Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tT93vBxh5TGk4ab88vnV6JJwclo.roa
File:                     tT93vBxh5TGk4ab88vnV6JJwclo.roa (raw, json)
Hash identifier:          Aec4bjRlp1v6vBqXJCkf/DmubCUOVgzzcVODB88Y9V8=
Subject key identifier:   B5:3F:77:BC:1C:61:E5:31:A4:E1:A6:FC:F2:F9:D5:E8:92:70:72:5A
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tT93vBxh5TGk4ab88vnV6JJwclo.roa
Signing time:             Thu 15 Sep 2022 02:45:52 +0000
ROA not before:           Thu 15 Sep 2022 02:45:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:45:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B53F77BC1C61E531A4E1A6FCF2F9D5E89270725A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:08:86:90:2a:c6:81:92:b5:e8:b2:65:60:
                    5e:f7:af:5b:be:89:32:0e:6d:1a:9a:5e:25:08:cd:
                    b1:cc:53:ee:c3:ef:fa:68:ec:06:1e:33:5c:f5:f4:
                    23:b9:3d:a6:ba:07:90:54:c7:4f:f1:7c:4f:28:6f:
                    26:a3:7d:db:51:0f:b7:be:f6:8c:eb:7c:84:2e:6f:
                    1d:9c:43:54:ae:c3:af:fc:f3:e4:0e:ac:6b:59:88:
                    f2:83:78:60:7b:a3:f3:e8:18:d7:1a:3e:e6:a5:11:
                    17:ca:7c:2b:ae:1c:fa:85:89:95:41:b9:28:6a:9b:
                    c0:f5:b5:95:4c:e4:cd:a0:5c:bd:52:dd:36:cf:8a:
                    5a:4c:88:ba:77:77:52:5e:f6:c8:ac:53:7d:72:ed:
                    97:2d:ba:fe:c6:31:82:84:2e:a6:7f:4b:8d:f0:82:
                    68:59:af:a6:6b:cb:fb:5c:86:7a:90:1b:0e:1f:d0:
                    d5:d0:b4:88:19:d2:ba:a4:88:46:df:9e:3b:8f:56:
                    fd:bc:d4:f7:dc:92:c2:82:46:2c:b0:05:d7:3e:8f:
                    2e:2c:ad:0d:4f:da:06:69:9a:ae:15:fa:1b:6b:d1:
                    e7:50:6b:96:35:78:bd:68:ed:bf:2c:b5:0d:f6:fc:
                    40:dd:e2:09:37:88:e1:ca:40:40:b7:32:2c:74:f5:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:77:BC:1C:61:E5:31:A4:E1:A6:FC:F2:F9:D5:E8:92:70:72:5A
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tT93vBxh5TGk4ab88vnV6JJwclo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:a7:5f:9a:62:83:9a:cb:a7:20:9b:78:e3:2f:1a:7d:29:24:
         8e:25:b7:c9:6c:d5:3d:95:94:52:f0:c7:aa:15:75:fb:1d:50:
         a2:0c:61:30:22:9d:f7:93:39:be:34:92:e3:3d:3a:61:8e:8e:
         e1:b5:4a:28:d0:94:83:9d:84:f2:ef:b4:27:e1:07:f0:2e:20:
         3e:d9:82:4e:ef:8b:a6:59:d0:31:fc:a9:ec:d7:54:61:a8:a7:
         eb:59:36:65:e2:20:64:72:f8:e3:25:dc:12:69:7e:aa:09:15:
         37:e2:c3:4a:bc:3e:24:e1:45:83:a0:5e:07:ea:71:1e:20:c7:
         28:05:39:b8:7e:5c:56:be:3e:25:b1:89:a6:7f:96:bb:27:0c:
         5d:50:39:4e:67:84:e3:f3:a5:ef:dd:09:b4:94:cf:0f:7e:a0:
         8b:a7:38:fb:53:bf:0a:eb:95:5d:ff:f0:6e:55:aa:52:52:ac:
         ab:8a:c9:f0:da:1e:80:3d:e8:6b:a6:c5:25:15:33:b6:f7:9c:
         46:f4:90:c4:23:e4:76:5d:b6:a3:7a:6b:be:36:e4:2b:f9:6f:
         53:d7:83:aa:48:e3:43:19:98:3a:08:69:03:35:8b:38:92:21:
         cf:53:de:85:78:6a:d2:89:9d:d1:c9:c2:89:8a:f3:61:ef:6c:
         1a:ba:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org