Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/SjldCHMBg7mDBSiaRr9AIF52Ies.roa
File:                     SjldCHMBg7mDBSiaRr9AIF52Ies.roa (raw, json)
Hash identifier:          vR7hl2iydwI+KsArfcN+QN+UOgBqbLgcFIfirNlrseY=
Subject key identifier:   4A:39:5D:08:73:01:83:B9:83:05:28:9A:46:BF:40:20:5E:76:21:EB
Certificate issuer:       /CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
Certificate serial:       F8
Authority key identifier: 3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/SjldCHMBg7mDBSiaRr9AIF52Ies.roa
Signing time:             Thu 15 Jun 2023 03:09:19 +0000
ROA not before:           Thu 15 Jun 2023 03:09:19 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38136
IP address blocks:        103.160.180.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BF441B57C86BD9D193451A005D26CE1A3C6DEE7
        Validity
            Not Before: Jun 15 03:09:19 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4A395D08730183B98305289A46BF40205E7621EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:12:e6:80:f3:cd:2f:e9:52:fd:3a:08:c6:
                    c6:6c:78:22:9d:60:98:d6:3e:d1:f9:88:07:af:46:
                    b7:b5:4a:c9:10:9c:a3:5f:c7:3a:45:72:da:66:37:
                    66:61:d1:15:6e:bf:43:84:a7:58:d5:fe:0c:dc:bd:
                    11:20:30:be:85:4e:89:23:5b:9d:3d:3a:43:7e:7b:
                    b2:a6:2f:db:c5:6a:ba:b7:9f:ad:1a:d8:70:bc:17:
                    df:7d:cb:37:e4:21:39:b5:27:97:96:71:b1:64:53:
                    0f:59:29:3d:44:74:8e:24:f2:52:0a:06:41:cc:79:
                    a4:f7:d5:65:5c:a8:c9:65:d0:08:be:e2:ca:17:a6:
                    d8:22:3d:f9:fb:30:2c:4f:39:22:3f:fa:c9:5b:09:
                    c2:fb:8c:86:dd:af:fe:0a:7f:c3:43:75:4f:ee:3a:
                    6a:76:ef:cc:d2:c7:cd:84:82:c9:7c:a3:1f:fe:14:
                    08:a4:d1:45:a1:03:50:49:84:50:1b:dc:55:9d:f5:
                    0c:cf:e3:b4:54:bb:5f:27:5f:ac:a1:90:e3:96:cc:
                    c5:ce:9d:25:af:b3:70:e2:39:c7:09:d8:0f:11:72:
                    22:75:7b:bc:dd:e0:b7:88:2c:a2:6c:a9:94:50:70:
                    f7:cc:66:3b:18:8e:99:fa:46:e9:5d:cd:c5:a6:03:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:39:5D:08:73:01:83:B9:83:05:28:9A:46:BF:40:20:5E:76:21:EB
            X509v3 Authority Key Identifier:
                keyid:3B:F4:41:B5:7C:86:BD:9D:19:34:51:A0:05:D2:6C:E1:A3:C6:DE:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O_RBtXyGvZ0ZNFGgBdJs4aPG3uc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAYINFO/SjldCHMBg7mDBSiaRr9AIF52Ies.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:be:09:cb:6f:00:90:3c:85:14:bb:6b:26:ce:24:a4:43:79:
         b0:15:92:5d:a2:2c:75:85:ae:2a:69:f6:bb:88:14:36:5f:2b:
         c7:06:72:bc:fc:1a:e4:19:a8:32:9b:6e:a2:d2:48:1f:3b:10:
         fb:a8:6a:1d:82:4f:ba:44:db:d7:af:c0:62:2d:e4:df:d3:08:
         d2:01:bd:e9:f2:5d:f9:61:6a:1e:95:db:80:23:78:ae:3a:e6:
         5a:bc:33:b5:d8:28:6f:68:50:31:b3:5b:a5:66:cb:c1:4a:ec:
         75:3b:c0:fc:64:a2:19:41:c2:e3:fe:cb:19:7b:f4:06:2c:6e:
         39:f7:a7:44:d0:50:ad:66:4d:59:5e:20:ae:73:36:85:c4:6c:
         d8:c4:d2:c9:fa:90:1e:3f:2e:e4:1b:e6:95:c2:36:73:f3:71:
         c9:e3:e8:ec:65:12:ed:42:17:4f:7c:49:03:47:cb:1b:f9:bb:
         0d:b1:5c:f9:07:cd:1f:79:da:74:4a:b5:fc:64:6f:00:f7:bf:
         fe:9f:76:4e:e7:93:c1:a8:d3:8a:90:a5:2c:52:00:13:ed:ce:
         64:d7:9b:99:66:42:40:28:fc:36:1a:8e:53:17:bc:c0:67:5c:
         bd:38:91:6e:82:5f:b3:65:67:0d:79:a7:82:07:05:1e:2f:b0:
         6d:d8:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org