Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/3iZlChutKwdkGf8G4bsZPElnBtA.roa
File:                     3iZlChutKwdkGf8G4bsZPElnBtA.roa (raw, json)
Hash identifier:          roFdE3mQR0+gxDX4B0T1QTNfZ9fuGlQhyKDC8q2ny1I=
Subject key identifier:   DE:26:65:0A:1B:AD:2B:07:64:19:FF:06:E1:BB:19:3C:49:67:06:D0
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0C5E
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/3iZlChutKwdkGf8G4bsZPElnBtA.roa
Signing time:             Thu 15 Sep 2022 02:51:06 +0000
ROA not before:           Thu 15 Sep 2022 02:51:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131618
IP address blocks:        103.135.116.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3166 (0xc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Sep 15 02:51:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DE26650A1BAD2B076419FF06E1BB193C496706D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:0a:9c:9b:45:94:5b:11:94:11:73:58:cb:
                    cf:53:6c:28:e3:38:a8:6a:67:61:d0:e5:4e:04:ee:
                    f7:22:91:39:53:2b:a9:53:30:5a:56:e6:81:a9:04:
                    cf:66:a2:77:b4:8a:e9:12:3d:05:0b:a1:c4:16:ae:
                    bd:bd:cd:73:61:c1:ae:c8:b7:9d:02:f3:43:3c:37:
                    26:e2:82:30:8a:30:df:95:6f:a5:9f:b8:3d:9f:23:
                    e2:f8:30:4f:fa:16:db:fb:d5:ad:2a:38:d6:e4:cc:
                    20:4b:de:d6:92:f3:01:1b:55:ae:c1:3c:45:01:98:
                    cf:89:67:4b:57:d9:2d:87:17:ee:f7:17:a9:5c:62:
                    0c:cf:8e:29:b8:bb:b7:44:bf:8a:94:cb:96:53:2b:
                    7c:18:90:9d:95:7e:ae:c9:bc:e2:29:f6:4b:07:1b:
                    f6:ca:fb:01:ac:d8:9f:d1:3b:63:5a:b6:13:bd:8a:
                    30:6f:c2:23:22:f3:fa:1d:8e:bd:7d:4d:6a:32:20:
                    4f:8d:6a:e8:a3:b0:a1:89:72:e3:8e:39:92:e6:da:
                    ba:30:05:43:c1:f8:94:e9:44:51:9b:5f:5f:d4:d8:
                    74:32:29:ef:15:5b:33:c3:04:d2:75:14:09:61:b2:
                    14:8d:7f:30:8d:c5:32:5a:49:15:3d:7f:61:92:92:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:26:65:0A:1B:AD:2B:07:64:19:FF:06:E1:BB:19:3C:49:67:06:D0
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/3iZlChutKwdkGf8G4bsZPElnBtA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:3c:4e:55:3e:e4:46:f3:18:97:4b:ee:b7:2d:68:b4:e8:2d:
         ce:bd:98:3a:77:99:62:b1:e1:5d:5c:38:3e:03:ef:97:ef:34:
         6b:b8:bb:54:7f:c0:a1:e5:7c:ce:a5:ae:12:84:df:10:f1:b6:
         06:3c:37:76:44:fb:a1:23:a4:af:97:63:ca:5d:8e:9e:53:64:
         57:61:8d:60:7c:03:1e:d2:5d:b6:77:a1:07:c2:9b:ce:6f:33:
         8a:8d:d1:bd:b5:16:fd:12:8f:f0:0c:8b:47:38:01:2f:17:bc:
         a7:57:c9:a5:53:61:a4:89:89:70:9c:30:70:8e:35:4b:02:85:
         01:68:b0:8a:8e:b8:26:0b:86:02:0a:50:6b:fd:18:40:c3:a1:
         57:4f:18:77:c8:b3:6e:b7:87:66:72:74:68:6c:34:c0:15:88:
         9f:e0:45:06:aa:97:58:f3:92:24:9e:e1:36:3b:80:bf:15:2a:
         8b:44:21:a6:aa:33:a5:6b:89:12:88:81:10:6b:da:3b:c7:7e:
         64:6a:b2:f0:a1:f9:e1:37:27:72:24:f0:b7:5d:00:55:d5:bb:
         22:30:23:53:60:15:39:78:9c:1a:18:64:c6:d2:4b:57:80:f1:
         6e:4b:a8:63:31:82:20:46:fa:b6:79:d5:ad:71:12:76:b0:2b:
         97:09:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org