Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/4F39jKxK2FENlwvrvU5SZEP50AI.roa
File:                     4F39jKxK2FENlwvrvU5SZEP50AI.roa (raw, json)
Hash identifier:          AVPgM+yvjnYUX0qidZ/RT0YFwSIX8o6NmFYNN1RWoM0=
Subject key identifier:   E0:5D:FD:8C:AC:4A:D8:51:0D:97:0B:EB:BD:4E:52:64:43:F9:D0:02
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       08CF
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/4F39jKxK2FENlwvrvU5SZEP50AI.roa
Signing time:             Sun 07 Feb 2021 12:58:09 +0000
ROA not before:           Sun 07 Feb 2021 12:58:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        103.234.224.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255 (0x8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Feb  7 12:58:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E05DFD8CAC4AD8510D970BEBBD4E526443F9D002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:13:21:3b:a3:7a:03:ef:4d:80:f6:8c:e1:
                    be:70:3f:72:0f:1f:f9:17:2e:79:e8:4a:cd:38:3e:
                    9a:e5:b3:82:ca:b5:f8:09:36:29:80:5d:9e:5f:cd:
                    3c:ea:bf:68:10:8d:fb:ba:a0:9c:cc:1b:f2:94:84:
                    0f:33:61:14:ad:0d:79:4f:a6:18:c4:e8:42:38:10:
                    44:67:df:d7:71:c3:0d:dc:07:0e:1d:d1:91:0b:6c:
                    c6:97:93:71:e3:53:d3:c7:0a:9b:14:69:9c:e5:f6:
                    aa:60:e9:fe:5a:60:c4:72:00:a2:08:b3:c1:6b:57:
                    5b:4b:3e:11:25:4f:2e:97:98:d3:ca:42:c2:06:7a:
                    60:12:71:45:59:39:c1:89:7d:d5:de:69:b3:1d:27:
                    c0:1b:d5:78:99:30:c6:d2:32:d8:f2:f2:07:b5:a9:
                    9c:9d:25:c2:1a:2e:1c:43:df:7b:ee:25:84:24:8d:
                    8c:77:66:1f:59:a2:56:53:f7:df:f2:97:13:9c:7f:
                    c1:f1:57:d2:0b:03:36:d0:d7:31:78:cc:26:eb:b7:
                    fc:5d:20:7e:77:a7:f3:db:c7:a1:7c:a8:0a:18:5a:
                    72:5f:e0:d8:6f:f9:ca:36:e7:c8:09:da:c9:05:06:
                    7e:ef:05:5f:53:b7:16:06:7e:09:72:4c:15:f2:6b:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5D:FD:8C:AC:4A:D8:51:0D:97:0B:EB:BD:4E:52:64:43:F9:D0:02
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/4F39jKxK2FENlwvrvU5SZEP50AI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:31:64:41:34:41:cf:99:60:97:02:1d:b8:fb:57:01:93:6d:
         c1:49:82:fb:56:62:5f:0c:68:19:d0:b2:a5:16:bb:a7:39:c6:
         e1:5a:e5:c3:dc:5a:51:23:2c:6b:51:ef:3d:98:cd:5a:8e:c3:
         aa:6f:29:41:d6:c3:12:1e:ca:89:c0:00:48:9b:28:27:69:aa:
         dc:1b:ba:ac:0a:cd:ae:7c:c6:23:33:18:34:d7:f0:bc:0c:4c:
         98:2d:6b:23:23:7f:e5:bd:d2:ab:40:e2:66:b3:80:e9:fa:27:
         2d:d9:37:07:15:2d:84:d2:7a:6c:cb:43:be:9f:06:50:47:fc:
         d6:e4:32:54:27:c7:99:8d:64:d4:d5:18:ab:cc:b9:ab:72:dc:
         e1:b8:e5:fc:bf:5f:7e:3e:5c:ce:21:4a:c8:03:01:bd:93:ae:
         b9:d1:94:88:89:70:62:b4:78:51:14:8e:78:84:17:b5:e1:b7:
         93:40:0a:77:1a:64:13:23:fe:02:ac:71:5b:98:39:85:2a:a6:
         de:72:48:00:fb:31:74:ff:9f:19:e9:6e:88:6a:ed:08:7f:3b:
         3c:fa:e7:13:af:44:e6:24:97:d8:cd:69:85:ca:7e:73:93:67:
         0a:2e:d3:76:a4:94:1a:99:b2:d5:cd:eb:63:7d:44:c9:4f:cc:
         ed:66:a3:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org