Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/xuh_hgDv0ROGqjg9PypOwYLYweA.roa
File:                     xuh_hgDv0ROGqjg9PypOwYLYweA.roa (raw, json)
Hash identifier:          6anqPvNdl0TF2ku8DudJinb4m7flKNGudiIqFEp+cyY=
Subject key identifier:   C6:E8:7F:86:00:EF:D1:13:86:AA:38:3D:3F:2A:4E:C1:82:D8:C1:E0
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       07CB
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/xuh_hgDv0ROGqjg9PypOwYLYweA.roa
Signing time:             Thu 15 Sep 2022 02:38:31 +0000
ROA not before:           Thu 15 Sep 2022 02:38:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131671
IP address blocks:        103.146.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Sep 15 02:38:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C6E87F8600EFD11386AA383D3F2A4EC182D8C1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:b5:0b:29:17:c7:ff:11:9f:e6:4d:79:71:
                    27:cb:b3:52:d7:34:e3:34:0d:cb:33:39:df:a7:82:
                    32:87:c9:86:de:0a:3a:7b:88:1f:ef:b7:8c:da:9b:
                    43:0c:50:ff:2e:e5:a2:9c:8f:02:6b:c3:09:7f:04:
                    cf:99:c6:90:df:7c:12:4f:77:88:64:a8:94:ba:dc:
                    ff:79:cb:18:2c:1c:95:af:e5:b2:90:eb:7e:5f:ed:
                    50:3f:5a:dc:d9:0a:0f:66:40:38:2e:81:a4:7e:4b:
                    ae:32:fb:a7:16:99:1f:81:15:cb:8e:1d:a2:ff:ca:
                    66:e7:38:54:6c:cf:7d:da:ce:1f:c8:06:1d:fb:e3:
                    1c:5c:a3:55:91:bd:28:81:6a:d3:3f:14:f4:25:69:
                    0a:99:d9:ce:b0:e5:26:63:ec:66:c1:0a:77:82:61:
                    c9:39:cb:4c:7e:42:67:f7:00:0a:55:f3:e7:ee:6b:
                    bd:94:e5:0c:62:09:3d:50:e8:48:63:06:b5:dd:8e:
                    b9:7f:e9:85:1b:e9:76:69:01:03:fe:ed:b3:7a:09:
                    38:f9:7b:9c:2a:a5:16:cc:70:12:3e:c6:1c:d5:92:
                    f0:51:1f:8b:c4:42:88:d7:95:63:c9:ff:f0:b1:46:
                    6f:9a:84:d4:bb:5c:d5:1f:1c:9e:94:f8:46:77:b3:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E8:7F:86:00:EF:D1:13:86:AA:38:3D:3F:2A:4E:C1:82:D8:C1:E0
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/xuh_hgDv0ROGqjg9PypOwYLYweA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c6:9e:3f:f9:ed:cd:f6:a0:1c:c5:b1:80:a5:b5:39:e5:de:
         46:16:15:3b:73:93:18:2f:22:55:3d:3c:87:a0:a8:95:31:5d:
         c3:48:57:f8:61:ff:a6:f2:f1:40:cc:f3:6d:90:d9:aa:72:a3:
         8a:95:13:26:be:6c:00:e6:09:a7:7d:f5:f7:91:2c:b7:ca:12:
         0b:85:d0:86:14:85:8c:9e:eb:84:85:d2:52:d5:5e:8c:3f:ab:
         ce:10:a0:d5:99:a7:95:24:d8:d5:86:6c:ab:43:02:60:af:f6:
         25:f1:10:33:85:99:3a:cf:20:7d:bb:d9:25:55:3c:3d:e0:c9:
         fd:15:6c:39:eb:87:e5:bf:62:27:57:9e:42:0f:77:47:d0:27:
         87:8c:65:b1:b8:b9:f7:33:c0:c7:15:28:bd:23:78:77:91:84:
         3a:b7:35:1b:f1:64:9b:22:3a:e4:6d:10:c8:64:e9:06:3c:85:
         43:56:93:40:4f:16:25:8f:80:58:39:7a:90:b4:90:d6:11:4b:
         46:11:b6:3d:55:15:f9:a7:58:9a:dc:78:cf:17:7a:68:e7:c5:
         41:3e:b6:8c:75:7f:b5:e5:d7:15:7e:cc:23:ee:21:db:23:f2:
         ff:57:26:4e:ae:4b:a5:91:36:ce:4e:45:62:03:ab:a8:75:4a:
         bb:92:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org