Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sMAqWvi-A6VsxULCFFwoNyK5dA8.roa
File:                     sMAqWvi-A6VsxULCFFwoNyK5dA8.roa (raw, json)
Hash identifier:          RF34KcwC3BRHkif5fjNu3F9pl2uHz5TRrJOhlYzT6vo=
Subject key identifier:   B0:C0:2A:5A:F8:BE:03:A5:6C:C5:42:C2:14:5C:28:37:22:B9:74:0F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sMAqWvi-A6VsxULCFFwoNyK5dA8.roa
Signing time:             Thu 15 Sep 2022 02:45:46 +0000
ROA not before:           Thu 15 Sep 2022 02:45:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B0C02A5AF8BE03A56CC542C2145C283722B9740F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:45:37:f9:0d:0f:f9:8f:08:69:04:03:0b:
                    b3:73:a5:30:ab:62:7a:56:7a:e7:cb:2e:17:04:03:
                    5f:39:41:d6:3b:37:88:c9:d4:07:59:49:15:a4:51:
                    87:ac:55:34:b8:af:fe:35:a7:a0:f1:f9:13:e1:c0:
                    30:82:79:19:50:df:8c:db:a0:ee:1b:0b:3c:c8:ab:
                    30:05:29:71:34:95:e5:2c:f9:59:81:bb:40:f1:d1:
                    d0:21:5f:54:5d:02:73:e7:34:c1:b8:82:2b:f0:e4:
                    11:b1:b7:06:a8:f0:8c:87:48:9e:07:f6:4b:89:a7:
                    87:3f:e3:64:4c:eb:79:b2:c6:ef:ed:6a:f8:f1:fe:
                    e8:10:ce:9c:f4:3d:a8:fa:33:65:9f:3f:0b:90:63:
                    21:13:f5:41:f1:bc:4f:da:f8:18:42:b2:af:2e:2f:
                    46:8f:0d:70:36:9b:93:a4:34:5f:53:fc:0b:4e:06:
                    b6:32:7b:a8:1c:dc:48:ab:a0:57:15:8d:74:88:7e:
                    2b:b0:9d:b2:10:70:fd:cc:5e:7a:a5:ee:d9:50:83:
                    45:40:bd:a6:89:b2:36:c3:ac:2f:19:21:ca:f3:99:
                    37:ce:cf:d5:ea:c8:2f:58:90:88:94:28:58:64:e1:
                    f3:47:cb:2e:ab:09:de:b3:29:e8:d3:dc:6d:02:a2:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C0:2A:5A:F8:BE:03:A5:6C:C5:42:C2:14:5C:28:37:22:B9:74:0F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sMAqWvi-A6VsxULCFFwoNyK5dA8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:99:49:13:35:67:ba:73:5f:d9:26:9f:c7:79:67:ff:25:52:
         f7:46:48:62:0b:d4:2e:4f:a9:a5:e5:bb:bc:d9:ff:bd:97:e7:
         59:f5:a9:69:9c:95:30:13:6c:1c:4e:16:87:43:82:25:ea:29:
         8b:56:5b:f5:ef:e5:43:94:a8:0f:7e:17:60:23:21:8e:ee:cf:
         19:a6:12:28:57:31:1f:dc:10:e5:74:4b:b0:86:14:77:22:e4:
         89:01:5c:0e:54:b8:70:8e:c4:61:da:8f:ff:9f:80:a1:81:69:
         c4:25:0e:8a:26:42:0f:28:5f:61:da:5a:c4:e5:c5:47:0e:16:
         de:7c:35:67:ab:42:57:56:59:23:59:31:da:fc:bc:0a:f9:f1:
         94:84:fe:c4:8d:d4:b4:3d:29:1c:46:91:27:68:e3:a4:6f:69:
         59:d8:30:ce:c2:f2:cc:22:6f:9a:0c:fd:01:4b:74:a8:ca:8d:
         b4:e2:63:f8:25:b9:e2:05:9b:42:21:b0:9f:5a:89:1a:d6:10:
         4e:89:01:ef:33:2e:08:b9:de:da:f7:bd:f3:db:42:58:f7:cd:
         b4:f6:a5:b4:f4:12:ad:75:b6:00:e4:f3:0b:04:35:02:59:d8:
         fc:4d:81:67:2d:b8:68:76:89:02:74:21:62:dc:1f:53:f4:f9:
         c4:23:15:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org