Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/6vAS1vZzihNkT-AQVtrh8q6soBw.roa
File:                     6vAS1vZzihNkT-AQVtrh8q6soBw.roa (raw, json)
Hash identifier:          brrYS7UEZxmOfqaHhsodRCIL5TQOU+vEhOqT2/Jx5yI=
Subject key identifier:   EA:F0:12:D6:F6:73:8A:13:64:4F:E0:10:56:DA:E1:F2:AE:AC:A0:1C
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0993
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/6vAS1vZzihNkT-AQVtrh8q6soBw.roa
Signing time:             Mon 25 Oct 2021 05:36:23 +0000
ROA not before:           Mon 25 Oct 2021 05:36:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        101.0.232.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451 (0x993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Oct 25 05:36:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EAF012D6F6738A13644FE01056DAE1F2AEACA01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:21:4b:32:06:ec:42:e4:39:a5:4d:34:86:
                    4d:3c:ac:c5:04:3b:95:f2:d2:e4:76:a5:61:1d:9a:
                    bf:cc:48:54:92:a3:3a:ec:f2:9c:f2:d0:b9:a8:47:
                    ef:34:36:9b:ad:1e:c0:41:56:54:aa:a5:c5:03:3e:
                    e4:69:6f:55:b1:86:b8:ff:6e:3e:bc:62:15:9c:b4:
                    db:45:c4:75:ec:af:78:bb:a0:c6:3b:d1:e0:2d:73:
                    c5:f9:11:93:b6:6e:2d:f4:ac:2a:e7:47:1d:a9:4c:
                    d3:6c:24:de:97:34:29:00:b0:2b:cf:fb:63:25:9b:
                    0a:d5:da:3e:16:a2:84:6d:02:03:ca:d5:40:ea:27:
                    d6:67:96:cc:b5:be:50:fc:9d:75:f3:2a:c1:a7:64:
                    e6:96:f0:9c:20:65:e2:fb:b5:5c:c9:83:58:2c:fb:
                    82:be:14:4a:d4:57:7b:2b:ff:35:23:00:ea:c8:89:
                    55:ee:43:3a:dd:ef:f2:a4:56:50:92:4d:a9:4d:09:
                    60:5a:37:03:15:df:9a:37:3a:9d:bf:d6:40:9b:a1:
                    b0:92:a5:b1:43:8b:f5:e1:97:bd:15:34:f8:9a:08:
                    30:d8:ba:6b:f8:01:69:71:7c:ab:93:f3:03:d5:23:
                    2a:40:ff:02:c1:74:b0:c8:c5:c9:46:f5:d0:ff:51:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:12:D6:F6:73:8A:13:64:4F:E0:10:56:DA:E1:F2:AE:AC:A0:1C
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/6vAS1vZzihNkT-AQVtrh8q6soBw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:56:6d:44:19:54:df:94:c1:ef:95:0c:eb:05:f0:5d:43:32:
         c8:30:62:44:3f:32:74:90:45:7a:52:14:a3:9c:0e:f6:8e:51:
         c3:0b:b5:39:0a:b3:c0:25:e4:99:8a:6a:fd:dc:43:28:bf:02:
         82:a3:f3:49:6c:3d:d4:2f:03:7a:f7:fa:6e:3b:d3:1c:8d:44:
         ed:be:04:15:c4:00:d7:2b:e6:99:ad:7a:cc:4d:d4:6b:8e:0f:
         bd:70:2d:d1:d2:45:c5:57:36:65:f2:a2:90:cf:a7:3f:fc:d7:
         b6:5e:2b:ab:79:f6:e6:83:a9:4e:cc:76:80:c4:36:7b:98:80:
         0c:dc:5c:77:17:b2:d0:62:b0:29:21:5b:f1:42:26:e4:c3:1a:
         0b:ea:ea:42:2a:db:a7:42:4e:ee:24:27:c7:57:32:f2:cc:0d:
         10:13:57:5e:93:b3:ae:ae:82:6b:f5:2a:5f:1a:e8:a4:e3:fd:
         e7:5d:b2:74:94:ef:83:5f:3e:a8:e5:fe:a4:ff:6e:e4:0b:64:
         56:df:61:05:dc:e3:1d:93:8c:e5:0d:5c:04:3a:41:e5:af:88:
         fa:40:2e:d3:3a:c2:49:1f:65:5f:57:e3:ce:64:6b:22:c0:48:
         3f:6c:80:88:a5:fa:7a:24:8a:51:bc:81:22:03:ee:32:5a:d6:
         38:3c:15:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org