Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/Eybuf3jl_TO4QWSoBGwjd8ehJXM.roa
File:                     Eybuf3jl_TO4QWSoBGwjd8ehJXM.roa (raw, json)
Hash identifier:          fFi3fz7PCDEaxC0BJCTefjR5GpRQwKnnmymTBzPSfDw=
Subject key identifier:   13:26:EE:7F:78:E5:FD:33:B8:41:64:A8:04:6C:23:77:C7:A1:25:73
Certificate issuer:       /CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Certificate serial:       03
Authority key identifier: 3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/Eybuf3jl_TO4QWSoBGwjd8ehJXM.roa
Signing time:             Wed 29 Jun 2022 04:11:44 +0000
ROA not before:           Wed 29 Jun 2022 04:11:44 +0000
ROA not after:            Thu 29 Jun 2023 03:08:49 +0000
asID:                     131668
IP address blocks:        103.160.180.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
        Validity
            Not Before: Jun 29 04:11:44 2022 GMT
            Not After : Jun 29 03:08:49 2023 GMT
        Subject: CN=1326EE7F78E5FD33B84164A8046C2377C7A12573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:af:73:d4:61:83:59:8a:02:e5:46:c4:1d:63:
                    c3:e1:1c:5e:d7:64:87:ae:51:9b:b5:f0:de:93:71:
                    31:64:76:f9:7c:51:c2:48:dc:dd:0e:5e:18:b8:a8:
                    d7:a7:86:d3:1d:a5:a3:b7:f0:ac:2a:fc:9b:7f:47:
                    92:cd:e3:d7:11:d1:21:e3:bf:33:cb:d5:90:b9:ad:
                    a5:89:95:75:55:58:0f:9a:cd:db:dd:46:4a:93:5c:
                    30:6a:0d:b9:5c:0f:07:46:2e:87:36:95:c2:c5:15:
                    19:c9:81:9d:cd:03:b6:8b:50:c3:c4:9e:de:2b:c9:
                    65:2b:5f:aa:3c:eb:f2:53:a9:77:c5:97:7e:42:37:
                    d9:23:b8:03:ec:69:94:a2:88:ff:66:68:ad:82:c5:
                    58:3c:48:4f:c6:1c:ea:2e:66:57:96:f8:11:db:39:
                    5a:a2:0c:c1:f6:2a:a6:cf:34:35:5f:d1:26:7d:66:
                    ea:65:0a:3c:38:27:bb:63:3c:9d:ba:a3:37:9c:cb:
                    d5:12:0c:cf:a8:c1:be:39:ac:6f:ea:58:a9:f7:5e:
                    59:64:5d:37:61:7a:63:22:8c:d0:e8:88:e6:1d:47:
                    dc:a8:1e:47:ff:03:94:d3:1b:ab:85:c3:00:c2:cf:
                    e4:6e:d5:46:7b:2a:24:96:83:c9:ab:2b:dd:f3:bb:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:26:EE:7F:78:E5:FD:33:B8:41:64:A8:04:6C:23:77:C7:A1:25:73
            X509v3 Authority Key Identifier:
                keyid:3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/Eybuf3jl_TO4QWSoBGwjd8ehJXM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:2b:9f:d7:94:b5:7b:9f:b8:b0:67:2b:fd:01:42:e6:69:ad:
         1c:b1:68:bb:ef:1c:d8:b0:1e:1f:29:1f:57:38:38:14:c4:06:
         5c:5d:f4:9e:fa:29:0d:a8:4f:80:af:7f:cd:c7:7e:6d:cb:d3:
         fd:a2:dd:63:1b:fd:b6:8c:23:66:93:f4:17:72:ed:f7:04:52:
         19:e0:01:0e:ef:ff:0a:29:64:3c:c1:f9:5e:20:2c:9c:0e:2c:
         1a:39:1d:70:f8:22:2b:40:55:e7:91:0c:1d:b7:83:57:4e:64:
         81:42:bb:4f:cf:a8:6c:75:a9:34:03:cf:56:91:d8:fa:60:28:
         a0:5b:93:9c:8e:b9:ec:18:69:48:7d:f5:b8:4b:a6:73:93:c2:
         2b:ee:e6:39:a0:9b:62:95:a5:bd:b9:a0:76:b4:db:c3:44:39:
         57:53:d3:81:53:1b:b5:fb:56:a8:e1:53:a3:5a:e4:f6:c3:41:
         31:01:8a:34:b5:a8:84:fd:16:2c:e6:06:31:b7:0e:c1:81:37:
         ea:ee:4e:47:26:0a:bf:c6:58:03:38:47:73:d0:46:cb:5b:31:
         49:4d:15:6b:5e:82:28:0b:62:9f:58:5b:26:4d:af:26:3b:63:
         88:e0:f0:cb:89:ba:39:e0:5f:00:10:96:0b:94:da:1c:dd:f4:
         ff:93:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org