Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/jvWHySCKHjzZ9X_0jk3M-nfcNdE.roa
File:                     jvWHySCKHjzZ9X_0jk3M-nfcNdE.roa (raw, json)
Hash identifier:          C7vdDH8WlyerI3t5NBdFUVbWa5iuFiNWtNdzKiwfews=
Subject key identifier:   8E:F5:87:C9:20:8A:1E:3C:D9:F5:7F:F4:8E:4D:CC:FA:77:DC:35:D1
Certificate issuer:       /CN=43FF5C92CC4950A457A7327D168FBC465B218322
Certificate serial:       0A3E
Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/jvWHySCKHjzZ9X_0jk3M-nfcNdE.roa
Signing time:             Thu 15 Sep 2022 02:39:29 +0000
ROA not before:           Thu 15 Sep 2022 02:39:29 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4782
IP address blocks:        203.65.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2622 (0xa3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322
        Validity
            Not Before: Sep 15 02:39:29 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8EF587C9208A1E3CD9F57FF48E4DCCFA77DC35D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:88:62:57:a6:0d:c0:0c:e5:e2:37:e8:0e:
                    d7:2e:ca:c9:7b:78:b2:75:9c:98:5b:6b:3f:1a:2c:
                    24:9a:70:25:d3:5c:ed:54:7d:5f:81:50:16:1a:af:
                    05:ae:31:d9:8b:fa:25:43:78:dc:5a:fe:1f:77:1a:
                    ae:ff:b7:23:1a:7c:fa:cd:c8:53:0d:75:64:16:c2:
                    e8:16:1f:f7:2e:25:63:16:32:6d:ef:67:e4:2f:a4:
                    3e:3e:4e:bc:2b:ef:0a:f0:91:71:78:0c:db:f7:7f:
                    d0:44:68:89:cc:1a:84:63:09:15:5b:d9:69:b2:08:
                    69:70:6b:1c:8f:25:22:ba:64:c1:bd:fa:ce:8d:b9:
                    96:11:66:d3:6c:dd:03:11:0e:74:de:70:c5:70:bb:
                    cb:0d:bc:75:4b:b7:79:6e:8e:d3:d2:06:58:83:d4:
                    2c:d0:3e:28:fb:cc:44:48:44:ef:05:83:87:2b:ae:
                    cb:e3:d0:69:5e:9d:2b:5e:17:2f:71:fe:a5:f9:34:
                    c1:5a:bd:71:14:6e:af:11:e4:4b:b0:42:8d:5b:c3:
                    0f:b5:8e:b1:ba:d8:cc:64:74:e0:f5:f9:65:3b:bf:
                    78:b8:bf:cf:bc:e9:95:67:65:e1:b5:1f:18:d3:06:
                    25:15:0a:d3:90:5c:d2:95:3e:dc:66:82:e9:26:8e:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F5:87:C9:20:8A:1E:3C:D9:F5:7F:F4:8E:4D:CC:FA:77:DC:35:D1
            X509v3 Authority Key Identifier:
                keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/jvWHySCKHjzZ9X_0jk3M-nfcNdE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.65.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:3c:95:fc:67:cb:48:8a:6f:cc:f7:51:55:72:98:21:b5:
         38:db:d0:bb:67:93:ee:12:e0:ec:69:1f:b3:a0:a0:c6:e6:f4:
         5e:7c:4b:c2:8c:5c:2b:74:10:d1:3b:60:9a:22:57:6a:c8:cb:
         1a:2d:0a:78:42:2b:d0:37:9b:08:1a:52:70:86:9c:89:86:88:
         36:f4:18:ed:a6:96:47:d8:72:d8:08:32:da:e6:2d:8a:97:df:
         49:39:d5:1a:a2:e3:8e:65:4a:18:41:2f:60:35:0b:68:9b:56:
         ce:e8:ae:58:ef:23:57:9f:eb:05:9a:c6:ad:c7:b6:fd:aa:ba:
         28:9d:67:53:52:23:2c:99:51:42:1f:56:b0:46:e5:b5:05:e6:
         e9:1d:52:e2:44:35:6a:07:ff:84:ed:e5:14:95:92:cc:90:41:
         7a:ef:83:26:db:5d:cd:cc:04:c9:a9:d2:ee:9d:e4:8e:22:a2:
         87:2b:06:2d:f8:bd:b2:d3:1e:19:78:3e:ec:71:b4:7a:ff:a9:
         70:46:ef:0f:c1:b1:ca:41:d0:21:b2:a6:1f:16:30:49:e4:9c:
         16:75:2e:77:28:eb:88:73:46:1a:8c:72:65:2e:2b:8c:3c:06:
         91:4c:06:24:30:7d:30:95:b7:51:1a:43:25:f9:7f:32:67:a4:
         18:71:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org