Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u5LmD1PDHoNrW45kM4SbGYX3lGA.roa
File:                     u5LmD1PDHoNrW45kM4SbGYX3lGA.roa (raw, json)
Hash identifier:          JS9Jkf0r09Cr4/Z5L39Vgsb0lFzNR4vbhjgIuLZhg0k=
Subject key identifier:   BB:92:E6:0F:53:C3:1E:83:6B:5B:8E:64:33:84:9B:19:85:F7:94:60
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0DA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u5LmD1PDHoNrW45kM4SbGYX3lGA.roa
Signing time:             Tue 29 Sep 2020 09:54:47 +0000
ROA not before:           Tue 29 Sep 2020 09:54:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.32.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3490 (0xda2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:54:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BB92E60F53C31E836B5B8E6433849B1985F79460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:52:fb:1b:62:6d:a1:4a:d4:b8:4a:86:5f:
                    bc:c9:14:6a:5f:b3:b5:c6:1d:ce:49:d2:42:d3:6a:
                    53:25:d9:a7:6e:7b:d0:c6:dd:06:55:4b:2f:fa:3f:
                    dd:98:8a:16:63:ae:28:d9:47:71:85:01:99:7a:28:
                    51:b3:c4:24:9c:dd:10:fc:81:7c:7e:cc:25:97:6f:
                    e8:19:1e:ad:d5:0b:53:c4:c6:20:da:e9:e6:7a:cf:
                    40:e5:1d:b3:1f:bf:05:b0:cb:cc:79:b3:7f:5e:83:
                    ef:49:b4:72:4f:50:dd:43:b5:1c:74:f8:d3:8c:0a:
                    26:7e:f9:1d:b8:2e:bc:14:d0:5a:2c:12:56:5c:d5:
                    68:db:52:23:08:e9:f6:77:9a:31:80:79:17:15:f9:
                    50:a7:d2:80:8d:24:5a:5d:e6:c7:e6:6d:f3:ec:f5:
                    a2:4b:c5:d7:b7:2f:7c:0c:f6:32:36:56:2e:9a:75:
                    a7:29:44:c4:6d:51:1f:f4:08:b7:b8:36:6b:42:02:
                    a8:26:92:d6:6c:0a:c8:2c:1e:e8:00:e7:fb:b3:89:
                    68:37:02:be:35:ef:e9:16:c6:16:d2:30:8d:a2:88:
                    2c:47:4a:b3:c5:e1:3c:60:3b:51:6a:43:08:91:fd:
                    e0:20:18:46:0d:26:71:bd:7b:e4:a6:88:a5:1a:dc:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:92:E6:0F:53:C3:1E:83:6B:5B:8E:64:33:84:9B:19:85:F7:94:60
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u5LmD1PDHoNrW45kM4SbGYX3lGA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:a0:70:8c:2f:62:b9:25:83:1f:1f:f7:b3:1a:8f:07:a6:
         69:c4:3c:d6:7a:6f:14:79:fa:2d:91:eb:08:18:23:4f:83:53:
         0b:d5:2c:f2:67:e9:e8:55:ca:fb:48:c7:09:31:2d:64:e1:a3:
         6d:29:0f:59:82:ad:cd:80:3f:e2:c2:ca:4f:ab:64:8f:d7:3f:
         b2:e0:5c:43:d7:95:7a:1c:23:f9:60:17:23:0a:ea:c5:b6:47:
         23:a3:d4:11:21:88:f0:ca:52:ee:f5:a6:be:92:01:29:cf:72:
         a9:44:35:31:8f:c2:7b:c8:71:f5:7d:9c:97:3f:a3:70:e4:57:
         3a:e2:80:f6:28:13:24:f4:b9:09:f9:a5:e6:44:19:f5:4b:d1:
         66:6f:a9:fb:40:38:9a:58:cc:6c:90:a1:3a:75:ad:7b:9c:55:
         cd:c2:43:4c:7b:ad:31:b6:9c:d2:6b:11:d3:46:77:8d:ce:7e:
         73:35:5c:23:45:40:33:2f:f4:b5:81:95:e1:fa:57:7d:80:12:
         51:72:d1:9f:f4:e9:35:70:a1:bc:86:3f:24:76:cc:43:5e:f5:
         1a:fb:a8:79:20:c8:ef:b0:b5:64:a2:db:45:16:d7:43:07:30:
         de:0b:92:d5:57:0c:76:68:ed:79:be:e3:b3:14:f7:c1:09:22:
         8e:54:12:55
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU0NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJCOTJFNjBGNTNDMzFF
ODM2QjVCOEU2NDMzODQ5QjE5ODVGNzk0NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRH1L7G2JtoUrUuEqGX7zJFGpfs7XGHc5J0kLTalMl2adue9DG
3QZVSy/6P92YihZjrijZR3GFAZl6KFGzxCSc3RD8gXx+zCWXb+gZHq3VC1PExiDa
6eZ6z0DlHbMfvwWwy8x5s39eg+9JtHJPUN1DtRx0+NOMCiZ++R24LrwU0FosElZc
1WjbUiMI6fZ3mjGAeRcV+VCn0oCNJFpd5sfmbfPs9aJLxde3L3wM9jI2Vi6adacp
RMRtUR/0CLe4NmtCAqgmktZsCsgsHugA5/uziWg3Ar417+kWxhbSMI2iiCxHSrPF
4TxgO1FqQwiR/eAgGEYNJnG9e+SmiKUa3PmLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUu5LmD1PDHoNrW45kM4SbGYX3lGAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3U1TG1EMVBESG9Oclc0NWtN
NFNiR1lYM2xHQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sSAwDQYJKoZIhvcNAQELBQADggEBAAgaoHCML2K5JYMfH/ezGo8HpmnEPNZ6bxR5
+i2R6wgYI0+DUwvVLPJn6ehVyvtIxwkxLWTho20pD1mCrc2AP+LCyk+rZI/XP7Lg
XEPXlXocI/lgFyMK6sW2RyOj1BEhiPDKUu71pr6SASnPcqlENTGPwnvIcfV9nJc/
o3DkVzrigPYoEyT0uQn5peZEGfVL0WZvqftAOJpYzGyQoTp1rXucVc3CQ0x7rTG2
nNJrEdNGd43OfnM1XCNFQDMv9LWBleH6V32AElFy0Z/06TVwobyGPyR2zENe9Rr7
qHkgyO+wtWSi20UW10MHMN4LktVXDHZo7Xm+47MU98EJIo5UElU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org