Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/tp5yBU1Q5pSmewUY-CkF8TF6Fxo.roa
File:                     tp5yBU1Q5pSmewUY-CkF8TF6Fxo.roa (raw, json)
Hash identifier:          nLMrwQAAaHVYtiYLTF9R0teI6Zbrwbe/sYhsCvk7EFs=
Subject key identifier:   B6:9E:72:05:4D:50:E6:94:A6:7B:05:18:F8:29:05:F1:31:7A:17:1A
Certificate issuer:       /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial:       05
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/tp5yBU1Q5pSmewUY-CkF8TF6Fxo.roa
Signing time:             Tue 24 Nov 2020 07:19:09 +0000
ROA not before:           Tue 24 Nov 2020 07:19:09 +0000
ROA not after:            Tue 23 Nov 2021 09:57:13 +0000
asID:                     134823
IP address blocks:        103.158.228.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
        Validity
            Not Before: Nov 24 07:19:09 2020 GMT
            Not After : Nov 23 09:57:13 2021 GMT
        Subject: CN=B69E72054D50E694A67B0518F82905F1317A171A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:05:91:86:9b:65:1c:d3:8e:ef:1e:1f:f2:
                    ab:eb:b5:47:36:aa:3e:fd:c9:06:6d:e8:e9:3a:c1:
                    33:63:da:4a:0f:42:5f:66:86:13:c2:9f:17:5d:df:
                    5c:74:38:ba:07:5b:98:be:d1:2a:9e:be:41:79:6c:
                    46:a4:2b:75:3a:53:4d:56:5c:ee:e4:68:22:6a:ee:
                    51:04:e4:fc:cf:e3:42:56:ca:0e:25:3f:0f:55:0b:
                    47:8c:5b:84:78:af:79:46:f1:2c:e9:54:7b:cc:aa:
                    22:18:74:07:22:28:a9:a2:92:ba:59:99:f0:1e:8a:
                    0f:a6:90:5f:4b:c7:02:b1:82:19:87:34:a8:11:d0:
                    ea:43:d1:7d:f7:57:f0:92:df:32:e8:68:c6:17:20:
                    79:b7:b8:cd:4f:2d:f8:91:96:46:5f:cf:45:03:fe:
                    18:8c:9c:d9:56:eb:f1:74:7a:6b:a0:ed:f9:03:0b:
                    60:cd:a8:ff:e7:fb:85:6d:59:bb:9c:7c:6a:07:46:
                    cb:bd:c3:03:8d:13:72:94:62:65:57:14:42:e8:bb:
                    99:03:8a:5a:af:7c:0d:ae:11:41:00:ad:c9:db:53:
                    31:7f:78:94:26:97:cd:20:68:91:31:90:cb:6f:af:
                    b2:d1:96:69:49:84:3a:20:ed:e8:27:94:eb:4f:8f:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9E:72:05:4D:50:E6:94:A6:7B:05:18:F8:29:05:F1:31:7A:17:1A
            X509v3 Authority Key Identifier:
                keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/tp5yBU1Q5pSmewUY-CkF8TF6Fxo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:4d:ad:a5:7e:42:38:1c:0a:15:ad:a8:da:90:97:58:e0:c6:
         f5:36:5f:10:36:5c:e5:d0:2d:ac:13:f9:3c:40:ba:98:01:a6:
         7a:38:22:7d:47:f7:f8:f4:fd:42:ee:04:93:e9:1e:e4:c7:a5:
         a3:59:65:ce:0e:37:2d:e3:ec:d1:49:b8:32:c3:a8:d2:ed:0a:
         81:7a:0f:4e:20:a4:dc:9d:2a:cf:76:58:55:75:71:8d:b6:91:
         70:8f:44:4a:81:e8:93:8d:2f:ca:aa:ac:05:a8:2d:31:fa:09:
         51:c4:9c:67:c4:b6:be:3e:48:9f:d3:95:79:ae:c1:e3:88:80:
         0f:17:43:04:c1:2e:4b:7f:ff:e8:32:4e:17:fb:1b:ff:8d:c0:
         c7:1d:7b:62:4c:58:b7:1d:81:8c:3a:d7:ba:b7:ee:11:fe:2f:
         5c:5f:9a:53:b1:ca:3c:d5:50:b5:9a:3f:be:3d:fe:65:f0:ab:
         7c:53:44:7d:f0:44:9d:6d:53:75:96:bf:59:6c:79:69:73:63:
         29:cd:a7:a0:28:1f:a0:9a:83:b2:7f:5e:53:20:75:6a:f0:7d:
         3b:b0:63:9e:d4:e7:b3:1a:bb:64:29:3b:ff:cf:8c:55:06:46:
         e6:1a:d9:ee:20:2b:ab:7b:95:58:61:42:d8:ec:5f:ef:83:65:
         7e:5a:b0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org