Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/WnXHJ7qIhLel7nMuhHz9VFehcu8.roa
File:                     WnXHJ7qIhLel7nMuhHz9VFehcu8.roa (raw, json)
Hash identifier:          hJGzK+nhsGP/CaqgW6LykLlHQ9U9dqy3rgjDc4Hh0sg=
Subject key identifier:   5A:75:C7:27:BA:88:84:B7:A5:EE:73:2E:84:7C:FD:54:57:A1:72:EF
Certificate issuer:       /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial:       0644
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/WnXHJ7qIhLel7nMuhHz9VFehcu8.roa
Signing time:             Thu 15 Sep 2022 02:37:46 +0000
ROA not before:           Thu 15 Sep 2022 02:37:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7483
IP address blocks:        103.148.146.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1604 (0x644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
        Validity
            Not Before: Sep 15 02:37:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5A75C727BA8884B7A5EE732E847CFD5457A172EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:63:b2:bf:e7:0a:96:ac:7e:a3:1f:19:57:
                    e3:db:49:60:f7:45:57:b8:cb:9b:dd:75:b2:37:3e:
                    cb:93:24:a6:17:41:e6:6b:ff:34:64:b7:bf:ad:8b:
                    0f:73:e1:b3:23:82:05:8f:86:af:c3:d9:1a:5c:7f:
                    20:87:0a:42:5e:6f:d4:81:0f:09:10:3c:80:d6:9b:
                    09:3d:70:c0:27:be:83:56:b7:c4:b3:3b:23:a5:e5:
                    f4:48:c6:c4:c0:22:d4:38:47:a5:70:9c:37:1c:c4:
                    5e:df:f0:b8:73:d4:70:e2:8f:e7:65:02:dd:a9:71:
                    0c:9d:4c:9f:4a:f0:79:90:95:49:88:a2:43:b8:cb:
                    f1:f5:64:c7:26:fe:49:5b:34:03:51:dc:c7:88:49:
                    14:aa:a2:7b:b5:21:ee:a0:c9:d5:d7:ad:e5:f8:25:
                    c9:1c:09:13:92:d9:0f:d2:20:b0:cc:2d:ba:7a:3a:
                    e4:3f:42:60:ce:00:bc:7b:61:27:8d:e5:80:67:21:
                    8c:00:cc:e5:80:f1:d8:9c:fe:cb:6a:e8:70:a3:13:
                    59:56:56:b8:b1:57:28:fe:32:3d:f6:49:bf:50:9d:
                    f0:7f:dc:3c:4a:4a:20:32:63:7d:40:33:d0:80:f1:
                    b9:58:af:35:82:1b:f2:b8:90:c0:97:16:57:90:4e:
                    f2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:75:C7:27:BA:88:84:B7:A5:EE:73:2E:84:7C:FD:54:57:A1:72:EF
            X509v3 Authority Key Identifier:
                keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/WnXHJ7qIhLel7nMuhHz9VFehcu8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:1a:46:54:36:84:bd:58:5c:f6:9b:ae:85:53:bf:b8:b1:0f:
         30:e2:3e:94:bf:79:72:6b:d2:8a:71:d5:78:19:be:53:b6:0a:
         eb:46:5a:76:72:b1:42:37:8e:c9:fd:d3:0b:91:e6:29:bd:e4:
         fe:3d:66:c1:d3:12:bb:8b:ba:5d:23:20:55:ea:da:1d:5d:c1:
         6c:51:ad:bc:61:63:8c:b7:dd:6f:4e:ef:6f:a7:88:a5:af:7a:
         6f:6b:69:a4:f8:a1:82:3e:b6:58:0f:35:a4:d4:2e:75:cf:cf:
         92:23:81:ce:f7:e9:71:d8:0b:3c:fe:a0:69:1a:85:13:df:c8:
         90:58:26:2d:66:15:ec:2f:22:04:fd:86:65:bb:81:eb:3d:73:
         87:b1:6e:70:05:4d:56:97:6f:2b:2d:f1:4a:3f:dd:1f:63:a2:
         73:92:88:67:7b:6d:b4:70:f4:f4:23:a4:83:2b:e5:00:61:16:
         de:25:90:84:c8:7e:15:51:5e:3c:56:1c:68:f7:bd:0e:dd:24:
         3c:78:10:34:35:4d:4f:b8:75:75:15:d8:c0:2e:e7:e3:ea:ca:
         cc:ec:dc:7b:f2:a3:c3:70:f6:58:6c:58:52:6f:b1:7a:2d:3e:
         bd:16:5c:1c:52:d1:f9:11:c4:7c:9b:e3:09:1c:3b:d2:10:65:
         6b:6d:eb:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org