Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nGuYsNYIh6RzvHSmUpMfyk-gIfY.roa
File:                     nGuYsNYIh6RzvHSmUpMfyk-gIfY.roa (raw, json)
Hash identifier:          nApL7iXD6rnUdc//oSQUlWWsDnpWBGdq/pFqRmSt6HM=
Subject key identifier:   9C:6B:98:B0:D6:08:87:A4:73:BC:74:A6:52:93:1F:CA:4F:A0:21:F6
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       22AC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nGuYsNYIh6RzvHSmUpMfyk-gIfY.roa
Signing time:             Fri 25 Nov 2022 04:41:29 +0000
ROA not before:           Fri 25 Nov 2022 04:41:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        180.176.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8876 (0x22ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9C6B98B0D60887A473BC74A652931FCA4FA021F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:9a:47:19:42:c3:30:a2:73:77:4c:fc:b6:
                    78:f2:cf:4b:6c:0e:88:98:1f:e1:22:12:68:9d:85:
                    65:45:59:0e:20:be:ad:e6:dd:f0:50:76:a0:eb:c5:
                    50:42:d5:45:c2:78:15:f6:f3:44:b0:36:06:f7:82:
                    96:2f:54:34:04:c6:2b:e2:7c:93:71:42:ba:01:8e:
                    9a:eb:da:db:dc:32:f9:f9:c4:be:a7:e1:1d:b6:08:
                    b4:e5:65:c4:72:82:a7:64:4a:ab:93:e8:19:80:fa:
                    51:50:2c:cb:73:02:37:cd:cc:60:06:06:4c:c5:3d:
                    36:3d:cc:a6:e6:47:d2:a3:bb:b4:92:da:c1:8a:fe:
                    4a:cd:8c:d7:76:e9:fb:b7:ec:1b:60:e1:84:fe:a1:
                    d4:69:7f:d1:3b:63:61:cb:73:b0:48:7d:ff:de:63:
                    7a:32:59:16:eb:0c:90:e3:a5:f7:f9:e2:22:85:49:
                    2a:3e:50:2e:91:b0:5c:63:78:57:37:3d:ca:3f:f0:
                    e8:9c:cd:e1:11:3e:08:f6:ad:60:f7:15:20:33:33:
                    8f:0f:c1:13:0b:1a:58:4a:a6:58:82:7a:5a:5d:a0:
                    05:f7:e9:71:83:b9:3c:2f:2d:21:a5:74:4b:9a:ae:
                    03:55:53:aa:b7:b2:99:af:93:92:8f:1d:7f:8e:e6:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:98:B0:D6:08:87:A4:73:BC:74:A6:52:93:1F:CA:4F:A0:21:F6
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nGuYsNYIh6RzvHSmUpMfyk-gIfY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:ce:6b:3b:27:b6:d3:c7:ee:2f:3e:b8:2a:8c:ca:c3:f1:
         ef:05:84:df:9e:6e:4f:3e:cb:4c:01:e1:ab:a8:82:8f:c8:4a:
         a4:bf:f6:cd:61:1f:2a:a2:36:b8:6c:ff:4e:8d:fd:fd:3b:23:
         a7:c6:3d:f9:20:e8:b7:f6:75:35:07:a9:78:3b:25:36:13:72:
         9d:65:b5:4b:55:94:8a:a3:66:94:87:f4:69:bb:e4:ba:fd:71:
         a5:37:a3:e0:d6:19:7d:5c:ce:8a:2b:b6:c8:5f:14:33:97:51:
         de:e8:03:d5:83:c3:a5:02:62:31:c0:0d:bc:63:1e:ef:33:45:
         65:7c:7e:29:8b:20:dd:52:3f:fc:8d:74:9c:2e:d7:8a:10:84:
         78:b2:c3:1d:f4:a9:84:fd:95:87:95:43:96:28:15:0f:bf:72:
         7e:c9:70:ce:1e:33:24:8a:eb:58:21:67:1d:36:cc:10:8e:ce:
         96:7c:9c:26:45:1e:54:62:fd:d0:e1:d9:d9:66:f8:93:26:16:
         b2:3e:c0:a4:14:44:90:17:06:a6:71:83:de:48:16:36:25:bc:
         1c:28:73:3c:b2:59:9f:c6:52:3a:55:c2:94:00:0f:46:a0:c6:
         25:4c:80:bb:5f:c9:76:0e:57:e6:f3:75:70:3f:52:94:2a:01:
         af:2a:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org