Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/lu8etEy7ahd7ndDNQ5HGozGU5VA.roa
File:                     lu8etEy7ahd7ndDNQ5HGozGU5VA.roa (raw, json)
Hash identifier:          gzP5n/OaTLZyHC9SBav4s1dK0GD56NZpy1HDLO+2a0U=
Subject key identifier:   96:EF:1E:B4:4C:BB:6A:17:7B:9D:D0:CD:43:91:C6:A3:31:94:E5:50
Certificate issuer:       /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial:       031A
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/lu8etEy7ahd7ndDNQ5HGozGU5VA.roa
Signing time:             Thu 15 Sep 2022 02:41:32 +0000
ROA not before:           Thu 15 Sep 2022 02:41:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131677
IP address blocks:        103.152.252.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
        Validity
            Not Before: Sep 15 02:41:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=96EF1EB44CBB6A177B9DD0CD4391C6A33194E550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1e:61:83:1a:a0:d4:94:e1:04:52:25:73:9b:
                    2f:b2:b3:7c:28:44:ee:2d:46:65:40:f8:b4:c4:3d:
                    f3:17:ae:20:18:76:b2:4e:f5:0c:35:15:07:10:42:
                    b2:83:b4:4e:7b:6e:6d:ab:73:b0:14:ef:6f:88:23:
                    a4:f7:58:fa:aa:b4:7c:47:61:2e:2b:80:12:1c:6d:
                    52:13:8a:a6:b7:c9:2f:42:00:66:93:b0:5c:c8:4f:
                    6e:96:61:59:18:42:35:44:04:80:19:b8:80:fb:a8:
                    8f:3f:3d:5e:ae:1b:6f:3a:d8:92:a5:c4:da:80:52:
                    86:af:6c:7d:29:2a:d4:42:a5:2c:2e:4a:69:84:33:
                    a2:f7:ef:f8:a8:14:90:d6:e9:85:b5:a1:5d:3b:d7:
                    a3:82:41:bb:bd:5a:ad:d1:05:d8:7b:a9:d3:d3:a1:
                    a3:43:90:7b:65:8f:4f:d1:dc:a8:39:7b:fc:9a:01:
                    f7:b4:a8:ce:87:d2:b5:4e:ac:63:2d:fe:0d:9c:0d:
                    eb:a3:31:6c:02:c4:ab:83:b2:73:2a:96:f8:4f:fa:
                    9a:ca:5d:b6:2d:d7:c0:15:97:bf:b2:bb:ed:a4:03:
                    c3:4c:e0:59:3d:13:7a:34:89:22:ce:8f:70:ce:37:
                    09:20:ff:f2:dc:6f:88:dc:62:d1:5d:85:8c:14:2b:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EF:1E:B4:4C:BB:6A:17:7B:9D:D0:CD:43:91:C6:A3:31:94:E5:50
            X509v3 Authority Key Identifier:
                keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/lu8etEy7ahd7ndDNQ5HGozGU5VA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:df:7c:a7:df:9c:fd:33:2d:16:c5:e0:7e:d6:1d:81:6c:c2:
         42:12:d1:44:31:0a:b7:c1:40:9a:f7:e3:e2:dc:52:d5:8e:67:
         a0:f9:74:17:4f:c9:38:ac:1a:98:4a:b6:43:87:da:39:e0:a5:
         e4:b5:d5:4a:6e:e1:0b:9d:76:77:76:bb:bc:c1:f0:87:e9:97:
         d7:d3:f6:0b:c7:26:1c:52:f9:1b:d8:cf:2a:09:69:83:a9:59:
         fc:f1:d4:0e:e7:4f:b7:ff:a7:fb:54:76:f4:8b:b0:3f:15:0d:
         6f:a6:ec:c0:af:c7:76:01:3e:cf:4f:aa:ff:00:4f:9a:3b:4e:
         ce:12:32:3e:11:a7:fd:1d:42:3f:85:b1:7f:b0:c8:81:e8:b9:
         3e:d2:aa:68:29:88:6f:07:12:5f:f5:f2:66:e4:54:53:4e:89:
         50:5e:69:ed:4c:bd:39:e2:e5:ab:dc:ee:58:99:7f:78:5d:30:
         14:77:d8:cb:1b:f4:c1:ea:6d:31:0b:76:d4:e6:19:e8:fc:45:
         fb:f2:d6:c7:ef:9c:8d:cd:95:0b:10:eb:d5:f6:94:fb:8d:89:
         3f:0f:94:0f:0b:61:a8:ef:9b:35:4e:7d:50:20:f3:13:72:a1:
         14:76:4a:88:86:76:36:04:fe:7f:1b:f3:3c:4c:b0:c8:65:f2:
         57:e4:42:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org