Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/rKdWyr3e8NjsKh0wG29WVNy8lF8.roa
File:                     rKdWyr3e8NjsKh0wG29WVNy8lF8.roa (raw, json)
Hash identifier:          NtoylH6o3vsLL9gcGkU4fKC+YIK0dtP6+r8q8lruZvM=
Subject key identifier:   AC:A7:56:CA:BD:DE:F0:D8:EC:2A:1D:30:1B:6F:56:54:DC:BC:94:5F
Certificate issuer:       /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial:       0A89
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/rKdWyr3e8NjsKh0wG29WVNy8lF8.roa
Signing time:             Thu 15 Sep 2022 02:37:51 +0000
ROA not before:           Thu 15 Sep 2022 02:37:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18046
IP address blocks:        150.107.56.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2697 (0xa89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
        Validity
            Not Before: Sep 15 02:37:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=ACA756CABDDEF0D8EC2A1D301B6F5654DCBC945F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:4b:07:85:a6:51:2b:5c:ed:37:b4:db:7f:
                    ef:63:25:42:3c:af:c6:6d:93:90:b4:f2:7c:68:f3:
                    d2:4b:14:6e:dc:c3:c8:8c:9c:08:af:cd:31:15:9c:
                    0e:2e:9e:12:7d:c1:d4:1e:59:c4:31:b6:6d:36:24:
                    f6:e5:23:02:82:4a:90:50:a2:6c:f8:8d:58:5f:0f:
                    2c:41:5c:83:3f:1f:b0:aa:34:0f:6f:01:b1:98:bd:
                    ea:0d:9b:8e:fb:71:14:db:27:af:55:13:7d:96:00:
                    35:d9:dd:b5:ff:58:59:78:e2:93:82:3d:48:ff:de:
                    a5:2b:6e:a3:fc:5d:1e:a2:c9:f9:c9:fc:c8:80:66:
                    fb:3c:a2:19:b7:39:39:ff:41:13:3d:b3:9c:13:eb:
                    ec:be:ff:94:97:d5:df:59:0f:73:e0:b0:58:e0:42:
                    4d:e3:d3:de:dd:a8:2d:0d:2c:d5:45:18:8b:71:5c:
                    66:44:62:6c:77:9c:cd:b2:77:59:f6:36:42:c9:8c:
                    86:b8:8b:fb:35:7e:f0:2a:3c:22:39:a0:cd:f6:59:
                    cb:56:8c:38:37:7a:ee:05:1c:f2:9b:f5:dd:05:af:
                    2a:d3:e6:5d:fc:5e:bb:ec:d2:25:84:d7:5a:b4:93:
                    18:c1:a1:dd:10:38:40:01:c2:66:d7:9d:aa:ef:e7:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A7:56:CA:BD:DE:F0:D8:EC:2A:1D:30:1B:6F:56:54:DC:BC:94:5F
            X509v3 Authority Key Identifier:
                keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/rKdWyr3e8NjsKh0wG29WVNy8lF8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:02:89:de:e4:20:d0:d1:7c:56:23:80:e6:bb:d5:cc:3e:72:
         d1:03:b2:6c:4f:c7:3a:d6:63:f4:79:21:b7:ce:51:72:73:3f:
         ab:45:df:46:05:0b:70:91:64:f2:5c:03:e7:3a:dc:2b:d0:c3:
         f0:c7:80:fa:0e:42:43:43:e4:03:1e:37:53:9d:2b:8a:f8:f9:
         df:ea:d5:5f:79:7a:09:81:15:e0:4b:57:6d:30:8a:81:e3:f8:
         b0:27:e0:e8:67:6a:63:62:8b:06:d0:cb:e1:c9:cc:62:ed:ed:
         a6:28:b3:95:fd:00:ac:46:38:7f:2b:f5:ba:4c:d3:02:22:bc:
         bf:70:37:fe:92:c1:ba:e5:fa:a8:69:62:74:fc:55:56:09:97:
         d9:39:43:34:80:fd:24:bf:f1:20:70:83:82:f8:7e:ba:52:a9:
         95:10:19:c6:0d:67:4e:bd:76:50:86:5c:ac:13:4a:19:ed:8c:
         72:c2:6f:6e:36:0e:06:73:d3:50:c0:7a:76:de:2b:45:b0:da:
         c9:a2:7c:8b:70:ff:1f:9e:c0:aa:3c:cd:58:f2:f0:1e:60:a1:
         fd:0e:ef:46:fc:dd:6e:c5:61:8d:62:52:89:ac:fc:e7:19:99:
         30:9c:86:1e:33:54:d5:b9:7c:ce:a6:f0:46:dc:e8:0f:96:32:
         e6:d9:0d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org