Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ClN-iUD9qyiuKUMYNL29EK-AND4.roa
File:                     ClN-iUD9qyiuKUMYNL29EK-AND4.roa (raw, json)
Hash identifier:          wie5WA3hxgtFkVNQdrgo2Wm2BM6YY5IDJYhyCLRYJ6c=
Subject key identifier:   0A:53:7E:89:40:FD:AB:28:AE:29:43:18:34:BD:BD:10:AF:80:34:3E
Certificate issuer:       /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial:       05E7
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ClN-iUD9qyiuKUMYNL29EK-AND4.roa
Signing time:             Tue 03 May 2022 04:45:55 +0000
ROA not before:           Tue 03 May 2022 04:45:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     45102
IP address blocks:        103.148.146.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
        Validity
            Not Before: May  3 04:45:55 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0A537E8940FDAB28AE29431834BDBD10AF80343E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:35:78:43:77:96:59:dc:f8:2f:ef:d5:b7:57:
                    82:67:31:8c:38:51:53:9e:ba:95:81:cf:78:f5:1b:
                    40:c2:0a:92:b1:f7:4b:86:67:7f:4e:0b:e7:f4:92:
                    23:17:ea:7e:df:cc:18:c1:07:2d:9b:52:ab:59:fb:
                    0e:c7:fa:b2:37:38:5e:e8:1d:96:0a:a3:24:2e:d4:
                    24:42:2e:ae:7e:e3:da:e4:59:76:45:61:d9:67:45:
                    17:91:e1:cf:27:f0:af:5c:0d:a4:6d:cc:63:6b:2d:
                    e9:74:dd:56:41:b3:3f:4c:96:dc:93:69:45:89:60:
                    82:a9:a9:4c:7b:cf:3b:2a:f6:da:78:a1:34:84:ff:
                    b4:05:90:8a:f4:28:d9:12:46:34:cc:c8:95:81:5a:
                    b1:04:5a:fe:76:35:65:fe:7e:ef:e5:48:bb:be:7f:
                    5b:43:86:f0:92:d5:2a:26:53:5e:38:ba:94:73:68:
                    89:47:3e:6b:99:25:8d:c0:10:e1:62:39:43:78:74:
                    5c:e2:d6:f3:d0:73:37:7e:f0:1d:4d:48:ae:2a:bb:
                    f2:07:39:73:2f:9f:fb:26:0c:6f:2f:0d:39:35:73:
                    7a:9f:1e:2f:d7:7c:39:df:74:7b:6b:82:31:d7:e1:
                    dc:cf:22:00:f2:ec:bf:25:44:ef:f4:8f:6a:6e:63:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:53:7E:89:40:FD:AB:28:AE:29:43:18:34:BD:BD:10:AF:80:34:3E
            X509v3 Authority Key Identifier:
                keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ClN-iUD9qyiuKUMYNL29EK-AND4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:50:f4:cf:bc:a7:e5:bb:81:7b:b9:9a:b1:a5:e0:3a:41:48:
         ac:4d:05:06:3c:09:a5:6d:7d:ab:c3:12:2b:1f:d2:96:4e:fc:
         1c:fa:60:cf:4b:90:76:76:7b:b7:b2:20:d0:54:44:a1:b0:5e:
         db:38:63:d2:31:8f:b6:f3:0e:99:94:00:39:a3:09:0c:b1:fb:
         db:71:54:76:d2:71:ef:6b:05:3d:4f:9f:2d:8d:47:33:d8:68:
         84:6d:e2:02:7e:ef:95:9b:89:eb:7b:35:81:04:63:eb:1a:7d:
         6d:86:86:a9:f6:23:35:fc:77:4c:d4:f8:b9:2f:f6:da:e4:80:
         16:d5:22:9c:45:f1:7b:ec:c0:73:ab:a9:84:d3:f3:a9:76:44:
         5e:dc:21:9d:a9:7e:3f:e1:0a:9a:96:86:23:fe:ec:4a:58:d2:
         9c:9a:d6:f4:36:dd:70:91:37:76:a5:05:9c:50:86:a6:46:27:
         aa:3d:0f:6d:88:32:20:04:83:eb:65:25:c9:4e:90:7b:80:81:
         f3:b7:41:59:af:9f:36:8a:7d:e6:b7:09:c3:81:de:cd:91:f1:
         7a:5c:e0:b8:cf:43:06:32:5d:31:e3:61:86:74:08:ba:3f:5a:
         f6:29:dc:ad:2a:5e:9a:08:08:e5:90:0a:07:2a:dc:4b:27:f0:
         bd:53:10:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:57 2023 by rpki-client on console-fra.rpki-client.org