Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/44fdlPrSs-sVKffHjjn3N_1gqi8.roa
File:                     44fdlPrSs-sVKffHjjn3N_1gqi8.roa (raw, json)
Hash identifier:          209PBu6G+KUieEorHSCjoqIearQsl85p1Bstj3SKpFA=
Subject key identifier:   E3:87:DD:94:FA:D2:B3:EB:15:29:F7:C7:8E:39:F7:37:FD:60:AA:2F
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0821
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/44fdlPrSs-sVKffHjjn3N_1gqi8.roa
Signing time:             Tue 29 Sep 2020 09:58:23 +0000
ROA not before:           Tue 29 Sep 2020 09:58:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        61.224.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E387DD94FAD2B3EB1529F7C78E39F737FD60AA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:a6:c3:58:62:e5:db:e5:f3:6e:9b:76:18:
                    5f:88:13:e3:36:d6:32:69:cb:28:a2:ec:3a:f3:68:
                    a7:2f:a9:e3:17:ce:3b:fe:3f:60:cb:e5:e8:04:c4:
                    40:0a:ff:8a:23:83:d0:38:0b:bd:1c:5d:7f:c9:b0:
                    2f:4a:a4:17:81:f7:5b:f5:44:13:f6:b2:72:40:a7:
                    83:70:78:67:17:e4:a0:ed:63:59:f2:49:ac:f6:d4:
                    f5:b5:bf:36:fb:df:77:40:9d:51:0c:80:af:95:6f:
                    1f:98:f2:ee:40:99:e8:9b:15:81:0c:4c:04:d0:ed:
                    58:09:48:cc:8a:13:ca:9b:9a:ce:33:63:a4:cf:88:
                    6e:d2:5d:73:ed:92:f4:5a:76:f3:ee:25:97:b7:b2:
                    37:9e:19:a5:e4:7b:49:f9:86:43:8c:d7:a3:68:7c:
                    bb:28:93:82:bd:df:74:53:dd:cb:e1:65:24:b3:5a:
                    05:d0:a5:8b:b9:e5:dd:d4:98:3d:4c:28:13:88:5e:
                    17:3d:4d:c5:63:f0:dc:50:ad:c7:e6:93:7c:8f:34:
                    5a:6a:43:0a:9b:a5:34:2d:1a:06:9d:4a:43:12:29:
                    c7:e4:3f:8e:8e:9f:fd:7a:e4:bd:a2:ec:ef:71:f8:
                    82:1f:53:e0:5f:a0:fb:45:ca:93:8e:ea:a0:45:bd:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:87:DD:94:FA:D2:B3:EB:15:29:F7:C7:8E:39:F7:37:FD:60:AA:2F
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/44fdlPrSs-sVKffHjjn3N_1gqi8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.224.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         98:46:09:88:76:32:56:3e:f9:ab:05:ce:2b:76:3f:96:45:70:
         cd:5e:68:9f:3e:c8:8f:c8:26:07:fb:46:6f:d9:4e:99:72:0b:
         24:f4:66:8f:cd:f7:cb:aa:60:0e:01:04:ff:fa:8c:5f:cb:23:
         76:96:d0:38:0c:dc:83:85:08:44:57:ff:f2:d8:6c:57:82:6e:
         73:59:4a:ea:a0:24:96:b1:7d:3c:5c:f5:54:c8:e8:a7:6c:80:
         fb:c5:6c:b2:f1:b4:ec:9a:fb:2c:4f:64:40:6c:0e:aa:c2:38:
         42:ed:3b:9b:ed:56:59:ad:75:e8:3f:38:89:f3:99:b6:6b:2f:
         0f:2e:35:e0:cb:78:de:1f:c0:de:d8:c3:42:71:ff:d8:a8:9d:
         f0:b2:7f:79:de:38:89:cb:38:35:ad:c8:a9:12:50:95:71:8a:
         ae:72:e0:11:25:51:8e:5a:cb:5c:67:4c:c6:77:2f:ed:b6:d5:
         bb:bf:ba:68:92:b8:9e:68:38:fb:54:27:ee:c9:27:37:96:93:
         2c:33:7f:eb:72:75:88:15:94:06:01:53:07:a4:01:a6:e7:a0:
         71:ca:a4:47:bc:99:2c:f1:df:49:93:4a:c7:5b:b3:31:f2:cc:
         6b:9e:de:4c:d9:38:5e:3b:d7:d1:c7:b6:cc:8e:ad:9a:f0:a8:
         cd:72:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org