Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/EaX7gbb9XoVyAkPhOgeB46li3ZY.roa
File:                     EaX7gbb9XoVyAkPhOgeB46li3ZY.roa (raw, json)
Hash identifier:          MAIc9LtWJcYDW1V9yWx82tvyHBufcZu4pbg7VaJTreo=
Subject key identifier:   11:A5:FB:81:B6:FD:5E:85:72:02:43:E1:3A:07:81:E3:A9:62:DD:96
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       091B
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/EaX7gbb9XoVyAkPhOgeB46li3ZY.roa
Signing time:             Wed 29 Sep 2021 02:41:46 +0000
ROA not before:           Wed 29 Sep 2021 02:41:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131618
IP address blocks:        103.129.136.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2331 (0x91b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Sep 29 02:41:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=11A5FB81B6FD5E85720243E13A0781E3A962DD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:c3:06:37:97:a5:13:61:87:7e:4c:d7:b0:
                    39:a7:ee:b8:04:99:b6:40:21:07:3f:22:88:54:24:
                    52:f0:82:81:94:97:92:3e:3c:da:f8:3e:e0:36:46:
                    f8:eb:1a:43:b1:f9:19:9b:5c:42:b7:f8:9d:92:31:
                    07:a3:f6:7b:d9:79:1d:c6:04:16:d7:29:d8:b8:72:
                    b4:71:50:3e:e1:e1:67:76:25:3c:e9:75:2b:8e:3c:
                    28:8f:ed:18:e7:d0:8e:12:ab:a2:3b:37:40:6d:5b:
                    af:a6:6b:3a:27:ca:de:a0:42:8c:1b:bf:95:1f:59:
                    c3:51:aa:5b:6e:79:33:e0:08:b8:80:38:8a:86:44:
                    0b:9d:eb:17:ee:70:be:f5:ed:76:45:96:e8:95:c9:
                    0c:6a:b8:69:33:61:c4:a7:c5:36:cc:ad:cb:89:b7:
                    4b:0c:cd:ab:01:f9:a6:ae:e3:5b:3a:90:ab:73:a9:
                    bf:c4:97:8b:f2:a8:c3:cc:77:ec:80:a0:98:e6:88:
                    8d:09:22:e8:db:9c:9f:ce:51:2d:02:11:f0:bc:1b:
                    12:f6:19:75:52:30:17:29:41:4b:9a:2a:6b:a4:2a:
                    28:52:87:d5:e8:62:75:fa:91:59:4a:54:b3:4a:6e:
                    2b:c7:23:cf:c3:05:44:05:ff:65:43:c8:fe:b2:e4:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A5:FB:81:B6:FD:5E:85:72:02:43:E1:3A:07:81:E3:A9:62:DD:96
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/EaX7gbb9XoVyAkPhOgeB46li3ZY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:aa:e8:22:61:50:7b:0a:0f:d9:14:a8:dc:ce:8e:58:b7:08:
         83:86:ca:1a:4f:99:3f:90:e1:1b:7f:2e:70:77:61:4b:b5:0d:
         4c:5d:f1:b3:59:36:ca:ba:1e:10:35:3f:5b:ad:9b:17:c6:80:
         bc:f9:7e:54:8a:c3:84:b4:ff:6e:fb:29:27:af:7a:1a:dd:de:
         72:b3:7d:03:2e:69:ad:98:78:fa:4e:85:bf:12:e7:1f:2f:55:
         be:d8:6a:94:7f:31:d9:01:86:72:cc:85:11:f9:be:2c:b3:d5:
         a3:56:8f:c7:da:4a:93:be:43:ed:47:61:72:66:96:22:10:e6:
         f8:68:fa:0c:fa:85:9a:c8:6e:d3:d7:ab:03:8b:45:38:04:ff:
         d8:2e:1b:f3:2a:c9:90:1a:b3:b9:09:69:4e:e6:cc:d7:0a:af:
         d7:6c:36:b9:d1:9a:3b:68:eb:c1:5c:47:e7:49:74:38:4e:c4:
         4b:e6:02:6d:d5:ef:ba:ed:86:0b:b4:83:7e:75:39:aa:97:cf:
         43:8e:96:5c:0d:2f:83:34:17:2b:fc:e9:71:a5:fd:4f:f3:c5:
         39:87:57:fb:8f:13:26:dd:f7:8b:9a:e9:6e:0f:dd:f3:a2:ea:
         c3:9d:c2:8b:0f:df:6d:09:f5:99:66:42:9c:19:3c:00:c0:35:
         10:2c:7d:00
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCRswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx
ODNEN0NCQTZCOUE5Q0FGRTZGNTBCRkIwMzhENjQ1RDI2REM3RjAeFw0yMTA5Mjkw
MjQxNDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDExQTVGQjgxQjZGRDVF
ODU3MjAyNDNFMTNBMDc4MUUzQTk2MkREOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy8cMGN5elE2GHfkzXsDmn7rgEmbZAIQc/IohUJFLwgoGUl5I+
PNr4PuA2RvjrGkOx+RmbXEK3+J2SMQej9nvZeR3GBBbXKdi4crRxUD7h4Wd2JTzp
dSuOPCiP7Rjn0I4Sq6I7N0BtW6+mazonyt6gQowbv5UfWcNRqltueTPgCLiAOIqG
RAud6xfucL717XZFluiVyQxquGkzYcSnxTbMrcuJt0sMzasB+aau41s6kKtzqb/E
l4vyqMPMd+yAoJjmiI0JIujbnJ/OUS0CEfC8GxL2GXVSMBcpQUuaKmukKihSh9Xo
YnX6kVlKVLNKbivHI8/DBUQF/2VDyP6y5ME/AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUEaX7gbb9XoVyAkPhOgeB46li3ZYwHwYDVR0jBBgwFoAUjBg9fLprmpyv5vUL
+wONZF0m3H8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tZQ0xP
VUQvakJnOWZMcHJtcHl2NXZVTC13T05aRjBtM0g4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9qQmc5Zkxwcm1weXY1dlVMLXdPTlpGMG0zSDguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS1lDTE9VRC9FYVg3Z2JiOVhvVnlB
a1BoT2dlQjQ2bGkzWlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ4GIMA0GCSqGSIb3DQEBCwUAA4IBAQAmqugiYVB7Cg/ZFKjczo5YtwiDhsoa
T5k/kOEbfy5wd2FLtQ1MXfGzWTbKuh4QNT9brZsXxoC8+X5UisOEtP9u+yknr3oa
3d5ys30DLmmtmHj6ToW/EucfL1W+2GqUfzHZAYZyzIUR+b4ss9WjVo/H2kqTvkPt
R2FyZpYiEOb4aPoM+oWayG7T16sDi0U4BP/YLhvzKsmQGrO5CWlO5szXCq/XbDa5
0Zo7aOvBXEfnSXQ4TsRL5gJt1e+67YYLtIN+dTmql89DjpZcDS+DNBcr/Olxpf1P
88U5h1f7jxMm3feLmuluD93zourDncKLD99tCfWZZkKcGTwAwDUQLH0A
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org