Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nOCS4-oNFFdLa1Ofb0Er6KNHbxk.roa
File:                     nOCS4-oNFFdLa1Ofb0Er6KNHbxk.roa (raw, json)
Hash identifier:          w6h6JckH8Jp08am7jpSz1d8m8+2w+GL/MrzjDSHGrhY=
Subject key identifier:   9C:E0:92:E3:EA:0D:14:57:4B:6B:53:9F:6F:41:2B:E8:A3:47:6F:19
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1BF1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nOCS4-oNFFdLa1Ofb0Er6KNHbxk.roa
Signing time:             Wed 29 Sep 2021 02:47:11 +0000
ROA not before:           Wed 29 Sep 2021 02:47:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7153 (0x1bf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:47:11 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9CE092E3EA0D14574B6B539F6F412BE8A3476F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:a4:93:16:9d:ea:54:11:0b:b7:63:cc:e9:
                    4d:63:cf:13:c1:cc:a5:cc:0c:96:8b:b6:b9:b6:7d:
                    0b:b4:a7:d4:fa:6e:27:f4:1f:3a:72:a7:d2:3b:ed:
                    2f:da:59:43:cd:56:5b:18:c3:33:d2:b2:34:8a:12:
                    e7:65:d3:c3:bc:72:bc:f5:c2:14:ac:0e:86:77:7b:
                    75:e6:13:c0:68:9c:97:f2:b2:84:0e:9a:57:2e:2e:
                    a5:3c:32:2f:1c:93:9e:ce:e3:b1:c5:26:33:ab:f7:
                    1f:79:bf:40:29:75:7e:e7:b2:3c:55:db:0b:6e:d5:
                    9c:87:45:d9:0c:be:64:bf:3e:13:ea:7c:d1:53:dc:
                    2b:02:eb:69:7f:0f:ae:1a:07:a1:57:76:57:f4:fe:
                    f1:a1:b3:20:67:7e:81:e6:8e:2e:bf:0a:8d:ea:b3:
                    d3:7b:f9:dc:52:42:7b:1f:a5:9a:b0:4d:54:97:09:
                    ec:09:ba:51:6a:a7:6f:81:29:60:e0:6f:2e:7e:24:
                    63:fe:f4:05:79:8a:a8:2d:59:f0:35:c7:27:ce:50:
                    6e:1d:e9:c2:33:70:8f:b7:42:8b:40:3c:64:85:2a:
                    21:66:77:ef:d4:f2:bc:5e:27:3d:1b:d7:96:18:8b:
                    a0:88:99:34:45:31:26:13:48:4f:7f:4b:0d:0c:00:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E0:92:E3:EA:0D:14:57:4B:6B:53:9F:6F:41:2B:E8:A3:47:6F:19
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nOCS4-oNFFdLa1Ofb0Er6KNHbxk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:f0:b9:bb:10:2f:cc:3d:f1:30:d8:0d:48:56:09:a0:69:
         4e:ee:19:01:7a:8e:fa:4f:c8:80:58:65:08:98:21:69:a0:ac:
         b7:83:e0:76:43:f1:0c:2c:61:e2:c2:9e:51:12:2d:e3:b2:89:
         da:27:27:32:5e:62:72:32:a2:28:93:5f:f2:ad:0b:09:4b:63:
         49:a1:57:03:0a:c5:37:c8:00:fc:2f:fd:e4:bd:46:aa:23:0d:
         d8:8c:0e:a1:03:51:c9:75:65:a2:c9:ef:26:b8:e7:e2:5f:fc:
         22:72:b1:a3:37:94:a2:d5:1f:99:5e:08:ea:fc:db:e5:de:f6:
         5a:90:f7:8b:d9:98:d8:7d:4b:36:36:f6:0e:1a:1a:22:b0:85:
         ed:20:1a:7c:43:50:54:82:cb:ce:a8:51:53:88:dc:f5:bd:d7:
         56:49:a1:03:34:93:fb:84:fe:20:5c:c6:53:ac:65:1a:71:f0:
         04:5d:3b:f3:33:19:4f:a3:68:66:1b:f7:f5:54:8b:bf:86:a8:
         7e:65:17:9d:8b:fc:84:fc:c0:1b:2e:7b:59:8f:4f:83:9e:44:
         10:84:cd:da:26:ea:ef:22:5f:44:62:45:d3:9a:0f:7c:df:da:
         d8:70:c9:ab:6d:30:08:34:c7:d0:74:91:de:90:f0:d6:cf:6c:
         a0:7e:20:3b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG/EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ3MTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDlDRTA5MkUzRUEwRDE0
NTc0QjZCNTM5RjZGNDEyQkU4QTM0NzZGMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5GaSTFp3qVBELt2PM6U1jzxPBzKXMDJaLtrm2fQu0p9T6bif0
Hzpyp9I77S/aWUPNVlsYwzPSsjSKEudl08O8crz1whSsDoZ3e3XmE8BonJfysoQO
mlcuLqU8Mi8ck57O47HFJjOr9x95v0ApdX7nsjxV2wtu1ZyHRdkMvmS/PhPqfNFT
3CsC62l/D64aB6FXdlf0/vGhsyBnfoHmji6/Co3qs9N7+dxSQnsfpZqwTVSXCewJ
ulFqp2+BKWDgby5+JGP+9AV5iqgtWfA1xyfOUG4d6cIzcI+3QotAPGSFKiFmd+/U
8rxeJz0b15YYi6CImTRFMSYTSE9/Sw0MAPHpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnOCS4+oNFFdLa1Ofb0Er6KNHbxkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL25PQ1M0LW9ORkZkTGExT2Zi
MEVyNktOSGJ4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
sFQwDQYJKoZIhvcNAQELBQADggEBADXZ8Lm7EC/MPfEw2A1IVgmgaU7uGQF6jvpP
yIBYZQiYIWmgrLeD4HZD8QwsYeLCnlESLeOyidonJzJeYnIyoiiTX/KtCwlLY0mh
VwMKxTfIAPwv/eS9RqojDdiMDqEDUcl1ZaLJ7ya45+Jf/CJysaM3lKLVH5leCOr8
2+Xe9lqQ94vZmNh9SzY29g4aGiKwhe0gGnxDUFSCy86oUVOI3PW911ZJoQM0k/uE
/iBcxlOsZRpx8ARdO/MzGU+jaGYb9/VUi7+GqH5lF52L/IT8wBsue1mPT4OeRBCE
zdom6u8iX0RiRdOaD3zf2thwyattMAg0x9B0kd6Q8NbPbKB+IDs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org