Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wDWiws0QUMJoZv__2T12gMdkx5A.roa
File:                     wDWiws0QUMJoZv__2T12gMdkx5A.roa (raw, json)
Hash identifier:          YXOEVnqWxR1cU/DT6zRNN7psEYovahF8eZxPCZKC/ig=
Subject key identifier:   C0:35:A2:C2:CD:10:50:C2:68:66:FF:FF:D9:3D:76:80:C7:64:C7:90
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E2A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wDWiws0QUMJoZv__2T12gMdkx5A.roa
Signing time:             Tue 29 Sep 2020 09:55:25 +0000
ROA not before:           Tue 29 Sep 2020 09:55:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3626 (0xe2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C035A2C2CD1050C26866FFFFD93D7680C764C790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:6a:05:1d:82:5b:f1:37:20:5f:21:70:c9:
                    b2:0e:b0:e7:cb:5d:bc:6c:65:5c:8d:d9:92:cb:8e:
                    5f:1c:5c:b1:cd:47:9a:a7:94:d8:6c:a0:5e:d6:81:
                    b9:fb:6b:5e:d4:72:8e:20:74:7a:14:e4:c4:de:9a:
                    5c:35:50:01:f6:b9:de:10:be:5a:69:ac:4a:99:37:
                    d1:a6:5b:9e:6b:15:90:92:b7:02:99:fa:74:96:44:
                    75:29:04:4c:23:04:11:03:c2:f7:e8:1a:76:65:01:
                    19:25:ef:d6:2f:62:9e:b4:75:23:a8:ce:6a:a4:3d:
                    98:cc:0f:43:61:01:57:57:14:ca:b0:c8:28:1e:6d:
                    23:26:95:57:14:cc:0e:cb:4f:c9:d5:ea:92:36:f9:
                    9f:47:b6:a1:fa:43:5f:e9:73:b9:5c:d4:8d:dd:c7:
                    a7:ec:38:a3:02:91:f4:fc:2d:0c:c3:9d:68:76:4c:
                    77:a9:34:b8:8a:0e:a7:da:d1:c6:8a:95:db:db:c9:
                    47:2a:aa:eb:7a:a0:9b:8a:5c:20:2e:a4:d6:65:3b:
                    3e:cc:94:cb:4a:91:05:24:40:1b:a4:49:d2:59:d8:
                    71:76:27:dd:e8:e8:59:91:ec:d7:ea:7a:82:68:77:
                    fa:53:83:fd:68:fc:f7:49:b0:ac:b2:57:99:d5:8e:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:35:A2:C2:CD:10:50:C2:68:66:FF:FF:D9:3D:76:80:C7:64:C7:90
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wDWiws0QUMJoZv__2T12gMdkx5A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:12:06:b4:c6:ab:c0:17:05:8a:ec:51:51:f3:72:05:16:bf:
         05:dc:43:83:6f:8e:1f:27:d8:ab:09:e6:9a:78:b7:83:ed:53:
         a2:46:12:8d:0a:8b:e7:02:29:7e:97:42:63:88:7c:d7:b1:76:
         bf:09:3a:d2:2f:4b:16:8e:7d:86:27:68:a2:85:40:84:6a:8c:
         eb:72:8d:9a:0a:c6:2a:e7:24:cc:9f:ed:68:0d:51:79:9b:62:
         fc:88:77:ed:b8:5c:c1:81:ac:a1:e0:6e:34:61:15:22:65:e3:
         90:60:78:65:f7:43:01:85:8e:b7:a6:2e:99:52:53:6c:f3:b9:
         08:b0:b5:08:e6:19:1e:fc:57:52:bf:ad:7b:81:77:46:3c:e2:
         4c:f3:41:2a:88:cd:03:84:f6:64:1d:fe:00:60:d5:21:46:e4:
         0c:bc:60:78:05:0e:15:6e:79:46:1d:42:66:91:de:37:a2:c1:
         81:9c:eb:6b:b1:29:40:5c:af:6c:16:e9:73:c5:2a:8a:a4:d6:
         22:de:e2:d0:30:aa:d7:bd:a7:79:56:65:e0:2f:36:01:56:52:
         57:ed:cc:78:63:fa:34:28:30:40:5d:85:b8:43:00:ff:3e:55:
         aa:57:1d:0b:f7:ba:62:4f:c0:d4:34:5c:7e:9e:2d:51:52:4b:
         38:8a:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org