Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/sQvTWYDp7-kvIMmPQ596HYa4xVA.roa
File:                     sQvTWYDp7-kvIMmPQ596HYa4xVA.roa (raw, json)
Hash identifier:          ZfJNKRe49HweMyGV9QauGjdv4LIYBnqb0pIRpE2EPUw=
Subject key identifier:   B1:0B:D3:59:80:E9:EF:E9:2F:20:C9:8F:43:9F:7A:1D:86:B8:C5:50
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/sQvTWYDp7-kvIMmPQ596HYa4xVA.roa
Signing time:             Thu 15 Sep 2022 02:48:12 +0000
ROA not before:           Thu 15 Sep 2022 02:48:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17421
IP address blocks:        114.136.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 15 02:48:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B10BD35980E9EFE92F20C98F439F7A1D86B8C550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:6f:b0:5e:f2:72:4f:f1:1a:35:78:3b:0a:
                    a2:cd:5a:cd:d5:cc:ae:24:94:4d:3f:0c:88:77:e8:
                    03:25:47:db:29:95:6f:43:dc:91:2e:e0:3d:e6:94:
                    43:92:d0:85:45:70:f7:0c:b9:2e:08:31:b8:b3:0d:
                    05:fd:d7:77:4e:f4:98:88:88:e2:13:f8:04:e7:6f:
                    43:37:d0:ba:a9:35:f6:24:9c:d3:71:00:62:3b:93:
                    4b:30:0e:2a:8c:bf:6e:94:b9:36:1d:2e:86:68:40:
                    f3:59:b1:e3:8c:08:22:fa:fe:b2:79:a3:79:78:be:
                    72:f2:95:aa:57:c7:a3:73:97:ec:b5:dc:4e:56:bd:
                    ed:3a:c2:dd:54:dd:58:0a:6d:9b:64:e3:3e:cf:55:
                    6c:b1:9a:b8:82:f0:37:05:0b:de:f7:9e:ec:be:31:
                    a5:9b:b9:24:fe:ea:6b:9d:70:2d:13:ab:84:5c:f7:
                    33:95:fa:60:0a:e9:b0:e3:02:f9:47:e0:00:f3:c9:
                    06:cb:91:06:8f:46:a4:1b:77:40:a8:1d:3d:79:a9:
                    af:05:a2:03:68:65:57:ac:ea:cc:2b:aa:82:46:ba:
                    ee:21:5b:ff:e1:79:55:54:d5:e5:92:61:a3:ed:2b:
                    9f:b8:84:d2:54:74:93:f9:79:58:34:e4:f1:29:96:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:D3:59:80:E9:EF:E9:2F:20:C9:8F:43:9F:7A:1D:86:B8:C5:50
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/sQvTWYDp7-kvIMmPQ596HYa4xVA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.136.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:50:95:62:24:70:23:b1:be:06:7c:82:a4:dc:62:48:14:
         e1:7b:fc:ca:a0:65:ff:27:c4:df:97:36:f6:2b:ff:ef:5e:f1:
         2b:39:77:dd:2a:a8:4a:73:57:6e:18:2b:55:1a:8f:4b:d8:c4:
         c3:b2:26:7f:a2:69:4d:32:d7:7d:e3:93:da:58:9f:fe:0a:57:
         e8:7d:50:95:01:fb:e0:be:6d:74:74:bc:a0:a4:5c:f9:b9:b1:
         6a:70:9f:80:8a:57:40:ff:3b:b7:07:1b:13:b3:56:7c:17:f3:
         4c:f3:45:2c:41:88:09:c3:d5:82:a2:d6:cc:ba:6e:56:77:cc:
         da:bf:aa:9e:81:d0:a5:6f:f5:ee:b7:85:18:a3:21:53:d9:49:
         fc:ac:d1:f4:63:bc:91:15:3b:dd:4f:8e:54:a0:bd:94:c8:67:
         e1:55:1f:f7:d4:32:67:c1:ba:39:7f:10:fc:5f:73:cc:f7:31:
         86:61:46:2d:17:d8:14:03:6f:00:00:fe:5e:86:e0:d4:ef:cd:
         1b:ec:8b:23:a4:4b:5c:83:78:af:19:98:cf:56:d8:aa:cc:9e:
         4d:4b:22:47:4b:61:06:56:0e:92:91:fb:54:15:61:fe:d8:39:
         f4:53:19:91:d4:cd:70:62:bc:54:8c:44:73:78:11:9c:9e:e2:
         c5:61:ef:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org