Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/TsbYyB8Zubx8uNodrXsqWeJUIYY.roa
File:                     TsbYyB8Zubx8uNodrXsqWeJUIYY.roa (raw, json)
Hash identifier:          agsAPeQaYofcdMGLTzWOWnVmKjOrMFxbJ4HWVzG7al8=
Subject key identifier:   4E:C6:D8:C8:1F:19:B9:BC:7C:B8:DA:1D:AD:7B:2A:59:E2:54:21:86
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0995
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/TsbYyB8Zubx8uNodrXsqWeJUIYY.roa
Signing time:             Mon 25 Oct 2021 05:37:52 +0000
ROA not before:           Mon 25 Oct 2021 05:37:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        101.0.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Oct 25 05:37:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4EC6D8C81F19B9BC7CB8DA1DAD7B2A59E2542186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:dc:94:8b:70:65:b2:0c:af:c9:19:36:af:
                    0c:a2:cf:44:b5:88:14:c9:ef:d0:25:5b:f3:83:62:
                    e9:8d:c7:3c:1f:ad:71:d5:9f:d1:4d:12:35:29:28:
                    0f:72:5b:d5:f1:2d:df:47:18:87:18:31:ed:f5:13:
                    79:d0:8c:cf:ef:74:7a:34:de:78:6f:32:12:9b:b1:
                    28:5d:33:43:de:92:0e:a5:48:cc:57:08:27:dc:02:
                    63:37:d0:9a:32:4e:6c:d7:9e:d8:0a:03:37:75:43:
                    d8:b5:ce:1a:0f:5b:c5:83:bb:61:17:a0:f3:b6:68:
                    5d:75:ad:42:af:ff:88:aa:1f:c5:5d:10:c4:5c:63:
                    c8:79:2b:64:10:b1:51:b2:33:1b:c6:7d:9f:1e:65:
                    d4:6d:67:2d:23:f1:06:b5:f6:3f:d0:57:6d:d2:ef:
                    c1:48:62:46:a8:85:13:8f:f0:8e:9e:6f:18:fc:f3:
                    0d:40:04:ab:ea:7a:80:d7:5d:0a:f8:0e:c7:62:42:
                    ca:58:54:3d:66:2f:df:dc:13:bb:bc:04:eb:8c:01:
                    4d:25:9e:2f:0c:c3:a1:6f:7c:f0:7b:fa:87:67:41:
                    ff:81:c7:0b:b4:01:52:4c:07:f7:2b:31:a2:25:ce:
                    ff:82:1d:89:8d:10:d1:6c:a5:61:a3:4f:ae:f2:d2:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C6:D8:C8:1F:19:B9:BC:7C:B8:DA:1D:AD:7B:2A:59:E2:54:21:86
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/TsbYyB8Zubx8uNodrXsqWeJUIYY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:e5:ae:c0:28:f8:99:5e:ea:e8:31:04:58:90:bf:e3:dd:ce:
         22:ad:ff:e8:ad:3b:5b:4b:72:60:3f:1b:b6:c7:a9:36:39:87:
         ad:17:fd:97:26:0a:d6:e3:79:29:bf:40:db:b4:a7:1b:8b:b0:
         c5:f5:d3:fe:4a:05:62:05:a5:20:74:52:9a:82:44:f0:2c:bb:
         ef:e7:b3:70:e6:aa:d9:be:f4:a8:4e:de:ae:86:d5:22:7b:7f:
         5b:67:35:1b:f9:dc:88:c4:12:b0:b7:95:f9:60:6b:67:95:e3:
         29:cd:8e:cc:f6:03:e4:18:40:84:8b:94:f2:c2:5c:55:0c:01:
         fe:a1:4e:6b:d6:28:db:3e:fe:7a:af:85:29:92:fc:d5:5a:33:
         1b:ee:42:44:54:ea:a9:b7:f4:9d:11:4a:b6:b0:34:aa:15:f3:
         2c:59:d2:4b:99:8c:fa:47:a1:e6:71:fa:ba:73:a5:56:48:75:
         49:9f:cc:d3:e9:3c:1d:7a:0c:12:d9:09:91:6a:03:d6:4d:cd:
         88:d2:81:f4:ad:ba:c6:91:69:cc:31:d1:e0:25:cb:c0:fb:0a:
         71:38:90:22:fb:0a:92:c1:64:c9:b4:58:29:41:49:1f:c4:d9:
         b8:66:e8:dd:7e:e0:69:55:0a:ff:28:28:f1:cc:28:f2:eb:64:
         ce:43:90:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org