Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yDp16xu_Jg2QFd_-7ZdqI73wZls.roa
File:                     yDp16xu_Jg2QFd_-7ZdqI73wZls.roa (raw, json)
Hash identifier:          wGovbmeEDacZlH/3MS4pfSOH6++7JzQsqJUIUL8JExw=
Subject key identifier:   C8:3A:75:EB:1B:BF:26:0D:90:15:DF:FE:ED:97:6A:23:BD:F0:66:5B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1EDD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yDp16xu_Jg2QFd_-7ZdqI73wZls.roa
Signing time:             Thu 26 May 2022 03:34:47 +0000
ROA not before:           Thu 26 May 2022 03:34:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        180.176.232.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7901 (0x1edd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: May 26 03:34:47 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C83A75EB1BBF260D9015DFFEED976A23BDF0665B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:2b:23:f8:71:97:d8:67:51:97:f5:20:84:
                    03:70:7d:e1:8c:c6:c9:26:bc:5d:03:ea:64:8c:91:
                    1c:d0:75:be:f2:f2:37:49:14:bc:89:37:3f:68:27:
                    b1:d4:45:63:e0:23:e6:15:04:09:c1:49:ae:c1:3a:
                    a3:7f:4b:7a:94:0c:8e:e1:1c:06:9a:ba:7c:28:78:
                    3b:f1:4f:25:7d:99:66:1e:aa:09:ab:58:f3:a7:5b:
                    97:87:3d:4b:19:81:3e:60:c6:d0:c5:02:17:e4:2b:
                    f2:2d:b9:8a:ba:2c:a7:75:44:e0:f4:42:db:c4:75:
                    0e:f1:96:17:85:62:54:43:e9:27:01:7b:c4:53:e3:
                    1c:f8:3b:6e:45:e8:a9:5b:96:26:a4:88:47:cb:7d:
                    5b:ac:d1:e1:b3:ad:4a:4c:9c:4d:9a:51:53:ac:bf:
                    bd:57:04:0a:3e:1f:76:fd:90:92:bb:46:73:25:1b:
                    99:95:79:d5:f2:a5:e3:ec:9b:3b:fe:15:cd:3b:3b:
                    aa:42:5a:ee:ad:ea:6d:e2:42:39:0b:6b:06:81:96:
                    d0:8c:6f:06:79:82:c2:a5:d5:1f:ea:0f:57:c1:3a:
                    23:e8:22:12:2a:47:b5:9d:a5:fc:3d:a9:a7:de:0a:
                    16:6f:55:d7:54:57:74:be:66:d4:e4:6b:fd:3b:81:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:75:EB:1B:BF:26:0D:90:15:DF:FE:ED:97:6A:23:BD:F0:66:5B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yDp16xu_Jg2QFd_-7ZdqI73wZls.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:d9:81:55:8f:56:d1:42:a3:ae:b6:48:9d:8c:c3:2f:ac:
         f6:5f:fd:4d:36:16:6c:f6:43:70:7b:b6:fe:e2:49:86:b9:cb:
         5a:d6:80:df:be:ed:f6:eb:57:62:f0:95:1e:fc:c0:4c:74:5e:
         3e:a8:73:e8:0d:4b:29:04:d5:e0:92:75:53:aa:65:3c:03:00:
         92:dd:28:ca:a8:ea:37:ed:a5:21:03:63:3f:03:6a:25:67:0d:
         38:91:82:51:46:af:f1:5f:13:ce:6e:9b:eb:f2:d6:64:55:20:
         d1:92:67:02:fa:37:f2:eb:fa:b2:9f:6f:f6:bc:e6:8b:ac:cb:
         ff:6b:83:0b:b4:db:44:9b:c4:ee:23:b6:51:2a:cf:93:21:2c:
         bc:7a:37:75:5e:02:42:e0:39:77:88:df:ce:6e:39:e4:ab:a5:
         b4:76:25:9f:4f:56:db:f1:b2:8a:2e:55:31:15:35:58:30:b6:
         57:56:0d:b1:3d:e6:7e:5d:c1:79:06:88:bd:15:a5:da:71:b2:
         95:e3:7c:db:21:dc:68:4f:1b:bb:1d:0e:4c:cb:a3:da:ca:3c:
         7c:27:43:cc:cf:62:cb:c6:d5:b5:0f:e3:49:12:7e:6f:53:3b:
         5f:ca:c7:dc:b5:4a:e0:38:bb:ce:b5:38:30:c8:9b:fd:59:40:
         a8:4d:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:35 2025 by rpki-client