Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/eczM3O_2gvZYtVxkHB6h3J_9dxY.roa
File:                     eczM3O_2gvZYtVxkHB6h3J_9dxY.roa (raw, json)
Hash identifier:          vwCHl0UbMPam1pnFOADDlNQEiCYAoC32pTROJICTolY=
Subject key identifier:   79:CC:CC:DC:EF:F6:82:F6:58:B5:5C:64:1C:1E:A1:DC:9F:FD:77:16
Certificate issuer:       /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial:       0A41
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/eczM3O_2gvZYtVxkHB6h3J_9dxY.roa
Signing time:             Thu 15 Sep 2022 02:50:14 +0000
ROA not before:           Thu 15 Sep 2022 02:50:14 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     10135
IP address blocks:        2405:5600::/32 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
        Validity
            Not Before: Sep 15 02:50:14 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=79CCCCDCEFF682F658B55C641C1EA1DC9FFD7716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:29:bc:ea:b5:e7:95:df:fd:c7:b3:ed:22:
                    4e:ac:08:61:1b:6f:6f:eb:f1:ae:70:0d:fc:b6:b5:
                    de:05:d6:01:ab:c6:c4:1b:17:fd:ca:8f:52:f6:88:
                    d0:c3:3c:fd:9e:4a:fe:18:9d:88:e1:3a:fe:75:d7:
                    d5:90:c5:50:71:ae:6c:90:46:f1:ed:51:e8:bf:a2:
                    bc:5f:3d:3a:fc:7c:ed:ae:13:41:52:4b:43:1c:5c:
                    77:3a:a9:da:5b:22:ed:91:2b:6a:dd:26:6d:92:36:
                    67:f3:08:70:e7:7a:15:5e:16:3a:7d:7a:84:ff:0c:
                    aa:c9:a7:42:b5:c7:d6:73:3f:d0:ad:35:cc:f7:e9:
                    21:21:79:96:72:ed:43:b7:58:1a:75:3c:64:75:5f:
                    2d:2c:0a:40:56:7b:dd:56:da:5c:74:37:2d:ca:44:
                    28:dc:50:da:99:7f:da:03:28:98:0b:de:a9:04:ac:
                    88:b3:8c:20:c9:84:f6:df:df:f2:a1:55:cd:ee:8a:
                    49:79:44:74:2f:e4:35:a5:85:46:60:bb:25:3f:7e:
                    c3:d8:ba:3b:c2:29:68:10:75:ec:65:39:44:c6:4e:
                    ce:9b:d5:e4:6b:6c:c9:f3:a7:18:51:7f:d1:08:e6:
                    40:4c:53:61:de:71:b4:87:0a:5b:5b:81:0e:e3:98:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CC:CC:DC:EF:F6:82:F6:58:B5:5C:64:1C:1E:A1:DC:9F:FD:77:16
            X509v3 Authority Key Identifier:
                keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/eczM3O_2gvZYtVxkHB6h3J_9dxY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:5600::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:cf:26:e9:e6:eb:e1:7e:f5:72:26:94:36:b5:d9:ab:b9:
         e5:c2:9c:dd:4a:fe:13:9e:92:17:78:1d:f4:10:ef:c8:b2:5b:
         26:92:4a:7f:8d:f1:3b:9c:fc:4c:c7:65:93:f5:57:c4:5d:3c:
         02:e7:04:22:d4:13:59:db:aa:8b:7a:bd:d1:a5:07:23:9a:f4:
         a4:8e:60:07:13:2a:7b:6b:c3:2f:b2:0c:c3:fe:8b:3e:09:6b:
         6e:3c:e7:8a:14:96:97:46:44:4c:3e:1b:cd:80:1d:59:51:22:
         36:cc:c0:8d:9a:c1:db:e4:88:d8:74:3a:6f:39:37:25:c9:87:
         03:e7:ed:6b:b7:fd:81:6f:25:d2:7d:4e:1d:7b:4c:99:88:f0:
         65:b0:e3:aa:fb:06:67:cd:8b:57:5a:27:b3:df:f5:78:b8:d0:
         5f:3b:ce:45:df:0a:12:bf:8b:41:e3:40:fe:60:09:2e:e0:46:
         15:f2:c3:b8:a0:1f:85:cc:f2:8d:93:30:42:37:1d:23:02:42:
         5f:18:ac:5e:f1:c0:b4:01:8a:9a:0e:f2:41:f4:d4:9e:54:62:
         47:d5:e0:85:8d:52:9a:b7:2b:89:46:41:3a:c7:dd:cc:8b:ca:
         a7:01:71:dd:e9:f5:e6:e3:d7:2d:e9:37:93:5a:e8:3b:03:4b:
         4a:8e:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org