Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kK6Ew_rjTqzdmngqy3XOkFXydTY.roa
File:                     kK6Ew_rjTqzdmngqy3XOkFXydTY.roa (raw, json)
Hash identifier:          idrTdfqxIigVmAuXZRhbGpPv24DCf6J2NtxKlcpna6g=
Subject key identifier:   90:AE:84:C3:FA:E3:4E:AC:DD:9A:78:2A:CB:75:CE:90:55:F2:75:36
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       188D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kK6Ew_rjTqzdmngqy3XOkFXydTY.roa
Signing time:             Sun 07 Feb 2021 12:30:27 +0000
ROA not before:           Sun 07 Feb 2021 12:30:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6285 (0x188d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:30:27 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=90AE84C3FAE34EACDD9A782ACB75CE9055F27536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:fe:98:db:32:18:97:67:3d:98:23:dd:59:
                    79:e2:f8:a3:86:87:e4:71:9d:6e:96:41:e3:97:20:
                    02:b9:ac:8c:29:4f:ec:ad:66:30:ba:e1:ec:40:1e:
                    f0:22:e2:a7:18:54:b5:d9:bb:c5:d6:24:e7:a9:10:
                    3c:13:31:0f:48:29:be:20:ad:6d:ef:a4:c2:3b:bf:
                    dc:8c:31:6f:e3:1b:95:94:cc:3b:1b:99:46:7f:d9:
                    5b:7d:04:30:4d:88:45:c8:09:6d:a8:bc:91:c4:e4:
                    22:fc:cf:b1:2b:06:16:aa:0c:09:d6:79:53:f2:68:
                    7f:bb:6c:06:f3:f8:a7:10:88:71:bf:2b:50:8d:9a:
                    92:e1:1b:bb:60:be:67:b4:ba:ea:03:82:01:b8:d8:
                    30:12:14:bd:09:0b:53:08:be:79:f7:f7:22:1b:dc:
                    30:01:f5:60:11:79:df:17:88:df:93:3b:91:a7:3d:
                    8f:fe:db:ee:e8:25:67:f7:00:d6:59:b6:b3:c1:ce:
                    7b:9b:f4:b6:a7:fa:d4:7b:0b:38:b0:55:f9:3a:2d:
                    5f:1a:9f:b9:91:c2:12:0f:ac:04:9d:9a:f7:dd:a2:
                    cf:b2:1f:ec:b0:cd:40:09:93:70:d1:93:a6:95:64:
                    c5:d8:64:82:6f:f1:ab:22:e9:d9:83:cf:8f:76:c3:
                    3b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AE:84:C3:FA:E3:4E:AC:DD:9A:78:2A:CB:75:CE:90:55:F2:75:36
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kK6Ew_rjTqzdmngqy3XOkFXydTY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:12:ed:48:69:ab:96:b3:b9:48:9e:54:b2:45:f0:13:2f:fc:
         fe:9b:29:53:42:7d:d0:f1:bc:0e:88:3b:ea:20:50:7e:55:53:
         cc:bb:d9:51:25:32:be:4b:58:76:27:d3:7c:be:2a:46:1e:0e:
         2b:d9:15:ec:c3:df:79:78:41:cd:86:35:a2:d5:7c:6a:d0:69:
         37:d9:40:8b:29:7f:2a:2c:7b:57:28:00:fa:2c:ab:65:07:ec:
         ae:f6:a7:d5:f0:b1:41:0a:a6:d6:58:01:51:36:5d:9b:e6:e4:
         09:54:42:dd:9f:39:ac:58:79:1f:8c:15:2c:29:fa:cd:31:41:
         11:d3:5b:72:3a:dc:53:70:9c:41:80:a6:0c:d1:63:04:31:78:
         da:06:77:a6:33:77:50:f7:1e:70:5f:f0:f5:5b:0a:c6:51:84:
         06:d7:73:2d:d9:da:ae:4c:54:df:5b:b0:99:7b:19:8c:a1:f3:
         38:a9:d2:94:de:94:71:98:c5:d6:ff:d0:aa:ab:25:33:49:d5:
         69:f4:46:d9:6d:97:66:2c:a0:7d:97:09:7e:e9:40:88:ef:32:
         ce:38:8a:20:bd:fd:f8:11:ba:83:4a:85:ea:bc:2f:1e:16:10:
         cf:86:77:f1:66:0b:0f:2d:7a:3d:3e:86:2a:0f:c1:c0:eb:f4:
         3e:54:5d:c5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjMwMjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDkwQUU4NEMzRkFFMzRF
QUNERDlBNzgyQUNCNzVDRTkwNTVGMjc1MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQColP6Y2zIYl2c9mCPdWXni+KOGh+RxnW6WQeOXIAK5rIwpT+yt
ZjC64exAHvAi4qcYVLXZu8XWJOepEDwTMQ9IKb4grW3vpMI7v9yMMW/jG5WUzDsb
mUZ/2Vt9BDBNiEXICW2ovJHE5CL8z7ErBhaqDAnWeVPyaH+7bAbz+KcQiHG/K1CN
mpLhG7tgvme0uuoDggG42DASFL0JC1MIvnn39yIb3DAB9WARed8XiN+TO5GnPY/+
2+7oJWf3ANZZtrPBznub9Lan+tR7CziwVfk6LV8an7mRwhIPrASdmvfdos+yH+yw
zUAJk3DRk6aVZMXYZIJv8asi6dmDz492wzutAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkK6Ew/rjTqzdmngqy3XOkFXydTYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tLNkV3X3JqVHF6ZG1uZ3F5
M1hPa0ZYeWRUWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sfgwDQYJKoZIhvcNAQELBQADggEBAFgS7Uhpq5azuUieVLJF8BMv/P6bKVNCfdDx
vA6IO+ogUH5VU8y72VElMr5LWHYn03y+KkYeDivZFezD33l4Qc2GNaLVfGrQaTfZ
QIspfyose1coAPosq2UH7K72p9XwsUEKptZYAVE2XZvm5AlUQt2fOaxYeR+MFSwp
+s0xQRHTW3I63FNwnEGApgzRYwQxeNoGd6Yzd1D3HnBf8PVbCsZRhAbXcy3Z2q5M
VN9bsJl7GYyh8zip0pTelHGYxdb/0KqrJTNJ1Wn0Rtltl2YsoH2XCX7pQIjvMs44
iiC9/fgRuoNKheq8Lx4WEM+Gd/FmCw8tej0+hioPwcDr9D5UXcU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org