Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/cGtIoUCk-FLg5E4zOex-x_q6J9s.roa
File:                     cGtIoUCk-FLg5E4zOex-x_q6J9s.roa (raw, json)
Hash identifier:          ssxNe3Ww3jGCwozvKkctHm4wfgcGTOSyAHyjNoYSnYk=
Subject key identifier:   70:6B:48:A1:40:A4:F8:52:E0:E4:4E:33:39:EC:7E:C7:FA:BA:27:DB
Certificate issuer:       /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial:       05
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/cGtIoUCk-FLg5E4zOex-x_q6J9s.roa
Signing time:             Tue 08 Mar 2022 12:41:40 +0000
ROA not before:           Tue 08 Mar 2022 12:41:40 +0000
ROA not after:            Tue 07 Mar 2023 02:33:36 +0000
asID:                     131613
IP address blocks:        103.182.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
        Validity
            Not Before: Mar  8 12:41:40 2022 GMT
            Not After : Mar  7 02:33:36 2023 GMT
        Subject: CN=706B48A140A4F852E0E44E3339EC7EC7FABA27DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:58:26:98:88:fd:10:9e:79:85:16:57:6c:
                    c1:9a:64:89:8d:36:5d:b2:8b:3d:72:5f:00:89:03:
                    30:f6:e7:86:bc:de:7e:28:0e:3f:9e:a6:36:29:04:
                    04:b6:c3:5c:b0:c7:d0:7c:7e:30:82:7d:85:ce:1b:
                    2e:3b:3e:ab:c5:c0:9c:8c:bf:a3:59:33:9c:be:bd:
                    27:19:08:fc:ba:40:fa:06:13:bc:20:3e:5a:ad:91:
                    d1:28:9d:2c:e3:6a:cc:0f:87:e0:4a:b4:33:fa:97:
                    1a:52:c3:bc:2e:2f:cd:04:48:b9:7b:14:b8:dc:28:
                    91:fc:3d:4c:a6:9a:65:19:22:ab:71:ec:99:af:ea:
                    5c:2b:7b:27:60:c5:a7:34:46:bf:d2:9f:43:fa:8a:
                    60:04:3f:c7:74:0c:b2:82:fa:ae:95:a4:20:a7:dd:
                    4b:34:34:74:56:ac:d9:3e:ab:6b:58:7e:dc:a7:8a:
                    2d:01:42:38:cc:91:8a:3a:cd:cf:ca:c7:cc:e6:78:
                    0e:6b:a3:0b:c5:43:b9:1d:cb:66:66:ad:10:7d:de:
                    a5:cc:09:21:8d:fa:79:74:9b:37:fe:3b:95:19:c1:
                    96:3b:e2:3e:42:d8:be:2b:90:2c:aa:81:bf:5c:bc:
                    cb:92:46:91:89:d0:c7:e4:04:56:02:bb:9d:27:73:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6B:48:A1:40:A4:F8:52:E0:E4:4E:33:39:EC:7E:C7:FA:BA:27:DB
            X509v3 Authority Key Identifier:
                keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/cGtIoUCk-FLg5E4zOex-x_q6J9s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:51:4f:b6:54:14:62:cf:2d:dc:45:cc:b6:a6:f8:1c:16:47:
         41:05:58:97:63:d1:3d:13:17:29:ed:8c:90:07:41:ff:96:d4:
         6f:28:da:38:9e:54:fc:44:52:89:5f:fe:e7:2a:c9:63:a2:00:
         18:22:7a:ac:63:19:25:ed:13:07:04:ed:97:ba:5e:52:69:a3:
         1a:1e:21:28:73:c3:c4:67:e3:f3:33:e1:79:99:1b:98:1e:70:
         d2:4c:51:8a:fc:56:1c:55:a5:35:b9:6d:50:c0:39:32:ae:4f:
         1c:7c:06:e0:ec:5c:51:64:25:2f:7a:2f:2b:03:22:b5:ae:f0:
         a8:9c:18:81:26:8b:9c:45:6f:2c:3b:a2:6a:cb:78:8a:74:5d:
         25:ce:3f:c5:c8:ec:d4:c1:26:dd:14:d8:a9:ec:89:84:0d:95:
         69:53:a8:ef:4c:6d:45:12:b3:74:39:3a:85:57:8c:b0:89:1f:
         a2:93:bd:48:aa:d6:af:3a:1d:54:35:47:24:b9:34:47:66:c7:
         5d:4a:bf:55:ad:29:22:6b:52:94:b8:ac:11:58:60:bd:06:d7:
         58:0b:8a:46:7b:20:c3:02:29:00:21:d6:60:ea:0a:2c:7a:72:
         10:74:37:a7:76:d0:05:22:fb:57:bb:ef:11:9a:25:9d:11:f3:
         29:20:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org