Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/txsDe7NKGtOOVtEfLDO8eloTE1Y.roa
File:                     txsDe7NKGtOOVtEfLDO8eloTE1Y.roa (raw, json)
Hash identifier:          i0xtcP4uuaM0a4x1oE2JZyp7gNJsjrJTR54yainGC/Q=
Subject key identifier:   B7:1B:03:7B:B3:4A:1A:D3:8E:56:D1:1F:2C:33:BC:7A:5A:13:13:56
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       08DB
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/txsDe7NKGtOOVtEfLDO8eloTE1Y.roa
Signing time:             Sun 07 Feb 2021 12:58:19 +0000
ROA not before:           Sun 07 Feb 2021 12:58:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        122.200.152.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267 (0x8db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Feb  7 12:58:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B71B037BB34A1AD38E56D11F2C33BC7A5A131356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:47:b6:f4:02:3b:36:3e:8e:f7:54:64:9e:
                    22:bd:d1:4b:e1:75:25:74:16:33:7c:86:16:d7:db:
                    0f:dd:06:91:ba:1b:d5:6d:ad:16:0f:30:f3:ee:53:
                    90:7a:cd:86:bd:91:df:16:c8:4e:5a:da:62:a2:9a:
                    93:1e:ab:4d:be:6b:fa:21:6f:7b:de:bf:28:70:99:
                    6c:38:f6:81:ce:f8:25:92:09:14:9c:ea:78:2f:35:
                    8e:a7:42:3f:d1:3a:9a:24:c0:17:0d:92:93:ab:d3:
                    97:44:58:38:d4:54:19:4a:f8:76:7c:70:5e:69:16:
                    d7:bb:49:1f:a4:9a:ba:8f:2d:ba:2c:f1:20:3a:db:
                    26:f3:3e:80:8d:65:f2:92:38:2b:d9:ed:74:69:bc:
                    95:f6:39:37:8e:7c:71:9c:79:3d:0f:79:0f:e9:c3:
                    04:3f:ad:7d:53:8a:4d:0f:01:02:b9:23:f5:30:8f:
                    a5:1b:bf:17:e8:60:1b:c7:43:07:04:cf:5c:db:c5:
                    43:80:5b:75:12:5b:bc:97:1b:f3:17:a8:cb:dd:3e:
                    40:b9:5b:08:b9:1a:0e:11:f5:c8:cc:95:65:74:91:
                    a5:c7:81:13:80:c9:d4:d6:78:09:90:94:80:eb:f7:
                    dc:02:e9:01:9a:3b:29:9a:ce:60:1e:3e:ab:11:13:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1B:03:7B:B3:4A:1A:D3:8E:56:D1:1F:2C:33:BC:7A:5A:13:13:56
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/txsDe7NKGtOOVtEfLDO8eloTE1Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:a4:76:2f:58:22:de:53:cf:57:45:50:ed:6e:eb:b2:58:57:
         ad:36:fb:d7:f0:6f:14:8f:e4:ae:2a:a2:02:f0:7c:dd:cb:94:
         fe:b9:68:78:85:29:56:9d:5d:8c:37:60:ef:22:24:54:55:e3:
         a3:4e:36:7c:fc:4e:99:ff:56:2a:d6:7f:bf:f2:f8:bd:e9:ef:
         b9:49:be:3e:be:64:b4:8f:a5:54:ff:44:ec:4d:c7:e5:28:c6:
         f6:e2:2d:7c:8d:50:c0:fd:3b:1d:2b:0e:f5:06:0c:c0:e4:6b:
         37:6f:71:4e:48:fd:86:33:c6:5d:1e:1b:bd:3f:0d:01:d0:95:
         54:ef:64:0e:88:20:0b:43:7c:c4:72:a2:60:c0:59:3b:9d:80:
         29:6d:fc:72:9e:36:45:e7:ec:d3:29:92:40:8a:25:d4:ea:7d:
         f8:25:5d:65:0e:61:a6:49:2e:57:3e:e9:44:86:ba:b4:25:d0:
         46:10:1c:6d:d5:81:0b:96:8f:83:95:c1:46:4a:10:d6:5a:ac:
         e3:b6:af:08:7e:96:27:be:18:2c:bb:a8:fd:fb:05:ee:48:00:
         74:a5:c7:2d:77:eb:6e:1f:ef:b2:a5:bf:a9:07:98:7d:6f:31:
         26:32:7c:d2:3f:d2:d1:2f:90:ae:76:63:75:dc:c6:64:ec:88:
         63:09:49:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org