:a9:4a:88:15:f3:59:e2:c5:31:2e:e2:
         4e:47:f9:b0:d8:a2:c6:c8:c8:ad:db:1d:14:e7:cc:7a:f1:10:
         72:f9:ff:10:a1:21:1a:3c:8e:d1:9b:89:8c:d2:5c:22:cd:27:
         d1:8a:4e:14:73:66:f4:dc:b3:f5:69:d2:64:48:58:7e:f7:cf:
         e7:03:7b:96:f9:26:84:72:91:44:ce:55:bf:37:d4:20:e8:0a:
         90:f1:85:85:b6:22:f8:4b:24:50:7e:f4:a3:ba:b6:b2:5f:15:
         f5:56:5c:35:1a:44:26:90:1f:fc:96:81:a5:19:22:33:07:36:
         2a:d0:b9:96
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICILkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDgwMjhDN0RDNTU3NjVC
Njk5ODkxMjM1NzIzOUJGMDgwNENCMkE2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuxed7Hel6qt4JEDn9uG8+7oqeHA1VyOAULSVo0z0OmeNEECbE
M5BEzN1gc6jRRvxArn/UM/k0q3XfLH4tKjqq+1ZRiGoPDtL8smSOZ0uUBGbT1EtG
vul2gxPDvMhDBd00Mtl1JVnKr6Op4C6FDnLO8K82knnwWyqYInlsYGMReVwj71lF
Z/rnvd9XI+3vqqROjD3LDWLDzLjMoTtZQ4d05MOzLBLpTl3+u344SoDwdWXqX12C
xSoms+M759eKmsIrA/c7u5YM1tYZIuRnWGhMGuWM8rrqyT67lEq+PKWRo8K8qm8n
x6iFDMNFoVsf7QLAeh188SbKGTbPv8MVUnPPAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUgCjH3FV2W2mYkSNXI5vwgEyypmUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2dDakgzRlYyVzJtWWtTTlhJ
NXZ3Z0V5eXBtVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQa0
sS8AMA0GCSqGSIb3DQEBCwUAA4IBAQBn4dC/GmG5VSP+LWSMv6fk9YEy7z3+jAiB
BGvTbcY+E0S96MukwSqAlvE/MOVBK6FompbOYhYKUdNvKFOYoEQZql0F4ZHb0Ges
ar+ygVADJeqkxo1f5kcICV4R8+waljRbTzgK7oo+d4wufjR0T0N/N8mkqj0BNPKv
fX41/Xr/qYI6Hqr5qUqIFfNZ4sUxLuJOR/mw2KLGyMit2x0U58x68RBy+f8QoSEa
PI7Rm4mM0lwizSfRik4Uc2b03LP1adJkSFh+98/nA3uW+SaEcpFEzlW/N9Qg6AqQ
8YWFtiL4SyRQfvSjurayXxX1Vlw1GkQmkB/8loGlGSIzBzYq0LmW
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org