Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATVISP/ROwjGIcdE87Qjp5oixEeW9DY2LI.roa
File:                     ROwjGIcdE87Qjp5oixEeW9DY2LI.roa (raw, json)
Hash identifier:          MLT8RZRQsdReRndHbiQgo4Bl8h6zNcZUbX2PU4RM754=
Subject key identifier:   44:EC:23:18:87:1D:13:CE:D0:8E:9E:68:8B:11:1E:5B:D0:D8:D8:B2
Certificate issuer:       /CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
Certificate serial:       09E6
Authority key identifier: BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/ROwjGIcdE87Qjp5oixEeW9DY2LI.roa
Signing time:             Thu 15 Sep 2022 02:50:54 +0000
ROA not before:           Thu 15 Sep 2022 02:50:54 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18046
IP address blocks:        103.233.68.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2534 (0x9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD822D992B0F68B61E6E0A2E6143F2BF8915BB61
        Validity
            Not Before: Sep 15 02:50:54 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=44EC2318871D13CED08E9E688B111E5BD0D8D8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:7d:e8:f5:ae:88:68:ff:37:c7:9c:84:9d:
                    38:c9:66:98:1b:0b:e2:9a:52:3e:66:5e:fd:70:c7:
                    97:68:05:1b:54:4c:d9:10:ac:ea:8c:a6:b3:f9:63:
                    c2:47:4e:49:1d:69:1a:dd:b0:a4:53:1d:86:fb:93:
                    5f:c7:dd:ed:1c:01:cb:cf:30:87:b3:91:a8:8a:1e:
                    a4:d3:d7:02:a0:62:b9:cd:ba:dc:b7:46:6a:5d:47:
                    3f:eb:13:89:a4:7c:ed:bc:75:d5:47:38:8a:d3:5d:
                    3c:14:7f:fc:d8:7b:56:15:cd:ed:0c:15:73:ad:16:
                    48:55:a0:f3:ed:ea:75:df:a1:77:2a:ef:eb:97:db:
                    9f:fb:9b:d4:24:f9:79:26:89:40:d6:61:f7:10:28:
                    15:4f:09:e4:cb:44:65:aa:d1:49:69:1a:e4:50:5e:
                    56:14:78:47:a7:7e:5e:b9:2f:16:62:bc:e5:c6:3a:
                    12:0c:60:1d:2b:84:01:e1:59:16:ec:75:f5:3d:3a:
                    e2:69:79:cc:dc:92:ba:a3:d4:27:5a:c2:56:50:2d:
                    ea:42:be:4b:65:54:3e:40:11:3e:4d:6f:65:88:60:
                    2e:6f:79:b0:35:35:c5:53:dd:fb:d3:ec:ce:f2:b7:
                    11:f8:5c:03:34:c4:01:c4:e7:8d:3f:48:76:39:94:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EC:23:18:87:1D:13:CE:D0:8E:9E:68:8B:11:1E:5B:D0:D8:D8:B2
            X509v3 Authority Key Identifier:
                keyid:BD:82:2D:99:2B:0F:68:B6:1E:6E:0A:2E:61:43:F2:BF:89:15:BB:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/vYItmSsPaLYebgouYUPyv4kVu2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/vYItmSsPaLYebgouYUPyv4kVu2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATVISP/ROwjGIcdE87Qjp5oixEeW9DY2LI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:34:1a:68:20:3b:e6:f3:ba:49:66:4c:fc:96:ba:4e:fa:f7:
         fd:7a:fb:58:05:44:2c:31:ff:53:af:92:b1:8f:d2:fe:69:69:
         17:0c:dd:8c:bb:dd:99:8c:25:09:e6:03:36:cf:ba:9d:1b:df:
         1f:87:55:3d:80:b7:63:a9:fa:9b:a7:4a:90:8c:14:17:e2:26:
         9a:42:57:95:ed:9b:04:84:7f:87:81:b0:51:dc:61:95:c2:ed:
         f2:77:f5:5c:58:9d:e8:f6:c2:8b:31:7b:78:b9:24:41:35:4e:
         a2:03:63:ab:df:14:a1:74:02:35:08:87:ba:45:ec:ee:29:4f:
         66:bf:83:7c:9c:9a:a4:ba:e8:83:2d:7f:bb:4f:ca:79:84:c9:
         64:bc:d1:db:ff:0e:e7:0f:66:5b:45:ff:c1:92:76:45:27:f5:
         b4:63:e1:92:fd:03:fa:99:bd:26:bf:26:0a:f0:62:68:bd:ec:
         d0:12:4a:00:80:59:4e:23:a6:80:ec:0e:29:dc:f4:0a:75:f6:
         15:5f:45:d3:c6:60:81:4f:ec:22:e6:c9:25:e9:1c:b1:bd:36:
         d3:eb:b7:63:ff:0a:c7:8b:61:da:77:fc:b4:2a:d6:08:f3:88:
         3a:d9:a5:44:68:c8:03:47:ae:b5:ad:0b:79:0c:e6:6b:9c:75:
         4e:6f:e3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org