Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xlqOQfx3n1c_sIBNk8ptyD-Er2I.roa
File:                     xlqOQfx3n1c_sIBNk8ptyD-Er2I.roa (raw, json)
Hash identifier:          UKD2xUh+uqZCal6HaSHxCP65Q+xo1Id2r4ce/MAjTUE=
Subject key identifier:   C6:5A:8E:41:FC:77:9F:57:3F:B0:80:4D:93:CA:6D:C8:3F:84:AF:62
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2022
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xlqOQfx3n1c_sIBNk8ptyD-Er2I.roa
Signing time:             Fri 25 Nov 2022 04:38:22 +0000
ROA not before:           Fri 25 Nov 2022 04:38:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.176.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8226 (0x2022)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:38:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C65A8E41FC779F573FB0804D93CA6DC83F84AF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:13:c9:b4:39:7d:cd:00:6c:94:c2:26:93:92:
                    69:48:ea:56:54:6a:cb:a4:d4:5a:53:b8:8e:57:0e:
                    3f:45:72:87:c5:8f:89:d6:58:2a:5a:ff:04:17:ee:
                    95:86:e0:72:ca:54:2c:cf:f0:23:a5:c6:11:2e:dd:
                    76:7e:2f:93:a1:6d:28:42:c6:9d:c5:f2:fd:1b:8d:
                    c5:b1:8c:31:2f:e4:ec:78:9e:91:70:99:93:5e:c2:
                    30:87:e3:18:ed:fc:54:84:cd:f1:a9:63:33:d3:b1:
                    a7:25:f4:2f:12:5a:0c:d1:ed:2f:3f:d3:67:75:07:
                    cd:cf:75:93:ff:91:8d:7a:40:32:eb:9d:23:34:0c:
                    4d:96:38:2e:ce:51:72:a2:d3:9b:ad:ac:ce:3e:e0:
                    7a:90:94:03:af:7d:1c:d1:ad:68:c0:b3:9c:6b:7f:
                    5f:79:c9:0a:a6:17:9b:5c:64:a8:2f:39:08:a4:7c:
                    85:d2:4d:98:20:20:bb:d1:12:1a:9e:21:eb:94:e7:
                    c5:9f:dd:70:a2:3c:fc:c8:1c:15:0a:06:27:cb:e7:
                    8a:20:da:06:44:2d:b5:f9:59:10:05:85:00:d1:2c:
                    e5:15:69:82:80:8f:10:0b:ce:d2:78:46:7c:84:6a:
                    63:81:93:68:52:ba:db:e5:3d:52:81:38:21:80:12:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5A:8E:41:FC:77:9F:57:3F:B0:80:4D:93:CA:6D:C8:3F:84:AF:62
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xlqOQfx3n1c_sIBNk8ptyD-Er2I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:63:b3:88:a9:5d:07:45:24:38:9c:8d:2b:73:71:b5:22:e6:
         81:8c:8e:46:5c:df:81:19:c6:c5:1b:bc:06:bb:d3:15:b5:19:
         fb:d1:cb:e1:40:24:48:4c:ec:83:ee:ed:34:48:ad:21:0e:bb:
         2e:7f:17:b7:08:94:ca:81:db:c3:bb:5d:57:4b:a5:47:ea:88:
         a5:57:2b:e2:29:83:ed:36:94:92:78:79:71:46:a9:f6:5a:c2:
         d2:2b:42:06:f9:17:6f:e0:55:b5:cf:fe:50:4d:a0:2a:8e:97:
         42:4f:11:20:49:84:ce:da:6a:1c:8b:12:11:12:28:8e:31:4a:
         9f:06:34:ca:09:a0:55:d4:cf:e0:37:ae:28:d9:b9:fc:a4:a3:
         9c:85:09:64:2a:ee:b0:d9:01:03:51:83:fb:d0:59:8e:25:6d:
         87:d6:84:0f:a5:06:8a:79:93:77:ca:7e:8f:97:8c:25:27:3d:
         34:5e:c6:07:55:89:4c:64:d1:fa:2d:af:b6:7e:23:aa:f2:a9:
         ab:f5:93:7f:63:88:67:91:c3:96:90:41:a4:9f:b8:f7:66:95:
         64:1b:95:c7:15:3b:b8:64:43:a6:49:a8:f2:85:de:a5:bb:83:
         eb:c3:76:ed:4d:f3:19:af:6f:ae:8f:38:9d:5b:10:00:89:5e:
         ba:0b:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org