Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nv81z_ya5SqyrV1QCFPgQeEIUTw.roa
File:                     nv81z_ya5SqyrV1QCFPgQeEIUTw.roa (raw, json)
Hash identifier:          PT+fKkj6xYlvX7GSP3YsnVh3528SId18352ODYG3y18=
Subject key identifier:   9E:FF:35:CF:FC:9A:E5:2A:B2:AD:5D:50:08:53:E0:41:E1:08:51:3C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nv81z_ya5SqyrV1QCFPgQeEIUTw.roa
Signing time:             Thu 15 Sep 2022 02:45:25 +0000
ROA not before:           Thu 15 Sep 2022 02:45:25 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.144.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:25 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9EFF35CFFC9AE52AB2AD5D500853E041E108513C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:cf:4b:1c:3d:12:eb:73:6e:93:fe:44:13:
                    56:60:43:7c:85:1c:4f:4d:fd:90:59:de:7c:24:3c:
                    f5:91:06:7c:92:62:9c:bf:c1:3f:a7:c4:f0:39:a2:
                    fa:2c:b5:58:7f:ac:41:90:61:3b:32:fe:18:12:6f:
                    57:d0:7d:70:f0:98:c1:b5:94:44:0d:c7:db:7e:a8:
                    c2:25:ac:e5:e1:c8:ce:08:ee:12:e3:61:06:b3:4a:
                    3a:b5:e7:f0:ca:58:76:cf:64:05:d1:62:65:58:a7:
                    db:55:7b:92:fd:68:c1:01:d9:e5:03:d1:db:9e:78:
                    ac:e8:8e:10:b9:2b:00:2a:52:6e:87:f8:52:23:82:
                    6c:bf:71:68:ba:f1:8e:c2:d9:a3:22:62:47:c7:cf:
                    de:d6:2d:27:c3:01:48:63:ad:2f:0f:ec:e9:47:3d:
                    ad:69:98:d7:d5:76:34:a5:50:00:b6:00:a8:8a:6f:
                    9b:26:42:0d:7f:01:8d:c6:52:cc:82:49:1a:e4:e3:
                    37:7f:70:9c:42:4c:5a:7d:7b:3d:f1:68:84:8f:55:
                    b7:15:25:48:16:f8:51:da:b6:94:50:de:85:2f:82:
                    d2:5e:b9:58:33:47:ad:79:58:93:ae:f1:12:7b:eb:
                    48:90:6b:d4:6e:b1:84:5b:9e:28:d5:a4:bf:b1:fa:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FF:35:CF:FC:9A:E5:2A:B2:AD:5D:50:08:53:E0:41:E1:08:51:3C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nv81z_ya5SqyrV1QCFPgQeEIUTw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:64:7b:16:7f:56:15:53:0a:59:4a:e8:8f:c9:91:4f:7d:2b:
         c5:c3:c2:21:0b:df:19:16:2a:a2:e7:b6:45:74:73:d9:c3:9e:
         49:69:d2:97:c2:f7:b6:3c:b2:9a:00:07:cb:e8:77:f2:f2:39:
         2d:cf:dc:25:54:60:85:f7:27:0b:34:45:f3:a6:70:be:a5:f5:
         be:dc:c2:dd:e9:86:b3:68:d4:b5:fc:2c:18:3f:a6:05:e6:81:
         56:6c:18:0c:ed:e7:69:81:1b:bd:c7:35:b9:a4:59:ba:5d:e7:
         11:75:66:c3:f6:2c:b0:8f:4b:0e:c1:1c:73:8b:af:fe:a2:f6:
         e2:74:9c:48:e3:9e:98:e2:4a:63:1d:b1:60:52:66:9c:a9:33:
         85:b3:bf:93:1e:3c:88:60:7a:6c:f9:29:4a:2f:b9:fb:6a:23:
         24:7a:97:d1:4c:67:32:6f:f2:29:a2:6e:1f:c1:58:8b:b8:f9:
         8f:40:2f:93:a6:d2:30:be:5c:49:1a:79:5b:cb:16:83:f4:fe:
         e7:28:5e:af:1e:6f:ae:8d:29:ec:f3:af:65:0f:36:ee:3c:52:
         ec:5f:0b:38:cf:c9:93:d2:87:7d:54:aa:4d:bd:e0:7d:09:bf:
         22:74:04:54:3e:2e:de:79:4e:55:f9:8d:97:0a:54:eb:2a:26:
         0d:c1:0a:e0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlFRkYzNUNGRkM5QUU1
MkFCMkFENUQ1MDA4NTNFMDQxRTEwODUxM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDibs9LHD0S63Nuk/5EE1ZgQ3yFHE9N/ZBZ3nwkPPWRBnySYpy/
wT+nxPA5ovostVh/rEGQYTsy/hgSb1fQfXDwmMG1lEQNx9t+qMIlrOXhyM4I7hLj
YQazSjq15/DKWHbPZAXRYmVYp9tVe5L9aMEB2eUD0dueeKzojhC5KwAqUm6H+FIj
gmy/cWi68Y7C2aMiYkfHz97WLSfDAUhjrS8P7OlHPa1pmNfVdjSlUAC2AKiKb5sm
Qg1/AY3GUsyCSRrk4zd/cJxCTFp9ez3xaISPVbcVJUgW+FHatpRQ3oUvgtJeuVgz
R615WJOu8RJ760iQa9RusYRbnijVpL+x+uSJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUnv81z/ya5SqyrV1QCFPgQeEIUTwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL252ODF6X3lhNVNxeXJWMVFD
RlBnUWVFSVVUdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sZAwDQYJKoZIhvcNAQELBQADggEBACtkexZ/VhVTCllK6I/JkU99K8XDwiEL3xkW
KqLntkV0c9nDnklp0pfC97Y8spoAB8vod/LyOS3P3CVUYIX3Jws0RfOmcL6l9b7c
wt3phrNo1LX8LBg/pgXmgVZsGAzt52mBG73HNbmkWbpd5xF1ZsP2LLCPSw7BHHOL
r/6i9uJ0nEjjnpjiSmMdsWBSZpypM4Wzv5MePIhgemz5KUovuftqIyR6l9FMZzJv
8imibh/BWIu4+Y9AL5Om0jC+XEkaeVvLFoP0/ucoXq8eb66NKezzr2UPNu48Uuxf
CzjPyZPSh31Uqk294H0JvyJ0BFQ+Lt55TlX5jZcKVOsqJg3BCuA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org