Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j89ociPvEfB398_jc1joOrGdy7s.roa
File:                     j89ociPvEfB398_jc1joOrGdy7s.roa (raw, json)
Hash identifier:          SN1zQSP31+yO5QX5+iDkhXDS7n/VbmMCA40pt33fXD0=
Subject key identifier:   8F:CF:68:72:23:EF:11:F0:77:F7:CF:E3:73:58:E8:3A:B1:9D:CB:BB
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j89ociPvEfB398_jc1joOrGdy7s.roa
Signing time:             Thu 15 Sep 2022 02:52:59 +0000
ROA not before:           Thu 15 Sep 2022 02:52:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:52:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8FCF687223EF11F077F7CFE37358E83AB19DCBBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:59:93:00:4e:72:64:e6:a0:60:2a:27:18:
                    4a:f7:25:1d:da:11:e7:bc:4b:c3:f4:c3:2e:c3:a7:
                    fa:26:ba:2b:31:c4:d7:4e:cf:c4:c3:30:54:17:5a:
                    5b:fd:16:a0:08:23:c6:8f:9d:07:eb:19:bf:8a:90:
                    da:b6:1d:71:8b:21:c2:bf:11:07:32:c2:c4:b6:84:
                    5b:5c:6c:e7:7c:de:6a:db:0b:13:0f:35:56:27:e1:
                    50:cc:0f:f6:00:16:35:52:cd:43:2a:65:2c:99:62:
                    96:58:a1:62:b3:be:d7:cf:21:cc:19:b6:a4:02:97:
                    18:bb:d4:99:8b:3b:56:ed:31:ff:50:43:f6:81:a2:
                    a8:a9:12:db:4c:80:ab:cc:35:dd:2c:e7:3f:bb:1f:
                    ed:fc:d2:43:2a:a9:22:0b:af:6e:ca:74:3c:70:3e:
                    7b:bc:72:05:d0:65:3e:6e:96:41:5e:2c:5f:c6:76:
                    56:fc:16:1d:cf:bc:87:b7:0b:1f:bf:e6:c3:f8:74:
                    4b:20:15:34:af:fa:4e:95:dc:8e:5b:ef:9c:92:ce:
                    35:26:7b:b0:61:ee:bd:b4:35:cd:25:26:d1:d8:d0:
                    52:ec:0c:d3:23:57:34:68:0d:02:8e:a5:c9:39:86:
                    33:6d:ba:79:f5:9b:20:7f:93:c7:6e:04:f8:bb:ba:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CF:68:72:23:EF:11:F0:77:F7:CF:E3:73:58:E8:3A:B1:9D:CB:BB
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j89ociPvEfB398_jc1joOrGdy7s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:3f:7d:c5:55:97:f2:27:b2:aa:73:ce:f6:99:44:2e:41:
         e3:eb:9f:90:1f:0d:d0:54:12:7a:90:21:ca:a2:a8:c7:35:de:
         d7:c1:b5:2d:01:25:35:ee:e3:c4:1d:99:69:ac:84:3e:40:14:
         c8:95:50:53:1a:b0:41:ef:3a:a3:58:71:4f:3f:36:ef:87:ff:
         b2:4f:c3:b9:6b:e8:a5:5d:2d:76:05:b5:0b:a6:bf:d3:9d:0f:
         b2:27:09:37:fc:ae:4b:56:e0:7f:09:1a:ec:cd:cc:89:b3:0d:
         2c:86:50:39:e3:cc:6c:da:15:26:5d:53:04:91:91:f9:a8:7b:
         b5:bb:d1:c9:09:b2:4c:8b:4d:10:87:c2:10:39:3e:a9:07:30:
         7c:44:7b:23:54:62:c2:10:35:50:a6:18:6d:75:33:0e:4c:1c:
         25:31:e2:83:2f:44:40:73:b2:8d:97:fb:93:2b:69:ee:2a:09:
         0c:3d:57:30:a6:54:84:af:3a:72:18:4e:8e:a8:5d:2a:90:0c:
         0b:a0:57:e4:ba:bc:1b:a7:c8:3b:e9:0d:bd:c9:03:d2:e3:e9:
         3e:09:1b:07:da:01:67:4f:ab:8a:16:8f:fe:de:f9:50:ec:d5:
         be:55:34:ce:99:9c:78:50:5b:cb:d5:f8:9a:00:7a:bd:46:b3:
         5b:2a:0d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org