Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/avToMeoYRoWMD5q-XB6wRgflSBQ.roa
File:                     avToMeoYRoWMD5q-XB6wRgflSBQ.roa (raw, json)
Hash identifier:          T3+e9qo4m0ZK8oOB8U/ltv1dBgwiDVYpcfCLApq3tl4=
Subject key identifier:   6A:F4:E8:31:EA:18:46:85:8C:0F:9A:BE:5C:1E:B0:46:07:E5:48:14
Certificate issuer:       /CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
Certificate serial:       F2
Authority key identifier: 8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/avToMeoYRoWMD5q-XB6wRgflSBQ.roa
Signing time:             Tue 07 Jun 2022 07:42:20 +0000
ROA not before:           Tue 07 Jun 2022 07:42:20 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     14618
IP address blocks:        103.168.156.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C508B7DDA024FB2C9EF7FBBF4FBD02B9F43191D
        Validity
            Not Before: Jun  7 07:42:20 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6AF4E831EA1846858C0F9ABE5C1EB04607E54814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:a0:4d:d4:4e:e3:a4:65:dc:64:42:72:96:
                    9c:f9:75:59:92:35:c2:74:0e:6e:0c:23:b8:ad:f4:
                    05:c6:80:9f:73:43:60:c8:23:e0:31:9c:51:bb:9d:
                    49:27:ac:03:69:bd:53:0d:ed:90:4a:00:d3:7f:19:
                    56:ce:c3:c8:2e:cc:f7:e5:b4:a6:57:18:db:5d:fc:
                    40:b0:7f:dd:69:06:51:85:ac:7e:98:03:e3:53:a6:
                    d3:ae:38:49:08:16:dc:bb:13:49:a4:12:01:b3:37:
                    d9:00:00:1f:a7:5c:76:78:0d:6e:d3:e5:a3:00:35:
                    58:84:d3:8c:5c:4d:44:85:56:91:0a:f6:07:ea:30:
                    54:2d:45:8b:49:f7:d5:e6:df:37:fc:04:b7:3b:01:
                    fa:3a:e0:1d:e2:43:f6:14:88:65:1d:35:30:03:9c:
                    b3:f8:38:78:2c:04:29:b9:38:ed:8d:c1:f9:80:b9:
                    cf:37:5b:d7:cf:96:04:70:b5:a8:84:4f:58:52:b6:
                    c7:71:9c:c4:47:ae:37:6e:02:36:29:1b:43:c3:6c:
                    57:90:8f:d6:f2:20:42:de:ef:cb:cd:da:5a:00:95:
                    0c:8b:08:0d:8c:ee:78:39:ea:70:a8:64:72:e7:38:
                    9c:7d:a3:43:25:ae:ff:80:20:7c:06:00:cd:c2:3e:
                    99:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:E8:31:EA:18:46:85:8C:0F:9A:BE:5C:1E:B0:46:07:E5:48:14
            X509v3 Authority Key Identifier:
                keyid:8C:50:8B:7D:DA:02:4F:B2:C9:EF:7F:BB:F4:FB:D0:2B:9F:43:19:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/jFCLfdoCT7LJ73-79PvQK59DGR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jFCLfdoCT7LJ73-79PvQK59DGR0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYBERLINK/avToMeoYRoWMD5q-XB6wRgflSBQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:5f:99:0b:f1:34:3a:60:1b:dc:c1:cd:2a:ce:aa:16:85:
         0f:d2:38:d0:dc:14:15:35:31:9a:d8:3b:c9:ef:da:3a:fa:0f:
         1c:bf:68:44:84:48:12:c7:78:a8:55:b7:91:0a:59:59:f6:81:
         b3:ed:92:09:89:54:db:39:85:81:a4:02:82:d1:06:61:67:09:
         b2:40:86:65:cd:06:5c:91:55:96:b0:fa:75:74:ed:4d:7e:dd:
         2f:40:ac:79:7b:d3:00:c1:49:9d:1c:5f:8e:d3:4e:3a:a5:c8:
         4c:c9:49:4e:dd:02:4b:ce:0c:df:9d:aa:4e:3e:f2:b9:52:03:
         54:0c:d2:19:65:97:0e:09:76:d7:38:ad:fe:c1:df:55:e0:da:
         63:80:2f:94:49:7f:34:4f:c5:fb:91:47:8a:d5:96:b4:03:e3:
         22:c0:24:05:9a:e3:e0:17:46:2f:61:9d:de:f0:d8:5d:52:e9:
         03:2a:3d:0a:77:56:0d:0b:7e:57:82:a5:1a:d2:30:82:09:2c:
         1a:ce:c0:78:81:a6:76:3d:4d:7f:45:21:05:ec:b8:5c:55:75:
         06:4d:af:e8:64:25:d9:c8:8d:95:cb:63:5d:a2:22:f2:94:59:
         e7:39:15:f0:b4:c9:08:75:46:56:68:d0:94:67:fd:c0:f4:1a:
         d5:c6:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org