Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/m96AAVCmilPnDILA075QBFNt8uw.roa
File:                     m96AAVCmilPnDILA075QBFNt8uw.roa (raw, json)
Hash identifier:          6GCNqiNU1FmlZfZZcnuyqNn9ncxBr/Oa0JpPjN7s5Tw=
Subject key identifier:   9B:DE:80:01:50:A6:8A:53:E7:0C:82:C0:D3:BE:50:04:53:6D:F2:EC
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       08D3
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/m96AAVCmilPnDILA075QBFNt8uw.roa
Signing time:             Sun 07 Feb 2021 12:58:13 +0000
ROA not before:           Sun 07 Feb 2021 12:58:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        101.0.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259 (0x8d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Feb  7 12:58:13 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9BDE800150A68A53E70C82C0D3BE5004536DF2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:44:4f:94:f3:41:5e:23:bd:22:ba:cc:a5:
                    29:4c:13:5d:ed:98:a1:a4:18:4c:66:d1:51:fa:87:
                    06:dc:b0:fc:8d:8d:a9:8d:50:4a:6e:ce:c2:05:9e:
                    22:57:aa:4d:d7:bd:b5:cf:05:e7:5c:83:2e:ee:57:
                    58:3d:41:3e:24:b3:02:87:13:62:64:f3:f9:15:6f:
                    0d:a8:d6:7c:e4:8e:93:42:bf:95:8b:cf:15:28:47:
                    ea:f8:1e:5f:3e:a0:15:8f:e7:e9:3f:4c:8a:c2:e1:
                    2f:ef:9c:e0:d7:f2:bf:fe:52:66:0c:7a:94:c7:98:
                    fb:28:ff:ec:e2:93:af:6b:5f:fd:1c:1a:d3:0c:71:
                    52:44:69:04:e9:40:70:80:5b:91:bf:ce:d1:c0:32:
                    ae:ee:4b:48:94:a9:13:19:6d:12:b7:fa:2c:5d:41:
                    e4:05:53:70:8d:53:54:bc:a2:82:ea:8f:21:20:89:
                    02:71:f7:bd:13:4a:a2:8e:c9:d5:de:ec:41:52:2c:
                    ec:9b:9c:8f:d5:8d:1b:ee:cd:02:28:d7:dc:66:47:
                    c9:6e:f3:26:6a:44:37:07:de:4a:87:03:83:10:36:
                    a6:27:51:fb:23:e6:e6:be:24:e9:ea:b4:55:df:67:
                    83:73:c8:a8:aa:b7:2e:54:00:08:af:22:ea:97:4f:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DE:80:01:50:A6:8A:53:E7:0C:82:C0:D3:BE:50:04:53:6D:F2:EC
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/m96AAVCmilPnDILA075QBFNt8uw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:2b:b3:4a:cf:a9:9c:49:a7:ef:00:31:91:8a:5d:4e:55:49:
         07:61:2f:c5:22:5b:66:c0:57:22:86:66:5b:3c:d3:6a:7a:c6:
         b4:68:05:21:f2:98:98:5a:bf:d9:7f:65:70:86:dc:32:c4:6d:
         e6:c7:52:63:fc:c2:b3:f2:da:09:81:43:04:28:5d:ff:e5:96:
         74:e7:d2:20:70:3e:37:bc:3e:10:26:cc:c6:cc:f8:5a:31:d7:
         31:e4:34:fd:ec:d6:97:57:6e:5b:52:5f:5b:c6:b5:7a:3a:b0:
         84:5d:dc:1c:66:60:7b:a5:ef:e6:74:cb:d4:47:21:2f:01:4b:
         cc:77:4a:40:65:17:a7:bf:d3:41:29:26:29:a3:1d:1d:a1:80:
         50:d3:93:aa:da:32:47:fe:08:2f:3f:ad:fb:a1:9e:c9:ec:7d:
         11:53:59:08:b9:f6:6c:ed:e6:a4:e0:02:03:fb:27:25:8a:fa:
         4d:02:10:fc:ea:ca:6a:83:9f:19:2c:57:00:fa:e8:a4:7f:da:
         c5:df:b5:4a:0e:8f:de:bb:8d:56:54:86:2e:25:38:13:89:b6:
         34:1f:c3:a2:7d:ce:6d:84:b7:d7:e6:17:fb:4e:80:02:4e:17:
         74:96:39:9b:0e:86:54:b5:1d:11:fe:14:49:de:a6:8c:7d:de:
         70:ba:c0:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org