Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/CVeMgxfX7EczBM8rxulQ7vOcdFQ.roa
File:                     CVeMgxfX7EczBM8rxulQ7vOcdFQ.roa (raw, json)
Hash identifier:          jSWI/7SXACSc7ZU4kCA1v9HGkH9c+ZapNft31a/7Q8s=
Subject key identifier:   09:57:8C:83:17:D7:EC:47:33:04:CF:2B:C6:E9:50:EE:F3:9C:74:54
Certificate issuer:       /CN=602CBCE32DD76D0BB39F5A706324248869119435
Certificate serial:       0A3E
Authority key identifier: 60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/CVeMgxfX7EczBM8rxulQ7vOcdFQ.roa
Signing time:             Thu 15 Sep 2022 02:41:34 +0000
ROA not before:           Thu 15 Sep 2022 02:41:34 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131587
IP address blocks:        103.228.216.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2622 (0xa3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602CBCE32DD76D0BB39F5A706324248869119435
        Validity
            Not Before: Sep 15 02:41:34 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=09578C8317D7EC473304CF2BC6E950EEF39C7454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:8c:d8:c9:c3:23:81:10:d1:14:3b:25:7f:
                    45:d3:cd:a1:86:4b:ae:80:a6:8c:c9:df:53:6f:74:
                    f6:b0:19:4e:a4:99:3e:12:ed:df:ad:72:85:70:3f:
                    c8:58:c3:f5:5a:c6:e9:1b:94:a5:54:d3:4a:14:b1:
                    33:57:f1:7a:56:54:c6:5c:43:5f:81:60:1f:a0:f8:
                    8a:38:c3:b1:9b:ae:65:fe:76:3f:14:c3:f1:08:98:
                    4f:02:3a:83:1d:8e:6e:0c:7d:97:d6:63:25:f0:8d:
                    85:46:3b:14:33:31:5e:df:a6:38:62:98:7a:f3:82:
                    72:e5:e8:1c:62:59:4a:4f:f2:b2:f4:a3:b4:27:6e:
                    54:77:86:2e:fa:d6:8d:44:0b:15:2c:d0:8e:b4:03:
                    8d:05:16:2b:c8:c4:5c:72:ec:b0:d1:c7:a3:d1:1b:
                    bf:82:e4:f5:38:80:0b:c0:b6:37:34:e7:f1:ad:33:
                    4b:2a:35:5a:5f:79:d2:1b:1d:ba:dd:33:66:3d:97:
                    1b:45:c2:11:c4:f4:2b:83:27:c3:9c:e4:2c:c2:63:
                    dd:84:29:19:51:73:5b:84:22:ef:30:74:a1:4d:df:
                    a6:a7:d1:d3:37:94:33:5d:2d:a5:3d:56:b5:75:04:
                    5b:45:46:26:52:dc:e7:ce:37:e3:33:a5:ca:41:b5:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:57:8C:83:17:D7:EC:47:33:04:CF:2B:C6:E9:50:EE:F3:9C:74:54
            X509v3 Authority Key Identifier:
                keyid:60:2C:BC:E3:2D:D7:6D:0B:B3:9F:5A:70:63:24:24:88:69:11:94:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/YCy84y3XbQuzn1pwYyQkiGkRlDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YCy84y3XbQuzn1pwYyQkiGkRlDU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MEGAICBC/CVeMgxfX7EczBM8rxulQ7vOcdFQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:31:4c:b4:bb:23:89:ae:12:68:aa:bb:d3:cb:52:a0:72:b4:
         6a:e2:44:39:f2:2c:3e:91:95:fb:0d:50:82:ec:79:59:2d:36:
         9a:24:4b:c7:a4:d0:1f:a5:16:fb:91:1c:56:71:5f:58:94:4b:
         f9:8e:c7:31:34:2d:0a:49:4e:c7:3a:fd:5f:4a:82:04:aa:00:
         25:5a:8d:3b:ee:97:c3:af:25:70:22:e9:91:d5:3c:34:04:eb:
         d2:23:33:2b:6a:75:df:08:37:17:b7:46:d7:0e:0b:fd:4f:f7:
         b6:6a:df:04:10:97:eb:63:f9:6d:bb:e0:b3:64:68:ce:16:8c:
         48:ea:df:9d:f4:cc:5a:51:a7:cd:d6:5c:2b:db:bd:bd:0c:f4:
         db:4b:e4:d4:a2:bc:43:48:47:31:24:e3:cc:46:10:91:aa:17:
         3c:a4:9e:70:69:be:cd:d1:ba:91:94:6d:84:67:9e:80:bf:d9:
         3b:b1:5f:80:ef:6e:a3:9a:e0:1d:5c:cf:12:c4:0b:fe:b6:95:
         d5:09:ca:72:2f:ab:cb:94:75:e0:f1:c3:3f:50:0a:c2:f9:1b:
         bc:56:4f:3e:e7:aa:43:ad:fe:65:31:0d:22:ca:b4:1f:de:0a:
         af:52:19:29:49:98:c9:2e:c8:12:33:de:a2:f7:17:fe:3c:12:
         36:e8:8b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org