Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/H9WGoKKEvHvFYMJ0RWV6KOQG39s.roa
File:                     H9WGoKKEvHvFYMJ0RWV6KOQG39s.roa (raw, json)
Hash identifier:          lunE+dZQSrZYeEV87bf13SRluDDhp1UA0EVrrQQneow=
Subject key identifier:   1F:D5:86:A0:A2:84:BC:7B:C5:60:C2:74:45:65:7A:28:E4:06:DF:DB
Certificate issuer:       /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial:       78
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/H9WGoKKEvHvFYMJ0RWV6KOQG39s.roa
Signing time:             Tue 16 Aug 2022 11:01:53 +0000
ROA not before:           Tue 16 Aug 2022 11:01:53 +0000
ROA not after:            Tue 07 Mar 2023 02:33:36 +0000
asID:                     38047
IP address blocks:        103.182.226.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
        Validity
            Not Before: Aug 16 11:01:53 2022 GMT
            Not After : Mar  7 02:33:36 2023 GMT
        Subject: CN=1FD586A0A284BC7BC560C27445657A28E406DFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:01:1d:49:58:a3:e1:e8:0d:b7:23:0d:93:
                    7f:26:ef:a1:88:0d:e1:0b:e5:24:ac:0b:c5:8b:22:
                    81:67:36:fd:ca:e2:5f:f7:d4:ef:c2:ad:4a:8a:46:
                    26:a7:27:73:bd:68:66:0b:ce:41:8d:97:8e:4b:ca:
                    bb:fa:9d:3b:66:2a:55:44:1c:db:c2:36:b1:bc:4d:
                    9c:83:59:c2:85:3f:3a:1e:fa:be:26:f4:96:52:45:
                    ae:be:83:07:1c:d7:f2:61:01:14:25:cf:de:7d:3f:
                    2d:c6:54:5c:76:09:31:ae:00:96:50:ea:40:26:5b:
                    98:eb:75:e7:3c:11:a7:3e:89:e2:4e:3c:2e:24:b8:
                    19:fc:75:0d:36:74:b8:3c:a6:fd:0f:71:ae:de:fc:
                    5b:50:29:ee:37:e9:81:31:1d:5c:3f:cc:be:80:0d:
                    3c:89:df:a9:8c:cb:f2:0d:8f:54:ca:7a:8d:64:af:
                    2e:f6:8b:3e:0d:75:b8:e9:cc:df:94:b3:b6:fd:ff:
                    3f:2a:5a:5a:5a:ba:ec:41:5a:ef:0c:fb:c9:89:03:
                    d5:f4:64:3a:32:db:d9:47:c3:02:29:21:6d:d6:f4:
                    34:60:a9:20:b7:62:46:a0:cc:6a:a6:fb:fb:f0:7a:
                    cb:7a:fa:10:9a:7b:9c:76:b3:b9:4b:bb:02:ec:f5:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D5:86:A0:A2:84:BC:7B:C5:60:C2:74:45:65:7A:28:E4:06:DF:DB
            X509v3 Authority Key Identifier:
                keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/H9WGoKKEvHvFYMJ0RWV6KOQG39s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:d1:4a:ce:0c:48:76:e5:72:b3:b2:0f:93:8f:a8:bb:42:81:
         b6:31:fe:9d:b0:c8:46:dc:2c:36:b4:a2:aa:e0:d7:93:26:b4:
         6a:c8:fd:cb:4f:c8:03:5c:f7:7c:3b:83:ed:93:32:ab:18:72:
         ab:69:44:ca:6d:d1:3f:63:02:d6:6e:8c:8a:00:f2:b3:20:1d:
         03:da:61:0f:92:64:50:2d:04:3a:7e:28:97:b0:2d:a9:2b:f8:
         aa:a0:1a:43:55:f8:44:79:44:6f:93:93:db:55:b4:70:d4:a9:
         0e:02:9c:86:12:ed:a2:70:d9:9f:d3:6b:19:f9:1f:88:eb:1e:
         ac:7b:d9:6b:87:67:e1:fd:d7:12:09:f0:ec:e6:41:26:c2:16:
         05:75:40:4b:17:d1:9d:f2:db:9f:65:dc:03:8f:d1:e7:4c:ba:
         50:dd:f3:d4:9e:02:db:70:2c:01:c9:cf:9f:89:b4:3c:87:9e:
         56:f0:3d:2f:c3:55:00:41:3c:b4:a9:8b:20:19:72:14:55:07:
         dc:58:be:06:c1:21:56:58:5e:40:ac:af:e5:22:b9:b9:a4:f8:
         f6:2c:b3:4c:dc:7d:3c:2d:d0:a4:51:58:33:0b:96:a8:c1:b3:
         59:e9:49:87:7c:5f:fe:37:5c:94:5a:57:ae:5a:99:af:bb:0f:
         fa:62:d3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org