Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/6onVnJCt26KPAmh1OMsy7JZyTzQ.roa
File:                     6onVnJCt26KPAmh1OMsy7JZyTzQ.roa (raw, json)
Hash identifier:          g01DFr92ej19ZespH1YeoNJPY2gRd/gU2MTWiUmaT3w=
Subject key identifier:   EA:89:D5:9C:90:AD:DB:A2:8F:02:68:75:38:CB:32:EC:96:72:4F:34
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       095F
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/6onVnJCt26KPAmh1OMsy7JZyTzQ.roa
Signing time:             Wed 29 Sep 2021 02:52:37 +0000
ROA not before:           Wed 29 Sep 2021 02:52:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18046
IP address blocks:        61.56.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399 (0x95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Sep 29 02:52:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EA89D59C90ADDBA28F02687538CB32EC96724F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:60:a7:9f:17:30:82:f9:43:0a:30:87:57:
                    d1:e7:01:f7:d5:18:a4:e3:93:a0:ed:5f:9b:64:0b:
                    85:f7:db:68:d1:93:4e:12:8a:ad:0a:2c:12:bf:27:
                    c4:f1:9a:6e:04:02:67:b2:fb:69:ac:cd:23:7d:68:
                    72:39:a4:02:73:d0:35:39:04:0d:49:3e:c7:90:70:
                    be:da:07:c4:d1:8c:10:d1:61:13:d1:db:97:20:61:
                    03:b0:bb:08:94:d4:57:13:0e:60:a0:39:bd:35:ef:
                    70:2f:35:37:81:40:48:b2:bf:99:36:e3:46:d7:dd:
                    df:ef:c2:96:a6:aa:ac:9a:d6:3b:b3:ba:51:7f:42:
                    f5:a5:c4:35:27:b8:b9:23:0b:ab:8e:a6:79:cb:e5:
                    43:c3:f2:79:99:c4:99:59:15:85:3a:ea:40:37:11:
                    91:0a:30:44:6a:ec:f7:04:16:5b:4b:ab:88:c9:3f:
                    f7:54:7d:29:e3:25:ce:b9:c9:39:d5:ec:d7:73:b0:
                    a1:fe:89:26:97:f5:bd:a6:65:4d:2d:f3:6b:fb:a1:
                    6d:d7:b8:b9:22:bd:f0:bc:7c:c1:9c:05:6c:a1:83:
                    49:0d:da:2a:2e:ab:f6:d6:8d:8f:54:94:f7:ca:0e:
                    99:0b:74:1f:96:b2:47:68:15:87:97:40:d0:bc:24:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:89:D5:9C:90:AD:DB:A2:8F:02:68:75:38:CB:32:EC:96:72:4F:34
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/6onVnJCt26KPAmh1OMsy7JZyTzQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:47:8a:46:f4:0e:92:97:c8:9b:9a:b9:ea:37:82:47:53:be:
         e6:9b:52:10:65:b1:85:b0:30:82:c5:cd:01:9c:ea:9b:da:7c:
         85:fd:27:a8:2b:1b:6d:29:fd:6f:ac:f0:ec:93:d1:c5:0b:cc:
         4a:dd:86:15:4b:a5:b4:88:22:aa:3a:9f:6d:32:a6:fd:19:75:
         17:f7:68:a0:ca:74:0d:22:4b:42:2d:90:8b:ec:48:d5:4c:31:
         bc:db:50:2e:ba:c9:7f:b0:2b:37:3a:f7:5b:9b:8a:19:25:55:
         32:f4:ef:97:bc:b6:f3:c6:38:ea:b6:58:93:7d:33:ea:43:47:
         b2:5d:ee:d1:c0:f5:fb:d7:e3:74:13:8d:91:a0:e3:f6:3a:00:
         14:77:eb:60:08:01:f2:c5:d6:de:df:cc:02:f5:e3:c0:95:46:
         93:5f:2a:b6:df:c7:58:b8:f7:73:58:19:93:91:4c:cf:b6:6b:
         14:b0:c3:41:f1:01:99:54:61:76:ce:6c:1a:83:4d:7a:15:b5:
         a3:48:1b:01:cb:96:f5:c5:9e:21:1f:68:34:92:d8:89:65:29:
         ee:a8:4d:5f:e7:e4:c0:84:ab:39:34:f9:f1:87:9c:c0:2a:03:
         2f:81:1b:6b:5a:b9:77:bb:21:c0:fc:1a:94:7e:4d:e8:04:a4:
         f3:2a:df:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org