Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/jtG4BWEaeSJ9BYc6cyFwxTZQWZM.roa
File:                     jtG4BWEaeSJ9BYc6cyFwxTZQWZM.roa (raw, json)
Hash identifier:          j47Rf+GHZJmr5Ji5m/O/u6Idlqwm6Z1h9L67E0mBXFQ=
Subject key identifier:   8E:D1:B8:05:61:1A:79:22:7D:05:87:3A:73:21:70:C5:36:50:59:93
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0AE2
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jtG4BWEaeSJ9BYc6cyFwxTZQWZM.roa
Signing time:             Thu 16 Dec 2021 06:33:05 +0000
ROA not before:           Thu 16 Dec 2021 06:33:05 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        113.61.144.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2786 (0xae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:33:05 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8ED1B805611A79227D05873A732170C536505993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:40:fa:ac:26:5f:da:14:9b:8d:d4:4c:42:
                    02:aa:11:a5:c5:9d:5a:46:18:bf:69:de:b8:9e:4e:
                    51:fd:02:fe:e4:f1:07:68:18:f8:a2:41:53:e8:d4:
                    92:5e:90:68:c8:93:b1:91:af:a8:75:5b:bd:36:8d:
                    fd:52:d9:ff:c1:4b:de:af:18:b8:6b:1b:94:7d:3a:
                    2d:72:20:c7:6e:81:d4:c4:75:6f:99:b2:55:ab:5c:
                    4d:89:e5:0f:8a:30:59:45:db:0e:06:05:9f:64:f5:
                    88:30:d9:96:0c:8d:85:7e:56:10:9c:3e:07:fd:b9:
                    d9:b2:2e:38:cd:71:f8:0c:f6:bb:cf:96:c4:80:9c:
                    23:a5:4a:9a:b3:fb:3b:6a:9d:fc:88:c9:59:ed:42:
                    77:a2:60:85:1a:a2:66:fb:c4:d3:ac:18:1e:df:68:
                    74:78:28:92:24:77:9e:a8:52:a0:62:80:24:a6:19:
                    cd:62:b3:a7:b9:c6:f3:c8:06:62:32:aa:47:11:48:
                    fa:ab:f1:96:22:16:57:ef:b6:e6:23:d7:9c:f4:0e:
                    b1:52:47:11:99:ae:20:52:10:0b:e3:8f:66:94:39:
                    91:d1:75:cd:03:2a:21:e4:0e:5f:0e:6e:46:36:a7:
                    f1:a7:8e:b5:13:3b:ef:69:08:96:ac:f9:b1:a3:aa:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D1:B8:05:61:1A:79:22:7D:05:87:3A:73:21:70:C5:36:50:59:93
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jtG4BWEaeSJ9BYc6cyFwxTZQWZM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:26:bf:16:32:a7:3b:85:74:b1:9a:36:49:6c:ae:1e:ed:3c:
         8f:89:15:4a:1d:1b:d1:05:80:87:3e:60:e3:85:22:58:96:25:
         8f:d7:ef:d9:24:74:8c:8d:44:e2:91:82:2a:8c:92:73:46:31:
         30:11:32:ed:16:ca:9d:b4:09:27:e4:ac:5e:c3:d6:f6:de:df:
         bb:79:e6:dd:cc:80:d3:67:7b:a2:d9:95:16:2e:f2:7b:9e:2f:
         59:f9:8a:c5:a3:f4:7a:1d:b7:37:03:f9:19:52:20:84:31:14:
         f6:b0:e0:bd:6e:85:0f:fc:4d:70:73:71:2c:83:86:cf:ce:ea:
         60:dc:a3:a4:9b:68:8f:4b:54:bf:2d:7a:c3:80:75:b1:9e:b1:
         fc:42:8e:4a:a3:49:3f:18:9e:15:4c:08:24:87:f4:78:d8:72:
         aa:ee:97:fb:54:e0:f4:c9:78:18:27:7d:88:70:70:dc:d7:ae:
         b5:90:39:48:ea:68:4d:e5:33:91:0d:59:68:1c:b4:9f:38:01:
         53:67:ca:d9:a3:6c:ff:27:14:16:22:b2:2d:78:2a:82:c3:37:
         06:f1:e9:6f:a6:f7:e9:27:7c:14:dd:cf:d5:33:6b:d0:b0:44:
         33:07:38:68:5c:bf:d3:33:16:43:87:0f:a6:9f:d6:2d:a8:0b:
         18:c8:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org