Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/n7rG38PL7Q_dhJEy-HIs8dp1co4.roa
File:                     n7rG38PL7Q_dhJEy-HIs8dp1co4.roa (raw, json)
Hash identifier:          3FgX6xH1kc0OKbC+lg6bSu61/AhPU9ntlPAjEcJbRek=
Subject key identifier:   9F:BA:C6:DF:C3:CB:ED:0F:DD:84:91:32:F8:72:2C:F1:DA:75:72:8E
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0B71
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/n7rG38PL7Q_dhJEy-HIs8dp1co4.roa
Signing time:             Wed 29 Sep 2021 02:53:22 +0000
ROA not before:           Wed 29 Sep 2021 02:53:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131618
IP address blocks:        103.135.118.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2929 (0xb71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Sep 29 02:53:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9FBAC6DFC3CBED0FDD849132F8722CF1DA75728E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:f7:19:0e:64:ca:e9:0e:24:c5:13:05:f7:
                    77:07:f1:8d:97:20:36:29:94:de:4d:9f:17:d3:89:
                    bf:53:c4:f8:5b:02:5d:e5:67:14:f2:32:5a:a6:98:
                    d9:f2:c7:e7:3f:f3:75:46:96:15:95:40:d4:4e:5a:
                    15:5e:99:9c:16:b4:f5:7d:e8:94:b9:65:82:a0:e3:
                    b7:9a:d0:9c:26:da:ae:61:5e:27:6c:be:7f:06:21:
                    cf:9e:42:82:22:0b:29:08:ec:09:d0:da:9c:33:fd:
                    ae:11:5a:9f:2b:5c:c5:ab:65:be:cc:2f:c0:f4:df:
                    e1:c8:8d:f4:33:fd:14:41:07:e6:77:0d:db:b9:92:
                    57:b1:3a:11:d4:46:46:b6:0c:48:1c:76:ed:e2:68:
                    22:46:71:04:6c:76:ef:73:22:8a:df:69:5e:08:eb:
                    1e:ae:61:85:eb:7b:3a:08:72:2b:39:b6:28:bb:3e:
                    06:f5:eb:2f:12:fd:db:67:00:28:cb:cb:11:37:77:
                    e1:85:db:24:06:c9:4d:c4:c1:4a:5f:b7:33:06:52:
                    af:69:75:05:23:e9:56:6a:a5:a3:c0:6d:31:4a:b0:
                    d3:53:d8:a4:ef:75:f3:19:91:cd:75:78:62:b3:ac:
                    1b:86:51:22:08:ff:82:70:08:04:36:22:12:a7:68:
                    b7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BA:C6:DF:C3:CB:ED:0F:DD:84:91:32:F8:72:2C:F1:DA:75:72:8E
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/n7rG38PL7Q_dhJEy-HIs8dp1co4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:49:c3:4c:a8:05:6e:2b:95:93:85:43:c6:4a:b1:fc:bd:b0:
         b8:5b:96:d1:ba:23:67:43:17:aa:91:1d:e7:7e:23:56:5f:62:
         48:91:c7:29:4d:a1:65:bc:04:d6:e9:e0:3f:02:d1:07:4e:8a:
         0f:f0:68:44:60:28:4a:42:60:c1:9e:c1:c6:13:57:be:7f:00:
         c5:ef:9d:4e:7b:ea:5c:36:4e:d2:5d:55:5d:d5:98:6e:03:6b:
         6f:84:33:2a:27:c0:58:44:3b:1c:f9:c9:08:9f:f5:7e:96:c3:
         3e:d9:66:ea:0e:ba:72:2b:6f:f4:e4:0f:a9:97:a0:f8:fd:da:
         0e:71:82:6e:4a:46:f8:17:7d:cc:dc:1c:a0:cc:30:61:1c:39:
         a5:ec:c2:43:dc:e4:e4:6d:4d:5f:0d:12:39:e8:82:ce:49:c4:
         e3:32:0f:45:bc:b5:ba:87:16:09:23:0d:ce:73:24:27:e0:4c:
         fd:a5:ee:4e:af:1f:52:12:d2:3c:8a:d6:75:c8:f2:f5:2a:e6:
         c0:b7:d4:1a:c3:a5:40:a2:67:d1:ec:2f:2e:f6:65:5b:1c:08:
         41:c2:be:15:33:6d:5f:9a:55:10:0e:a7:8c:0f:aa:27:bc:fc:
         68:33:c1:45:4c:d5:20:0e:77:23:85:ae:80:65:7f:63:70:1b:
         6a:45:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org