Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/8ZUYwouLpMRAoqLoRvG8FLmTSIM.roa
File:                     8ZUYwouLpMRAoqLoRvG8FLmTSIM.roa (raw, json)
Hash identifier:          zVlVMTymLkJ0h9Yy3tVeZIUWysdOS4RUZWKVa2dLShI=
Subject key identifier:   F1:95:18:C2:8B:8B:A4:C4:40:A2:A2:E8:46:F1:BC:14:B9:93:48:83
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       0F9F
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/8ZUYwouLpMRAoqLoRvG8FLmTSIM.roa
Signing time:             Thu 27 Apr 2023 08:42:47 +0000
ROA not before:           Thu 27 Apr 2023 08:42:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     16509
IP address blocks:        103.125.227.0/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3999 (0xf9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Apr 27 08:42:47 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F19518C28B8BA4C440A2A2E846F1BC14B9934883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:91:ef:a1:70:33:49:16:46:29:22:72:1a:
                    0e:e9:fc:3f:22:a4:16:3e:85:ba:9c:1c:8b:a8:70:
                    b2:41:b1:58:6a:b1:ae:1c:27:72:55:bb:43:c2:82:
                    1f:31:79:46:fa:cd:26:49:be:06:ff:c6:2b:ca:4d:
                    8e:fc:39:1d:c6:de:bf:df:56:01:c9:06:ec:50:b0:
                    69:7f:d2:93:88:7f:d8:a8:a1:18:5f:9a:b4:7a:55:
                    b7:25:64:f6:a6:cc:2e:e0:22:98:a9:54:93:41:fe:
                    58:96:d4:f7:6a:89:8b:2a:f8:26:f7:44:00:5c:53:
                    dd:97:17:b8:5f:1b:44:47:81:e4:50:af:75:53:d8:
                    af:8b:61:41:ca:96:5f:3b:dd:08:e4:f0:e4:47:de:
                    8b:a3:12:7a:29:e0:f2:2e:8c:75:d2:0a:52:b9:d5:
                    e1:0b:d9:1d:25:4d:6c:21:47:4b:2e:1d:b2:88:64:
                    1f:63:31:e0:51:2d:4a:2d:35:bd:e9:33:4e:5c:9d:
                    e2:56:4a:2d:7a:73:cb:0d:f4:5d:d7:0a:91:34:07:
                    6b:1c:4c:fe:ae:88:bd:db:b9:76:3c:62:b8:7e:8f:
                    8f:45:c5:63:18:b9:b3:bc:5a:f6:b2:0c:5f:f7:d8:
                    1c:e4:12:45:da:1c:50:a4:f9:5d:f3:af:14:ac:fe:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:95:18:C2:8B:8B:A4:C4:40:A2:A2:E8:46:F1:BC:14:B9:93:48:83
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/8ZUYwouLpMRAoqLoRvG8FLmTSIM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.227.0/29

    Signature Algorithm: sha256WithRSAEncryption
         ae:64:5e:eb:25:ca:57:6b:41:ba:11:88:f2:ab:c7:42:76:ce:
         60:e3:fa:da:9d:51:8a:16:c8:89:05:95:81:f8:45:94:dc:6f:
         f7:3d:59:c0:af:24:40:94:fe:9c:4d:9f:1a:18:2c:89:88:05:
         a2:54:b9:72:94:7c:aa:60:4f:ad:20:11:e9:47:1a:a3:8b:87:
         3e:36:73:c8:d3:b6:fa:9a:20:04:f9:e4:b2:46:b9:ba:cd:8e:
         54:8d:f9:53:47:a4:49:66:53:aa:5f:69:c4:4d:a3:93:98:e7:
         08:a4:aa:96:08:70:91:3e:d2:10:c3:24:72:5a:74:1d:37:dd:
         d9:cb:47:4d:1d:02:c6:70:3c:6b:65:b8:68:e0:65:0e:fd:ac:
         70:d2:d1:b9:92:6e:35:81:bb:4b:c0:b6:c0:74:4a:4e:c8:a2:
         af:1f:1a:83:86:8d:51:c4:13:57:8a:a3:61:2a:33:b7:86:33:
         1c:84:f1:fc:49:0e:36:3a:35:a5:16:32:ab:e6:42:9b:34:d9:
         51:21:92:f1:5f:01:e9:f2:19:3a:dc:41:a8:83:84:0f:b4:2a:
         37:71:ee:af:16:4a:87:26:b4:4b:84:58:3d:a4:14:04:d0:2a:
         72:af:3a:ad:91:63:02:36:91:16:f1:1a:74:ff:f4:69:c5:70:
         02:fe:d4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org