Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/241T9wu8xaRSPwpYjsWlEF4Ij-c.roa
File:                     241T9wu8xaRSPwpYjsWlEF4Ij-c.roa (raw, json)
Hash identifier:          d92nqHke5LW2+Jge+LeHEkU8hJGqqi2sWDd5TmugfF4=
Subject key identifier:   DB:8D:53:F7:0B:BC:C5:A4:52:3F:0A:58:8E:C5:A5:10:5E:08:8F:E7
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       0171
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/241T9wu8xaRSPwpYjsWlEF4Ij-c.roa
Signing time:             Mon 13 Apr 2020 09:19:41 +0000
ROA not before:           Mon 13 Apr 2020 09:19:41 +0000
ROA not after:            Tue 02 Feb 2021 02:23:38 +0000
asID:                     131671
IP address blocks:        103.146.212.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Apr 13 09:19:41 2020 GMT
            Not After : Feb  2 02:23:38 2021 GMT
        Subject: CN=DB8D53F70BBCC5A4523F0A588EC5A5105E088FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:9a:4a:90:3b:e5:9a:ad:b7:f3:71:d1:41:
                    47:47:8e:45:3d:54:c6:33:54:27:ae:bd:42:b9:07:
                    e0:e9:46:c3:6b:8d:5c:94:a4:0e:50:db:51:12:9e:
                    a2:c8:b9:13:9f:62:c9:68:92:ad:df:43:44:3f:a7:
                    fd:2c:71:19:a0:ab:90:bd:c6:ce:f1:aa:3d:89:5b:
                    b2:33:9f:56:f4:96:6a:8f:a7:16:99:f3:78:85:25:
                    59:de:5c:9b:1a:d5:08:eb:fc:76:6f:27:77:b1:ca:
                    8a:2c:c5:e7:bd:8e:b7:a3:8d:9a:98:19:c3:a9:6f:
                    1d:23:db:ae:5a:0e:d7:54:32:cc:73:b6:83:ab:69:
                    bb:41:1c:4a:64:a7:42:c9:08:73:8a:56:4f:0b:53:
                    88:4e:07:ab:c6:e2:01:f5:8f:12:e4:72:a4:20:97:
                    fe:9a:dc:eb:f5:9f:bf:f3:0a:7a:9d:a4:c3:1c:20:
                    a3:28:42:e3:eb:01:a9:bd:e4:cc:6a:6d:cb:b2:d2:
                    6f:75:7b:ce:8b:15:b6:50:91:07:0c:86:2e:a2:b3:
                    ab:86:f1:bf:e7:18:57:ad:6b:e4:b2:cc:5a:5b:ab:
                    b8:b6:1a:d5:a3:7c:a3:07:ba:07:bf:fb:3f:ef:28:
                    80:5f:01:5c:d7:41:2c:ef:22:e9:7c:f5:73:7a:11:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8D:53:F7:0B:BC:C5:A4:52:3F:0A:58:8E:C5:A5:10:5E:08:8F:E7
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/241T9wu8xaRSPwpYjsWlEF4Ij-c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:0c:98:f5:1d:1c:58:f0:6a:61:59:1c:40:25:f5:ee:01:
         49:c2:c0:31:d8:dd:cd:0e:19:59:eb:31:72:5e:0b:05:58:52:
         52:8e:6e:8e:b2:8d:5e:62:a6:f8:70:02:d4:a0:70:03:9e:a0:
         f5:f5:de:b3:f5:e8:f7:06:e6:66:b5:56:a5:36:52:83:69:5a:
         b3:ca:fa:21:7b:09:61:22:4e:c1:ea:4a:3c:bd:4b:91:95:55:
         13:9f:df:04:d5:5b:0d:d9:40:ea:6b:df:12:4c:08:36:f1:6d:
         ac:c9:87:57:c7:77:2b:14:2a:c7:e4:43:57:b9:45:7c:9b:2a:
         d6:97:e4:6a:6e:28:db:c7:a7:41:09:fe:d5:74:e3:2f:b4:6b:
         72:7a:db:1a:e7:cd:6b:8d:8c:62:b1:8c:fe:aa:aa:87:05:bd:
         67:5f:3f:63:b4:8a:a9:75:c2:dc:1c:da:07:a7:1f:c0:4a:ac:
         17:0c:3c:08:bd:56:5d:9e:b1:13:e9:36:13:51:3a:a8:5c:4d:
         dc:7c:96:62:8a:4e:0d:23:68:18:3c:af:56:b0:8c:a7:89:3f:
         a7:c3:f2:80:54:f6:56:40:a3:38:c1:70:e8:b9:4a:12:be:f8:
         5f:6f:b3:02:5a:94:1e:6b:29:e2:b5:c0:bd:a1:0f:a9:70:c9:
         48:94:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org