Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/thHuWpKT8vOpp78wzI9cgLFI5p8.roa
File:                     thHuWpKT8vOpp78wzI9cgLFI5p8.roa (raw, json)
Hash identifier:          gCPzlFTqeqE1LpjJ3ys//qg21z/dc5Ulwn2cpvWeMFA=
Subject key identifier:   B6:11:EE:5A:92:93:F2:F3:A9:A7:BF:30:CC:8F:5C:80:B1:48:E6:9F
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       061B
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/thHuWpKT8vOpp78wzI9cgLFI5p8.roa
Signing time:             Tue 19 Jan 2021 02:30:59 +0000
ROA not before:           Tue 19 Jan 2021 02:30:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131671
IP address blocks:        103.146.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Jan 19 02:30:59 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B611EE5A9293F2F3A9A7BF30CC8F5C80B148E69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:a0:c1:35:f3:f0:2a:af:50:e5:36:4b:74:
                    75:a8:d5:60:f6:53:74:f8:88:14:41:af:c7:22:4e:
                    ea:73:83:a1:ad:b0:5e:02:1b:07:f8:9e:5a:94:ec:
                    84:fb:cd:61:2b:53:36:36:98:4d:59:52:c2:37:30:
                    00:13:88:69:27:d2:f8:19:82:c2:85:ab:44:df:ce:
                    57:15:56:b9:92:2f:1a:c0:6b:30:14:3b:8c:38:96:
                    1b:1a:c0:50:9a:a9:f7:c7:51:f8:be:f4:f3:52:5c:
                    f3:32:ef:10:77:12:b8:91:60:a7:26:be:eb:af:9c:
                    9e:b5:3c:c6:b7:19:0d:4c:ec:51:79:30:a9:26:74:
                    16:13:0f:d4:08:f0:02:92:14:5a:6f:ac:60:b2:74:
                    f8:f1:e1:3e:de:a9:d6:85:46:05:ce:ce:c8:eb:59:
                    70:1f:1d:eb:56:a8:ae:f7:31:ac:29:d1:23:95:85:
                    22:65:85:75:7d:ff:38:11:95:2f:7b:b1:24:b9:01:
                    40:2a:f5:c0:06:5c:eb:b4:84:7c:85:ef:fc:0b:56:
                    76:38:de:25:cc:94:f9:ab:21:01:f9:51:0e:b4:ed:
                    48:ff:c9:44:ad:d7:97:d9:80:5a:45:ee:9c:38:ec:
                    6b:fc:c6:ca:23:d1:ab:61:d2:b7:8c:6e:d9:17:96:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:11:EE:5A:92:93:F2:F3:A9:A7:BF:30:CC:8F:5C:80:B1:48:E6:9F
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/thHuWpKT8vOpp78wzI9cgLFI5p8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:47:91:57:75:90:ad:16:35:b9:5a:2f:a2:82:c9:8b:84:
         2b:f0:93:e1:95:1c:99:96:79:77:d3:15:91:72:87:b9:10:ce:
         99:58:ce:fe:b5:7d:ce:24:45:36:41:4c:31:43:cc:45:b8:b9:
         cc:6d:89:17:5a:53:9a:1e:db:ad:c4:69:cf:0a:6f:9f:0f:46:
         8b:79:b7:bd:94:f0:87:90:94:21:5c:13:cb:05:0f:da:86:4c:
         37:a3:31:51:f2:5a:13:87:fe:03:7b:f8:da:20:c0:b9:bc:01:
         60:fa:fe:ee:ce:3b:9b:72:1a:55:c7:95:a7:68:d7:c7:81:f0:
         81:9d:a7:44:2f:8f:6b:22:dc:6a:fc:e3:d8:af:b4:f7:46:e2:
         16:4e:de:d4:48:22:af:41:be:4f:ff:cc:e7:ef:35:ea:29:d0:
         97:60:74:bc:ed:b8:29:46:06:a2:25:90:1a:14:af:ed:1f:ed:
         28:73:83:c4:90:bb:ab:5d:84:b2:49:36:a4:7a:e6:5e:87:34:
         3d:65:52:60:01:09:f7:21:62:03:31:3f:6f:5e:f3:1c:db:7c:
         fa:36:41:3b:3b:52:c9:e1:d8:35:3d:69:3c:26:55:ab:f0:a6:
         d0:2e:05:e3:97:d0:4f:2b:0e:df:f3:bd:b3:e7:d6:ac:3d:14:
         06:bb:6c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org