Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/e9q7siZEWF28ENy4rhGPdOEZArE.roa
File:                     e9q7siZEWF28ENy4rhGPdOEZArE.roa (raw, json)
Hash identifier:          yB/m5VvgWd7N0NnmA7yI86CTQwUyH1C3RzY9gPRnaPw=
Subject key identifier:   7B:DA:BB:B2:26:44:58:5D:BC:10:DC:B8:AE:11:8F:74:E1:19:02:B1
Certificate issuer:       /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial:       0AE8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/e9q7siZEWF28ENy4rhGPdOEZArE.roa
Signing time:             Thu 15 Sep 2022 02:40:53 +0000
ROA not before:           Thu 15 Sep 2022 02:40:53 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18042
IP address blocks:        122.99.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2792 (0xae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
        Validity
            Not Before: Sep 15 02:40:53 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7BDABBB22644585DBC10DCB8AE118F74E11902B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:73:5b:c7:9b:c4:92:6e:89:6e:8a:da:91:
                    a0:04:fa:96:14:93:b5:57:20:1f:f2:e8:94:27:62:
                    97:cf:0b:d1:c9:0e:b6:26:91:ec:ad:cb:52:bb:b8:
                    91:35:9d:20:74:13:59:56:64:5c:cc:b7:f3:07:91:
                    6c:19:fe:80:f3:cd:14:66:87:bc:68:f8:09:0b:08:
                    53:fe:51:a4:26:a8:9b:a9:4b:04:92:e2:86:db:9e:
                    59:1a:c3:8a:28:a9:3a:d5:75:f0:5d:ab:11:49:bf:
                    95:5e:5f:5d:83:58:4e:fc:db:fa:b6:78:ab:0c:7d:
                    3f:be:a0:dd:6c:5f:e3:b6:d8:b0:e5:6a:99:a4:03:
                    47:7e:13:18:a7:7c:49:cb:3d:12:b5:1b:2e:53:b3:
                    13:8e:4d:96:52:36:73:7b:b6:a7:53:bf:c1:dc:82:
                    a8:ad:8f:bc:d5:82:6a:4a:50:ac:fd:6f:c4:0a:9e:
                    11:43:d3:e0:8c:5e:d3:24:8e:92:f8:c5:18:82:82:
                    e5:25:55:fe:5c:ab:f3:7f:69:89:4b:58:55:a4:60:
                    53:09:8a:df:f2:97:f1:2d:72:c7:ae:4c:f5:36:e9:
                    d1:41:13:09:e2:e7:32:b0:0b:a0:3e:25:78:56:65:
                    14:5d:cb:0b:73:eb:98:ff:a8:bf:50:dc:11:aa:f0:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DA:BB:B2:26:44:58:5D:BC:10:DC:B8:AE:11:8F:74:E1:19:02:B1
            X509v3 Authority Key Identifier:
                keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/e9q7siZEWF28ENy4rhGPdOEZArE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.99.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:f7:d6:b5:57:56:34:1a:f3:b9:6d:e1:74:17:30:b4:3b:e6:
         87:4a:13:00:bc:ab:ed:43:7b:d9:b7:65:3f:c8:53:0f:ea:07:
         96:0d:f1:6d:ea:5d:6a:30:41:af:5d:59:b5:bb:56:4f:2f:7d:
         16:3e:7c:c5:62:16:86:5b:07:c3:9f:fa:0b:fa:94:c6:db:18:
         b1:17:79:37:e5:8a:0d:27:c5:39:46:51:e1:4a:2a:63:78:4d:
         a0:56:8e:9f:47:47:84:49:4b:d3:b7:b6:af:6a:4e:66:fb:f0:
         7c:14:f6:79:64:40:df:fe:3d:2c:ca:ba:5a:1e:a2:48:58:0c:
         7f:7b:c5:2f:6e:0f:d1:f8:eb:5e:dc:61:a6:83:ee:87:03:04:
         e3:76:3d:e7:85:d9:c2:3d:2c:52:3f:ea:8f:d1:5b:d3:9a:8c:
         b2:56:f4:84:b0:b3:68:e0:e7:0f:61:39:02:35:38:03:f9:9d:
         9b:b0:bd:e1:0e:fb:c5:43:17:57:90:76:55:20:cf:44:c0:8e:
         d2:36:34:76:cd:ec:d5:87:47:99:5b:ff:68:9e:8e:37:1e:9a:
         71:c0:63:ad:0b:d7:17:11:81:0e:94:3d:3d:48:7a:34:8b:d2:
         5c:05:1f:4d:2c:4d:cc:45:b0:03:bd:dd:b2:42:25:bb:46:89:
         1c:4f:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org