Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/v_W2owhy2IBiTozvcPOLl3iaN4U.roa
File:                     v_W2owhy2IBiTozvcPOLl3iaN4U.roa (raw, json)
Hash identifier:          ZyZgWlzG46tzEV48nTih/Ny3kHVjzI4UTrFYejmjnyc=
Subject key identifier:   BF:F5:B6:A3:08:72:D8:80:62:4E:8C:EF:70:F3:8B:97:78:9A:37:85
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C4A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/v_W2owhy2IBiTozvcPOLl3iaN4U.roa
Signing time:             Wed 29 Sep 2021 02:51:06 +0000
ROA not before:           Wed 29 Sep 2021 02:51:06 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131621
IP address blocks:        203.75.51.0/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3146 (0xc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:51:06 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BFF5B6A30872D880624E8CEF70F38B97789A3785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:93:d8:46:91:28:69:59:01:26:ed:9e:da:
                    cd:21:16:87:3c:4a:b2:3f:bc:31:cc:0d:55:04:09:
                    83:33:26:6e:12:22:34:f6:cd:78:98:1d:80:85:7f:
                    67:58:f1:78:a0:16:0a:c3:53:73:cc:4e:36:80:c6:
                    04:58:f7:d8:eb:b4:d8:76:4d:1f:ed:bc:ef:ed:e3:
                    af:20:95:f3:f8:85:97:e8:e0:8e:93:5a:d3:5e:69:
                    61:8c:ae:c8:63:54:34:65:78:eb:4c:d2:39:cc:58:
                    5b:90:8a:f5:09:83:1e:47:7b:57:cf:ef:0b:b4:ec:
                    28:68:21:11:75:7a:de:06:3b:49:f8:a6:76:fc:f9:
                    f9:ac:a7:7a:1b:0c:c3:4c:b2:26:54:aa:d4:06:78:
                    82:9f:f0:f7:de:98:39:2e:9c:b6:52:7b:2f:01:9a:
                    d0:c9:ec:e8:1d:b0:73:2e:3d:26:bf:4e:47:d6:49:
                    7e:a3:c1:04:9e:22:70:96:0f:7c:bb:00:b6:6c:4a:
                    7e:ca:77:33:30:cd:d4:1c:69:70:81:7b:ab:23:17:
                    a6:e9:cc:f9:d2:e0:4d:16:b7:92:b6:27:43:5f:1a:
                    ac:e4:b7:c2:ec:ff:3d:1e:92:77:77:45:de:b4:b0:
                    3a:73:93:eb:78:de:7e:88:80:1e:e8:ec:99:6f:5e:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F5:B6:A3:08:72:D8:80:62:4E:8C:EF:70:F3:8B:97:78:9A:37:85
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/v_W2owhy2IBiTozvcPOLl3iaN4U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.75.51.0/27

    Signature Algorithm: sha256WithRSAEncryption
         92:e8:46:72:73:07:3d:bf:6c:1b:b1:85:3c:13:38:61:0b:e8:
         90:79:0f:20:dc:03:45:1a:0b:98:f6:26:5b:73:72:31:d7:09:
         cc:69:4e:9d:88:05:32:48:d7:ee:c0:bd:58:c6:da:b7:ad:48:
         e1:13:a1:ce:56:f7:63:72:cc:ec:b4:28:11:65:27:c0:ef:5d:
         62:68:50:83:f5:e7:23:69:52:ff:97:d1:c5:8d:04:ec:c1:69:
         2d:a4:76:53:d4:21:87:ef:72:a8:c6:91:0c:93:4d:7b:a8:a6:
         45:e0:c9:f9:67:16:fc:e9:b1:e9:fc:0a:c9:98:68:31:0d:c6:
         00:d2:53:5b:58:db:91:59:02:b0:ca:bc:3b:13:43:86:81:c6:
         47:f3:11:c8:a8:60:c9:f9:a0:13:83:67:51:8d:c6:97:5e:fd:
         18:21:ee:e8:3a:02:98:8c:17:f4:62:19:d3:10:83:22:ac:a2:
         2f:f2:90:0d:a6:5d:bd:98:7c:d0:c0:0e:bc:78:79:4e:92:79:
         15:3e:5e:5a:c2:da:c8:96:50:71:8f:22:bc:94:35:b9:c9:db:
         08:a7:2b:dc:74:79:6a:6b:07:ad:d8:d2:ed:48:b3:1a:b1:6e:
         66:13:61:91:8a:61:1c:cf:87:b7:dd:a8:f4:71:9e:d9:40:c4:
         ae:27:7d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org