Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/_kwYLJamPtkRgAJx_yeUttV0seU.roa
File:                     _kwYLJamPtkRgAJx_yeUttV0seU.roa (raw, json)
Hash identifier:          xglEKb8UDOHTzCoKnfOjzAc+faooTee0cLU6dvsF5Ko=
Subject key identifier:   FE:4C:18:2C:96:A6:3E:D9:11:80:02:71:FF:27:94:B6:D5:74:B1:E5
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0A05
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/_kwYLJamPtkRgAJx_yeUttV0seU.roa
Signing time:             Thu 15 Sep 2022 02:41:35 +0000
ROA not before:           Thu 15 Sep 2022 02:41:35 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131618
IP address blocks:        103.129.136.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Sep 15 02:41:35 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FE4C182C96A63ED911800271FF2794B6D574B1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:3a:83:d2:a1:59:54:de:4f:40:06:69:19:
                    1f:fe:03:07:10:f3:88:79:ab:63:b0:56:72:1a:0a:
                    22:0c:ee:04:1a:e6:cc:53:3e:83:e2:de:17:53:c1:
                    c8:56:5c:4e:68:d7:d7:30:28:61:e2:29:96:67:b7:
                    36:68:08:a6:00:c3:1b:2e:42:9f:12:fa:a1:6c:11:
                    bc:f7:d8:b7:36:fd:49:54:d8:36:4b:9b:be:be:2e:
                    97:c1:92:1d:a4:c1:33:11:56:f2:da:1d:3a:71:92:
                    75:34:f5:07:67:20:14:ae:fb:e5:b4:e1:76:be:18:
                    1b:b5:0d:d5:e2:34:e4:ee:c7:bc:24:86:36:24:bb:
                    81:70:4d:0a:27:8e:6c:79:58:a7:fc:70:1f:34:30:
                    c9:10:06:91:bf:b1:9e:65:61:d6:6f:42:b6:9d:b7:
                    98:74:c2:68:a7:c8:17:3c:5c:98:e8:63:92:ec:b5:
                    4d:36:87:6d:16:c0:78:0a:ff:12:31:b3:a7:c0:48:
                    85:6a:88:df:c2:0c:ae:43:0a:d9:d4:24:f4:f6:b7:
                    a2:d6:93:4a:ea:07:02:03:bc:73:04:10:c1:04:d1:
                    25:05:cd:e7:e4:d9:05:c9:4d:91:cd:08:5d:c3:61:
                    6c:a7:c8:5e:09:42:48:fe:a0:f3:4e:94:7f:e5:d8:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4C:18:2C:96:A6:3E:D9:11:80:02:71:FF:27:94:B6:D5:74:B1:E5
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/_kwYLJamPtkRgAJx_yeUttV0seU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:64:7c:a8:f4:26:00:3f:3c:f6:0f:ef:9f:b5:8a:9f:c1:
         0a:0b:2f:7e:6f:5a:ef:83:3b:e5:2f:67:5c:8f:d6:db:df:ef:
         30:95:77:d1:ed:e5:0c:2b:04:ad:35:dd:50:6b:89:b2:62:9a:
         37:9f:c3:ba:c1:bb:e0:79:7d:ea:3f:f1:5b:e6:af:f5:5e:e0:
         e4:35:a9:fe:f7:85:1a:f6:a5:ce:69:2d:f5:a5:14:87:0f:9c:
         23:44:8a:32:61:21:5e:48:95:7c:a1:b1:53:d3:65:7b:d9:d3:
         0f:eb:b7:03:a9:83:3b:c1:e7:c6:18:81:49:94:70:13:cb:92:
         64:08:52:a5:98:0d:9e:60:21:3b:ee:97:12:b1:25:77:c7:e3:
         b2:42:96:e8:3c:2f:9d:b8:85:0c:73:f9:cd:7b:cc:3b:10:99:
         c3:14:cc:b8:e6:7f:9f:41:1e:ff:1b:a0:71:88:82:99:c1:35:
         cf:04:c0:a6:06:95:f7:e9:f5:68:0f:a4:6f:79:ec:5c:8f:a4:
         0f:ad:20:f7:fb:79:96:f8:3b:e2:a8:b3:e1:c9:38:94:49:83:
         e4:f9:44:9a:46:1b:52:b5:a6:9e:02:87:49:ee:3b:04:03:ab:
         84:e3:4a:97:1f:a7:0f:29:a8:b7:19:64:29:69:68:fb:56:bb:
         b2:97:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org