Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yGE7shHm6pXSkiwCChk_zLLx9Ys.roa
File:                     yGE7shHm6pXSkiwCChk_zLLx9Ys.roa (raw, json)
Hash identifier:          IdjqfAGhOuG0Uota7qK/kwJWifYg0Y3DAMatS9flRKk=
Subject key identifier:   C8:61:3B:B2:11:E6:EA:95:D2:92:2C:02:0A:19:3F:CC:B2:F1:F5:8B
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1913
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yGE7shHm6pXSkiwCChk_zLLx9Ys.roa
Signing time:             Sun 07 Feb 2021 12:56:50 +0000
ROA not before:           Sun 07 Feb 2021 12:56:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        180.176.220.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6419 (0x1913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:56:50 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C8613BB211E6EA95D2922C020A193FCCB2F1F58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7c:fc:40:21:b9:56:5a:2a:90:86:8e:e0:62:
                    50:77:79:e5:04:3c:08:2c:c1:e7:15:6a:fa:eb:64:
                    a9:6a:62:0c:b3:fd:5e:ec:c5:f5:30:b9:a8:f4:f6:
                    73:cd:64:4b:d8:24:2c:df:f6:8c:4a:36:ba:55:da:
                    bd:fd:5d:87:8b:80:dc:05:cf:9a:36:c4:5c:f3:2c:
                    f2:40:28:08:73:a8:64:fe:3a:46:97:36:a7:2c:44:
                    ec:24:19:03:c0:27:1f:21:1b:7c:19:aa:df:97:55:
                    0e:56:62:1f:ef:e4:a6:2d:2f:89:ee:03:f2:a8:5e:
                    dc:a8:bb:cc:f7:e7:83:e7:aa:20:44:b0:d9:3f:05:
                    21:ef:52:21:03:ea:e6:b7:fc:a9:9a:76:e0:4f:80:
                    6d:7a:84:42:35:9e:9a:67:a5:f1:d5:99:3a:d7:50:
                    85:a0:9e:6d:f2:c2:c6:50:18:ee:9a:ec:7e:f4:5e:
                    7f:48:50:6c:21:ad:44:89:34:78:09:57:a9:a8:a2:
                    4e:ef:55:f3:e8:b5:fd:fd:43:eb:e3:ee:0d:6f:65:
                    a2:a0:67:3e:e7:5d:c2:fd:0e:5c:69:c8:77:62:b2:
                    7b:50:bc:64:ce:05:cb:0b:ed:b0:18:b7:3a:81:4d:
                    28:c7:e6:de:31:5d:90:06:49:48:db:a1:dc:98:29:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:3B:B2:11:E6:EA:95:D2:92:2C:02:0A:19:3F:CC:B2:F1:F5:8B
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yGE7shHm6pXSkiwCChk_zLLx9Ys.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:4d:ae:77:5f:ef:4c:10:0d:4d:2c:b0:da:e8:e1:78:e7:
         e7:84:41:b8:fd:d1:e6:32:4e:b2:51:34:2e:05:91:01:19:c4:
         b0:9a:fb:57:89:4e:c0:97:db:65:1b:64:8e:d6:5f:f5:c2:01:
         1e:d0:26:59:69:b9:8c:98:21:6b:db:9b:35:b9:9c:08:db:5f:
         43:8b:77:6c:bb:9e:24:4e:1e:24:9a:bd:99:62:aa:36:73:10:
         44:69:42:f6:a4:55:22:07:5a:b9:c0:a3:31:a0:15:c7:64:0f:
         0d:b4:26:dd:39:5e:bb:49:bd:8c:39:10:c5:f5:88:fa:3d:17:
         5e:06:cd:67:13:92:76:25:48:5c:2b:75:ff:72:2a:59:d6:2b:
         0c:2b:5d:64:30:60:c5:e5:ab:a4:97:63:63:97:f9:a5:35:42:
         a4:a4:5c:59:c6:ed:e7:6e:a0:73:a7:0c:4a:19:73:96:ce:4c:
         be:a6:a5:5c:1d:1b:de:11:43:58:5f:a9:6f:14:21:22:0d:6a:
         f2:54:b2:74:de:96:54:ce:24:c1:9d:21:58:61:d9:49:33:6c:
         0a:3e:bc:2f:8f:7b:5f:ad:80:30:bf:74:26:06:d1:53:72:60:
         06:a6:9b:50:5e:8c:d3:0a:6c:b3:0e:5f:89:b1:ff:cb:54:c5:
         95:c6:09:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:43 2023 by rpki-client on console-fra.rpki-client.org