Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/sjVcFf3gxDqfnLKY-IGqOYqzNq4.roa
File:                     sjVcFf3gxDqfnLKY-IGqOYqzNq4.roa (raw, json)
Hash identifier:          9xgSR8rYtt6uqljVsg2AQFs6QMmebcRPPHC9eEW9pKE=
Subject key identifier:   B2:35:5C:15:FD:E0:C4:3A:9F:9C:B2:98:F8:81:AA:39:8A:B3:36:AE
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       08BF
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/sjVcFf3gxDqfnLKY-IGqOYqzNq4.roa
Signing time:             Sun 07 Feb 2021 11:45:13 +0000
ROA not before:           Sun 07 Feb 2021 11:45:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        103.117.112.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Feb  7 11:45:13 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B2355C15FDE0C43A9F9CB298F881AA398AB336AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:70:4f:ec:88:12:0b:2a:90:71:2c:56:05:
                    39:c9:65:26:68:96:4e:4e:b1:ea:22:60:a3:31:89:
                    aa:73:c9:14:6b:7f:4d:50:77:77:bf:50:ed:fb:d7:
                    61:a5:78:a4:85:2f:df:e9:ab:57:3a:86:9f:3a:84:
                    ec:f4:c8:91:c3:4d:62:7d:8d:8b:99:f1:d5:0b:cc:
                    22:26:3c:f6:55:ec:79:6b:0a:da:2c:e0:54:4a:ce:
                    13:c3:6c:59:8e:15:23:81:a3:e1:9e:aa:1f:dc:50:
                    a5:ad:84:02:c7:b3:9a:fd:00:ca:15:29:87:2d:f2:
                    78:f3:b7:7c:61:b2:bf:0f:77:e8:73:21:8f:a3:a1:
                    fa:87:18:be:6b:1b:9a:ad:5d:6e:28:2e:7a:06:f0:
                    b0:f5:24:6a:33:5d:b3:89:48:7a:c4:a5:b0:59:24:
                    9e:37:9a:8e:63:dd:c6:74:2f:be:b7:16:01:e3:7a:
                    ac:ba:25:ae:ca:43:46:d1:db:9a:46:fd:7e:e8:99:
                    72:0a:77:55:ea:a4:c8:21:6d:07:d6:77:29:03:c2:
                    e6:ac:9e:13:3a:82:96:14:19:a7:ad:5f:b1:c4:43:
                    88:48:bb:d1:2b:57:16:bd:f8:b7:8d:ac:5f:4d:05:
                    24:ca:4c:e3:2a:1f:29:c3:d4:4d:6c:a3:8c:88:63:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:35:5C:15:FD:E0:C4:3A:9F:9C:B2:98:F8:81:AA:39:8A:B3:36:AE
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/sjVcFf3gxDqfnLKY-IGqOYqzNq4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:98:1b:04:5c:ae:76:b9:0d:ab:34:83:6b:71:d6:d1:29:cf:
         fb:80:8a:f6:17:dc:30:fe:90:84:2b:12:8f:74:ff:37:2f:51:
         32:00:2e:bd:80:90:d4:89:be:d5:23:41:10:79:7a:68:05:c0:
         2d:e3:8a:47:28:7d:74:7c:05:5a:9f:b9:3f:e4:41:31:31:e7:
         fd:b1:cc:cf:c4:6c:31:a1:b9:38:e2:d4:09:9e:8f:48:9d:e8:
         4b:ae:5c:ab:0e:ba:52:25:8b:4a:aa:09:e5:22:c7:5b:9d:c9:
         a4:9e:6d:75:a2:3c:02:fc:78:9b:83:52:be:e8:bf:19:2b:04:
         3f:3c:05:4e:fb:71:ff:e5:94:92:92:d1:67:ad:16:d1:a5:8a:
         08:5a:0b:6f:57:6b:aa:c4:af:2a:7a:89:eb:33:b1:5f:5f:d9:
         a8:15:1f:f3:a7:94:b9:8d:6e:28:ac:64:05:8c:96:2f:a0:33:
         e9:73:85:d7:3c:9a:48:a8:e1:0b:88:1d:d4:e7:89:2c:aa:52:
         69:a8:46:ee:74:bd:95:ee:45:9c:1a:1a:3b:f1:4b:4b:7f:fc:
         46:9a:f2:7e:ac:22:2e:a8:f1:83:bb:15:fd:72:ba:aa:e2:52:
         75:aa:fb:2c:94:0e:28:02:75:78:48:21:2c:77:f8:f3:ec:38:
         df:4a:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:59 2023 by rpki-client on console-fra.rpki-client.org