Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/msv78hur04_JPMYB-Fu72n4N0lo.roa
File:                     msv78hur04_JPMYB-Fu72n4N0lo.roa (raw, json)
Hash identifier:          oyFa9Pq5/Mg619sHyz0umHMLy0xNWpO1Fs3lvSoRoAY=
Subject key identifier:   9A:CB:FB:F2:1B:AB:D3:8F:C9:3C:C6:01:F8:5B:BB:DA:7E:0D:D2:5A
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0E22
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/msv78hur04_JPMYB-Fu72n4N0lo.roa
Signing time:             Thu 29 Dec 2022 09:32:16 +0000
ROA not before:           Thu 29 Dec 2022 09:32:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18049
IP address blocks:        175.111.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3618 (0xe22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Dec 29 09:32:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9ACBFBF21BABD38FC93CC601F85BBBDA7E0DD25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:84:95:4c:d4:b3:f2:d8:35:0d:53:9c:c1:
                    4a:fe:5b:38:c7:43:58:e1:d4:ee:cf:61:fb:1e:85:
                    e4:3a:ab:1d:16:ca:3c:dc:e4:3c:c8:ae:61:95:40:
                    44:a9:58:3e:0f:65:fe:53:29:17:1e:d9:95:2f:59:
                    b7:28:20:34:51:f9:ee:99:02:fa:bb:20:d4:21:1c:
                    08:08:6f:21:d2:12:b0:02:36:4c:11:de:5e:11:4e:
                    d3:02:fd:70:35:54:34:a9:84:df:ec:0e:c0:bb:d5:
                    1f:97:f5:e0:2e:e0:3f:9d:01:8a:3e:4d:ff:72:e9:
                    c6:31:09:ce:4e:37:bc:2d:8a:4d:ac:7e:3e:67:a9:
                    0f:d6:3e:96:33:41:ce:a3:d0:8c:40:ad:d8:2a:92:
                    e1:e6:b7:20:c2:44:d2:6f:15:79:c1:24:1d:96:3f:
                    29:b5:9f:16:f6:05:fb:19:d9:3f:f9:1b:0d:c0:b1:
                    ee:17:9f:99:8d:ac:d9:4b:dc:62:4d:4e:75:d1:c4:
                    a3:91:f0:88:e5:42:24:46:25:9d:70:54:d8:54:60:
                    a3:76:ae:56:5f:f5:cb:19:11:50:01:43:4b:a1:b4:
                    3b:97:d7:14:22:62:b9:8f:be:12:45:d4:0e:c5:5e:
                    18:16:50:ca:87:de:9d:32:bc:57:01:17:0e:03:48:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CB:FB:F2:1B:AB:D3:8F:C9:3C:C6:01:F8:5B:BB:DA:7E:0D:D2:5A
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/msv78hur04_JPMYB-Fu72n4N0lo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:ff:eb:83:a0:54:ce:2f:3a:b2:a8:ec:d0:4c:5d:b7:b9:68:
         88:02:76:fe:8a:e0:f5:ed:1e:1b:ee:fd:77:51:93:17:8b:10:
         fb:a7:a3:56:84:3e:7e:62:02:bc:a3:75:15:1d:f6:27:b9:6e:
         61:a1:cf:a4:d3:88:b9:50:da:4f:cf:0a:a1:27:c8:f7:d6:6c:
         cc:0a:e1:19:67:74:3f:af:b9:8f:6b:59:f0:ba:bc:a0:77:cc:
         ad:40:45:85:e6:f5:b3:93:30:15:57:3a:1c:f3:f3:07:25:b6:
         c0:4f:67:5a:4e:65:a3:59:37:b1:62:92:aa:2b:54:ea:b5:f1:
         14:e0:df:18:42:b6:62:a1:47:f2:2d:58:7b:1f:dc:6b:73:2f:
         9c:77:3c:9f:63:df:b8:10:e3:a9:8d:c0:8e:31:d6:aa:ee:27:
         c5:b8:f5:c8:90:2d:23:d2:6f:d3:24:8c:81:7f:0b:25:36:c0:
         98:92:df:90:d7:f7:71:b0:2e:27:bd:96:7f:01:3b:d7:c6:24:
         8a:ba:cc:f9:cc:ed:49:67:6f:6d:d7:7c:b7:43:d6:e3:75:56:
         9f:18:1a:db:ef:da:b4:70:1b:93:e8:63:8d:70:6c:e7:3f:fa:
         b5:fd:3b:e4:0a:41:95:a1:7a:cb:87:58:35:a0:97:80:e7:b1:
         eb:bf:4a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org