Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mD1tFZ--2zWRb77b_9ayTxPRgHc.roa
File:                     mD1tFZ--2zWRb77b_9ayTxPRgHc.roa (raw, json)
Hash identifier:          dm4v1O1TG04yASaR4Ctaw+r+Jht7dL15ZCbnujLBLy0=
Subject key identifier:   98:3D:6D:15:9F:BE:DB:35:91:6F:BE:DB:FF:D6:B2:4F:13:D1:80:77
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mD1tFZ--2zWRb77b_9ayTxPRgHc.roa
Signing time:             Thu 15 Sep 2022 02:45:58 +0000
ROA not before:           Thu 15 Sep 2022 02:45:58 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.120.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:58 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=983D6D159FBEDB35916FBEDBFFD6B24F13D18077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:d7:45:59:f0:15:ce:5e:da:21:1c:6a:7e:
                    e4:a9:ff:b2:af:ef:78:1b:0e:fb:fd:82:b7:54:85:
                    85:5c:43:73:68:7c:3d:e3:17:35:29:08:20:64:c7:
                    2c:db:1a:2d:bc:c8:26:0d:61:09:6b:6d:31:94:52:
                    93:19:db:6b:03:b0:0a:8a:57:ab:f6:ab:41:13:3c:
                    53:5e:cc:22:88:84:ff:a9:83:39:e5:6e:11:3f:be:
                    a3:8c:35:d1:bc:07:8b:98:70:08:15:30:98:51:48:
                    7d:28:96:fc:2f:46:da:f6:68:7c:13:1e:a1:31:42:
                    b8:bd:b2:20:e5:f2:97:0d:b2:d4:bf:24:1d:48:99:
                    32:43:57:00:96:9a:14:db:bb:24:15:13:de:6c:b9:
                    06:3d:cb:88:13:16:52:7c:b0:ae:44:df:2a:46:a9:
                    bf:1e:6e:57:da:e2:d0:b4:93:9b:45:85:21:39:02:
                    76:3e:e4:c3:20:97:bd:c9:b9:67:e5:d2:bb:5c:35:
                    e1:98:ea:bc:ff:9a:02:56:f0:fd:2a:f5:0f:35:e0:
                    15:9d:44:3d:5c:d0:21:75:9b:93:79:ef:f7:0c:5a:
                    ff:61:8e:04:6f:5a:3d:06:0f:a1:38:37:8f:c5:ae:
                    cf:8a:e7:92:11:16:5c:ee:3e:fa:11:d4:f7:fe:20:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3D:6D:15:9F:BE:DB:35:91:6F:BE:DB:FF:D6:B2:4F:13:D1:80:77
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mD1tFZ--2zWRb77b_9ayTxPRgHc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:8b:c9:38:36:f4:06:9a:f1:59:a2:82:82:ae:00:e7:36:06:
         0d:66:82:e9:4f:e2:c3:73:08:e8:e5:b7:57:c5:4a:02:70:4f:
         11:86:89:d0:39:6c:7e:5c:1f:5f:81:2f:18:21:7d:ad:eb:41:
         fa:9c:3c:79:1e:c2:f1:2a:44:0b:31:58:c1:a9:50:a2:d2:54:
         28:02:c9:c4:0f:d1:24:a4:9c:10:db:27:ba:8a:85:9f:da:2b:
         63:6d:43:a2:75:5d:41:52:06:a0:eb:7b:42:48:39:94:69:49:
         9b:8f:f7:9f:d7:74:b4:9e:81:46:fc:b6:42:5e:3a:83:02:b0:
         04:c8:0b:3a:30:45:13:02:d4:96:60:13:22:b4:f1:27:42:f4:
         b0:c1:ac:46:d4:54:4d:c9:42:60:e5:17:1f:15:31:91:4d:aa:
         38:28:73:81:a3:94:fd:47:0a:b3:ee:d5:61:26:e5:16:3e:74:
         51:b0:6c:24:7e:8d:e6:bd:e2:19:66:0f:2c:c8:5f:54:2c:4a:
         ca:0c:2c:50:a5:20:a9:0a:c5:5f:4f:5d:fc:0c:e0:0e:2f:0b:
         bc:72:32:db:ae:70:0e:76:9e:b9:7d:71:b9:0a:f8:1e:ff:5f:
         33:c7:58:34:61:06:7e:59:8d:2e:d6:eb:1c:c4:e2:1b:c0:af:
         32:ca:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org