Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gL6VCDWnNbpvvSBohuV9PDm1rZA.roa
File:                     gL6VCDWnNbpvvSBohuV9PDm1rZA.roa (raw, json)
Hash identifier:          AJMqMBH/64xIDqt5QfxqnFi0Hhucx5SThn14VBgCVFM=
Subject key identifier:   80:BE:95:08:35:A7:35:BA:6F:BD:20:68:86:E5:7D:3C:39:B5:AD:90
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1C72
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gL6VCDWnNbpvvSBohuV9PDm1rZA.roa
Signing time:             Wed 29 Sep 2021 02:47:47 +0000
ROA not before:           Wed 29 Sep 2021 02:47:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7282 (0x1c72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=80BE950835A735BA6FBD206886E57D3C39B5AD90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:fa:a8:fe:27:0f:32:07:70:f8:dc:1e:05:
                    95:78:71:23:68:ed:26:66:d4:3c:f7:81:41:a9:f6:
                    aa:b7:3d:3d:48:b1:d3:06:8a:cb:10:66:9f:3f:3f:
                    fa:63:be:e6:41:d0:80:c1:46:ee:d8:c6:c6:92:bf:
                    ba:26:16:ad:16:94:5a:ec:31:b1:45:df:b8:45:1f:
                    2e:97:11:8f:40:ae:a0:9b:d3:98:97:39:fb:fc:02:
                    13:e1:1f:50:7c:15:2a:d7:32:26:a4:10:78:ce:dd:
                    4b:f4:74:fb:4d:c8:e1:b3:d2:ef:6d:ce:0c:43:6c:
                    b5:b1:85:e0:fe:1b:b6:4d:2a:ee:2a:2c:fe:75:73:
                    3c:c3:3f:de:1d:d2:00:a5:3d:70:b5:71:5c:c3:08:
                    82:de:62:b0:80:38:5f:77:c5:16:93:7e:77:dd:40:
                    46:8b:80:62:87:69:08:28:08:06:7c:7f:cc:ac:c9:
                    8a:63:d5:ab:83:34:3e:1a:1c:11:7a:62:dc:d5:e2:
                    8c:7e:e1:c7:d4:9a:cd:53:c6:a3:d1:30:52:61:41:
                    6b:5b:eb:7e:95:b7:b1:05:2e:4d:00:3d:38:58:70:
                    ea:71:3e:9a:41:a2:d4:a6:14:68:2c:d9:4b:02:b1:
                    26:0d:96:a9:2d:0d:ef:47:87:9f:6d:32:f0:24:96:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BE:95:08:35:A7:35:BA:6F:BD:20:68:86:E5:7D:3C:39:B5:AD:90
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gL6VCDWnNbpvvSBohuV9PDm1rZA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:b3:62:44:ca:72:17:57:52:34:3f:a3:b6:2a:3c:46:e7:
         9b:b5:1d:37:97:5e:ae:fe:30:85:7c:cc:56:93:76:8a:30:64:
         b8:d1:81:8b:4a:d6:1e:f0:df:6d:5a:d2:a3:ec:c8:2b:68:7c:
         c2:f3:ae:c7:ff:5e:d3:01:37:7c:bd:11:45:74:16:3b:e8:3a:
         83:59:fe:7b:0a:8b:17:85:61:d1:b2:34:0d:5b:4d:ab:97:46:
         d7:cf:4d:e6:81:11:f8:eb:d2:74:11:1f:07:b3:7a:9f:14:59:
         5f:6e:06:a3:91:c3:93:43:1c:8b:67:83:03:d3:b8:82:87:4c:
         4b:96:7d:79:b6:3d:29:5c:b1:c1:db:29:cf:bb:43:17:15:08:
         1d:9d:dc:41:58:28:ca:a6:0e:8b:fd:cc:11:02:6a:0d:b2:de:
         12:ef:eb:83:c0:d0:01:35:31:99:9d:c5:33:f9:f5:9b:1f:fd:
         85:3b:bc:6d:25:de:82:20:9e:c8:a6:b9:c8:77:a2:59:9b:7c:
         4b:28:07:c4:08:0d:82:9d:8b:49:ee:fd:99:dc:13:1f:80:2d:
         9b:db:bc:58:db:78:0c:0b:82:21:92:35:67:1f:a3:6c:f2:3f:
         9d:41:ad:bf:11:77:85:7c:40:7f:79:25:1b:86:25:8a:26:d7:
         8c:28:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org