Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vUXT830m61U_lNHJvrktyBMMkSk.roa
File:                     vUXT830m61U_lNHJvrktyBMMkSk.roa (raw, json)
Hash identifier:          S08QTCG/lqnIxqjYx7WvNGR8YBfMOwhYyuSDiz7006s=
Subject key identifier:   BD:45:D3:F3:7D:26:EB:55:3F:94:D1:C9:BE:B9:2D:C8:13:0C:91:29
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       16B7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vUXT830m61U_lNHJvrktyBMMkSk.roa
Signing time:             Sun 07 Feb 2021 12:13:51 +0000
ROA not before:           Sun 07 Feb 2021 12:13:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.177.68.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5815 (0x16b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:13:51 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BD45D3F37D26EB553F94D1C9BEB92DC8130C9129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:61:d0:aa:c0:49:af:d7:b8:2f:3f:39:ec:
                    ac:f7:dc:b0:a9:12:ad:2e:61:01:ff:2f:ba:cb:ae:
                    30:a7:18:f4:48:a7:c5:2a:74:2a:82:c8:0c:d4:b7:
                    94:62:f3:8f:23:d1:a5:b5:76:06:46:23:a8:02:c1:
                    0c:30:a2:81:56:e6:ed:c0:c7:e8:85:93:08:18:ed:
                    78:63:88:b4:54:50:30:bf:80:12:98:ab:b8:2e:0a:
                    5e:25:0c:ee:e2:ec:33:58:af:79:d6:a8:6c:7d:8a:
                    e6:77:0b:a9:7a:4d:ca:3d:be:64:52:88:6a:f2:df:
                    04:d0:1c:9c:c6:32:86:59:b1:ff:17:91:d5:f1:96:
                    dd:43:ed:18:fc:9c:d4:99:90:4d:9f:c3:ae:bb:f9:
                    7b:8c:00:f7:7f:17:8e:6e:b1:5e:c5:b9:0c:c6:0f:
                    72:97:67:71:20:42:e2:bc:a4:af:0d:f2:77:dc:95:
                    a9:ec:d4:76:6a:d1:95:68:96:ab:c3:75:a8:e4:c4:
                    e4:ed:be:c8:29:15:55:ad:83:ce:ed:d7:4a:82:25:
                    13:fd:05:62:0b:ac:4d:bf:4d:3f:14:33:ba:38:7e:
                    99:a8:ae:05:37:1d:39:75:2f:1c:e2:ee:44:c2:5c:
                    52:36:db:a2:58:9b:f1:42:88:5a:c8:a0:65:49:f4:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:45:D3:F3:7D:26:EB:55:3F:94:D1:C9:BE:B9:2D:C8:13:0C:91:29
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vUXT830m61U_lNHJvrktyBMMkSk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:88:0b:df:82:44:1b:c8:c7:7f:69:6e:d4:0f:07:76:52:
         9e:c4:c3:2e:85:18:2c:6f:f4:2b:48:c1:e1:08:ab:14:01:34:
         27:9f:ef:46:bf:59:47:75:40:5d:4d:a4:cc:ca:da:b1:d6:be:
         c3:bf:08:73:09:7e:40:34:76:79:a1:3c:99:d6:7c:7f:fd:08:
         c6:62:6f:25:0a:ae:03:78:80:9e:15:76:0f:6d:cd:f8:44:94:
         8c:3f:50:0a:c7:08:7b:79:1a:09:10:56:bf:ab:9a:79:fe:74:
         5b:97:1f:01:06:46:42:75:ad:e7:9e:5b:7f:24:ab:03:b2:bf:
         69:8b:4a:2a:c5:2f:e2:fc:61:12:0b:59:e1:df:30:fc:7e:67:
         cd:c3:36:f6:90:19:b6:90:35:05:19:05:2e:98:b4:b8:e2:07:
         04:5c:d7:29:9f:27:70:bc:f7:8e:29:14:ef:08:f5:d7:ca:be:
         8f:c9:19:94:87:f0:fd:be:ef:04:e3:0d:df:f6:e3:e3:f1:50:
         e9:32:d6:de:89:0b:eb:ba:82:15:45:b6:c4:f0:f8:0c:7c:22:
         3b:86:1c:04:e9:89:10:ca:7b:95:2e:56:e4:07:28:c0:68:3e:
         55:ee:5a:d8:48:e2:52:db:fb:c4:75:0e:d5:df:3b:8e:df:2d:
         71:75:5b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org