Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/uJJPVy2ehatnpn4v7tsYF_m6qUY.roa
File:                     uJJPVy2ehatnpn4v7tsYF_m6qUY.roa (raw, json)
Hash identifier:          h21YjyGtTZkFkvSu6gkQnOnvMahkIdVqP9xhy0racKI=
Subject key identifier:   B8:92:4F:57:2D:9E:85:AB:67:A6:7E:2F:EE:DB:18:17:F9:BA:A9:46
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0A83
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/uJJPVy2ehatnpn4v7tsYF_m6qUY.roa
Signing time:             Thu 13 Oct 2022 10:47:09 +0000
ROA not before:           Thu 13 Oct 2022 10:47:09 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24172
IP address blocks:        103.234.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2691 (0xa83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Oct 13 10:47:09 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B8924F572D9E85AB67A67E2FEEDB1817F9BAA946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7a:80:6e:bd:f1:9d:a9:d6:21:69:b1:17:9d:
                    7a:40:cd:92:02:8a:0a:34:fd:e6:72:0c:e2:cb:68:
                    c5:e7:af:36:69:aa:25:fb:77:e2:a1:0e:23:98:9c:
                    18:ac:1e:30:9d:13:f8:06:d6:3f:8f:7f:fd:8a:d9:
                    66:4f:95:62:1d:54:6b:2c:2b:d1:03:1f:19:7b:d3:
                    ac:6f:2f:c2:3f:55:4a:5a:6b:db:f3:86:c1:a1:84:
                    fb:76:af:c5:19:c7:3b:b8:28:bc:3e:0c:41:bc:f0:
                    99:9e:e4:08:a6:34:7a:1f:7d:b1:72:a9:47:c0:af:
                    71:e8:77:4d:60:6a:15:c6:67:90:df:38:79:be:16:
                    92:e1:63:91:c2:c4:33:74:a2:4b:00:17:d1:3e:d5:
                    a3:1b:c7:ce:7e:c3:c6:ee:13:9c:82:25:2d:4f:be:
                    e3:7b:f0:79:6c:e1:b5:d7:16:f2:f4:4a:85:c0:85:
                    59:d4:bb:63:41:46:96:32:ad:25:71:3f:4d:84:85:
                    2a:23:03:d3:64:f4:79:c8:5b:24:26:47:2f:6b:88:
                    9c:70:46:55:f3:35:20:93:28:ba:20:a4:38:05:b2:
                    63:ff:93:5c:62:ec:fb:1f:59:7e:94:c3:8d:0d:6a:
                    58:94:af:11:7c:41:9a:5f:54:38:78:e6:c4:90:0f:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:92:4F:57:2D:9E:85:AB:67:A6:7E:2F:EE:DB:18:17:F9:BA:A9:46
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/uJJPVy2ehatnpn4v7tsYF_m6qUY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:63:53:3d:3b:19:6f:af:bc:a4:4f:2c:3d:c8:01:9d:ae:f0:
         7d:26:3b:87:9d:ba:fb:e2:7a:31:09:c1:b6:13:8a:02:b5:a2:
         4a:84:5d:89:11:78:90:06:b0:d5:29:f7:a5:c7:0d:66:bf:af:
         a8:0d:a4:bc:24:09:b2:c2:f7:d9:61:3e:01:de:1d:1d:42:37:
         54:45:a5:a8:96:1e:56:4f:6f:58:79:05:32:ab:25:15:23:93:
         af:23:a1:cc:de:c8:60:e6:3f:7d:52:47:a0:f3:a3:0e:b9:0b:
         6e:5c:55:d1:32:8b:c7:04:6f:9e:bf:04:25:ca:43:d8:29:f5:
         92:fd:e3:a5:c6:df:85:ee:e7:f1:4c:32:37:28:0c:b9:43:f6:
         63:1b:fa:cf:cb:7a:00:d7:2e:09:11:48:be:34:e2:86:61:86:
         38:3e:eb:2e:da:e0:ab:0d:2d:80:0a:3a:99:ec:15:db:48:66:
         ea:af:44:ca:4a:03:1a:ae:3e:60:a2:eb:c6:a4:36:14:cd:3f:
         b7:91:0e:83:ea:b6:f7:b7:64:54:c2:68:0e:41:85:1d:28:3a:
         59:7a:72:f5:4a:ca:82:8a:60:cc:20:0e:94:f8:ac:2a:40:7b:
         a7:61:7b:24:82:04:96:e0:9c:ef:54:62:87:4f:0f:0d:a1:6a:
         b4:8b:77:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org