Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xxLjp0ni7zP84bdMnxIc3VOQMd0.roa
File:                     xxLjp0ni7zP84bdMnxIc3VOQMd0.roa (raw, json)
Hash identifier:          Nlhz/HljsqHj9TxlhBwJDBnWi0qQZKcGNtGTppz7M9A=
Subject key identifier:   C7:12:E3:A7:49:E2:EF:33:FC:E1:B7:4C:9F:12:1C:DD:53:90:31:DD
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       217B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xxLjp0ni7zP84bdMnxIc3VOQMd0.roa
Signing time:             Fri 25 Nov 2022 04:39:59 +0000
ROA not before:           Fri 25 Nov 2022 04:39:59 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        180.177.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8571 (0x217b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:39:59 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C712E3A749E2EF33FCE1B74C9F121CDD539031DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:9c:02:cd:87:2e:7a:1a:2d:92:7a:5d:58:
                    53:e8:d2:2e:eb:40:99:9c:6c:e8:fd:fc:f6:ad:35:
                    cb:87:e2:eb:5b:63:a6:14:3f:53:45:33:67:fc:e5:
                    06:22:36:13:77:fc:93:f6:53:ae:98:b3:cd:ad:a6:
                    fd:c8:88:45:5b:03:23:fa:6b:ae:d3:d0:2c:05:a8:
                    e9:03:f1:fc:9f:e1:ed:1e:6e:0b:ad:40:ae:58:8f:
                    bb:f2:9b:32:1f:6a:46:a1:47:03:a7:3e:7f:52:68:
                    aa:93:c0:1f:ff:7e:f7:4c:ee:5b:3c:a6:3b:fc:12:
                    3d:fa:8f:84:f5:4c:ae:94:b8:0c:61:66:d0:76:f2:
                    49:49:f3:f1:b7:6b:56:84:df:56:66:7d:95:7a:a8:
                    ef:56:aa:15:7b:5d:80:0c:16:b6:68:0e:ff:f7:66:
                    57:fc:ee:94:3f:27:d8:e3:9a:b6:58:7b:f0:e6:72:
                    eb:ff:1b:22:1c:43:e0:9b:ef:64:9b:62:e1:64:a9:
                    1f:6e:59:13:d1:1f:1b:ec:b2:c2:ec:5a:b2:f4:5d:
                    00:12:9d:e5:b2:d8:38:0e:39:70:19:0a:d1:3c:70:
                    eb:ed:69:c5:c5:c1:48:32:26:b4:0c:91:2f:83:f0:
                    9f:a2:8a:25:a6:aa:ce:89:be:50:01:f3:2a:78:af:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:12:E3:A7:49:E2:EF:33:FC:E1:B7:4C:9F:12:1C:DD:53:90:31:DD
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xxLjp0ni7zP84bdMnxIc3VOQMd0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:95:a8:21:14:1f:29:80:81:67:f7:b2:c3:fb:0c:29:cb:c2:
         ea:75:1f:7b:f0:ab:60:43:48:c8:ee:c4:02:22:c9:3f:9b:dc:
         86:36:b6:f6:7d:44:13:e2:56:89:5a:e8:8a:2a:12:21:6b:74:
         55:14:04:fd:57:b5:58:a7:c4:72:cb:1e:9e:0a:11:cc:20:9b:
         c2:dd:3a:1f:a3:7f:56:63:9b:fb:e4:72:a7:d4:0b:3e:a6:9b:
         b4:04:8d:9f:ec:09:6d:b7:fd:fd:11:ff:6d:87:7e:09:0a:f7:
         59:fa:73:19:d3:a1:45:1b:36:f1:78:d6:8f:ce:d4:bc:fc:41:
         fd:d0:ce:14:40:82:d5:7b:9f:e9:01:73:06:35:63:29:bc:a3:
         b7:b6:51:b8:28:8a:b9:48:74:a3:57:db:ee:ee:5d:f2:43:48:
         58:b1:4f:b2:e0:1a:0f:5a:de:77:34:74:46:ad:f0:6a:40:02:
         6c:28:7c:e6:c0:d0:bf:84:6a:3e:5f:8e:33:d5:4e:b7:a5:81:
         97:16:62:7a:a4:47:f1:a9:31:a6:38:1d:61:fe:5e:e6:07:58:
         9b:1a:62:5a:fa:b1:ce:4f:de:97:03:3a:e2:49:8f:22:11:d6:
         7a:91:bd:b4:50:64:28:06:97:6f:1b:4b:53:51:b7:35:6f:53:
         a9:e8:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org