Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/gfKyV7LNa5_UodjM564TxNC7GO0.roa
File:                     gfKyV7LNa5_UodjM564TxNC7GO0.roa (raw, json)
Hash identifier:          0Agxal4GoisPkaQ2pk6LssLaYzD132dur/EBy3x36VA=
Subject key identifier:   81:F2:B2:57:B2:CD:6B:9F:D4:A1:D8:CC:E7:AE:13:C4:D0:BB:18:ED
Certificate issuer:       /CN=1AB2E7A40EC81FDE8A617E9FAB5E6182479CCC2B
Certificate serial:       0A30
Authority key identifier: 1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GrLnpA7IH96KYX6fq15hgkeczCs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/gfKyV7LNa5_UodjM564TxNC7GO0.roa
Signing time:             Thu 15 Sep 2022 02:49:00 +0000
ROA not before:           Thu 15 Sep 2022 02:49:00 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18421
IP address blocks:        202.6.104.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2608 (0xa30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AB2E7A40EC81FDE8A617E9FAB5E6182479CCC2B
        Validity
            Not Before: Sep 15 02:49:00 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=81F2B257B2CD6B9FD4A1D8CCE7AE13C4D0BB18ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:98:94:37:26:ab:11:9b:88:53:51:f0:63:
                    ca:eb:67:de:32:a8:18:60:d9:f8:7d:1b:8a:db:dc:
                    8d:05:86:ac:5e:73:0f:7e:b7:ec:b6:46:ea:65:99:
                    db:06:b9:94:d2:52:87:e3:aa:28:06:34:1d:7c:cb:
                    1c:2d:ed:c4:8f:b1:b3:f4:9b:6f:55:c5:cf:d8:f3:
                    ae:bb:25:c8:d4:7c:18:57:69:19:cf:8b:78:e2:c3:
                    a0:a0:6b:9a:2d:6c:82:00:68:78:76:eb:f2:18:70:
                    d9:f1:82:26:01:20:ed:36:41:70:b6:e0:ed:22:cb:
                    4e:4c:14:86:27:b1:58:e5:2d:23:ef:35:c1:4c:c3:
                    5f:fe:fd:6b:cc:0e:f3:96:3f:9a:2e:aa:1e:2a:ce:
                    a5:bc:10:bc:b2:b3:9e:20:14:de:e7:da:44:86:13:
                    1a:cd:5a:e9:4b:19:57:a0:a0:7a:d4:74:eb:cc:2e:
                    e8:8d:98:06:c4:de:ad:00:68:bf:a3:07:c5:63:01:
                    4d:8b:2f:7b:89:66:6b:d4:3f:19:f0:57:0d:4f:c3:
                    a6:19:6b:f6:19:7e:07:af:b5:db:28:35:16:49:d6:
                    6c:3e:9a:b5:12:e6:e1:7e:6b:d5:42:dc:bf:e3:f9:
                    4f:69:2d:5c:a3:30:3b:6d:1e:17:d3:98:0b:83:40:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F2:B2:57:B2:CD:6B:9F:D4:A1:D8:CC:E7:AE:13:C4:D0:BB:18:ED
            X509v3 Authority Key Identifier:
                keyid:1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GrLnpA7IH96KYX6fq15hgkeczCs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/gfKyV7LNa5_UodjM564TxNC7GO0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:e9:d4:ce:12:05:4f:87:bf:86:09:78:41:c9:45:27:fd:
         ec:91:cc:46:0e:64:07:81:f4:71:7a:cb:b1:de:12:bc:be:48:
         ef:b4:38:72:95:c3:36:ca:49:2c:9c:03:50:26:e8:a7:14:f3:
         94:f5:d3:6a:8a:9a:bf:ae:4c:d4:a5:34:6a:12:38:9a:d5:3e:
         e9:bf:22:05:87:9d:5f:1c:4d:f8:5a:f1:d1:63:20:f5:6d:3f:
         3d:64:4d:0f:4d:87:01:26:d1:05:44:dd:0b:b9:6c:75:2f:15:
         13:ec:65:1a:c3:bf:08:e3:19:74:e6:17:d8:50:46:5c:f9:71:
         81:29:c3:3d:52:23:3d:92:06:ae:26:b8:3d:ff:4f:b3:3c:99:
         de:9d:51:76:2a:d8:64:70:c6:7b:36:cc:eb:a4:d1:04:a5:02:
         0d:1d:7f:ef:a0:66:25:fc:89:0b:e7:7b:25:34:74:dd:0c:d3:
         94:4c:c2:f8:9c:4d:b4:9d:67:73:37:3d:33:7b:66:32:15:61:
         84:3a:eb:28:5c:7f:37:72:6e:9d:24:08:12:c8:6f:fa:cd:1e:
         e6:be:5e:d9:7a:42:18:52:78:5a:48:4f:de:4a:6f:e2:f6:44:
         cb:7b:1a:3d:e9:fa:00:50:a9:19:25:dd:fc:fa:a6:36:bb:3d:
         75:8a:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org