Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/jCLfO4ob34wk8a_6kvfotdH0mqI.roa
File:                     jCLfO4ob34wk8a_6kvfotdH0mqI.roa (raw, json)
Hash identifier:          B8i0oQq98FZS8vX0/9z4g7njsXqzMQSM7nwGBC3yeBg=
Subject key identifier:   8C:22:DF:3B:8A:1B:DF:8C:24:F1:AF:FA:92:F7:E8:B5:D1:F4:9A:A2
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       0F27
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/jCLfO4ob34wk8a_6kvfotdH0mqI.roa
Signing time:             Wed 09 Nov 2022 09:15:16 +0000
ROA not before:           Wed 09 Nov 2022 09:15:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     396982
IP address blocks:        103.125.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3879 (0xf27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Nov  9 09:15:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=8C22DF3B8A1BDF8C24F1AFFA92F7E8B5D1F49AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:a0:81:10:bc:de:65:df:99:05:6a:c6:26:
                    17:1c:0e:80:ff:f1:82:b1:e1:3b:0b:5c:3a:3b:fb:
                    a8:60:72:5a:14:21:e1:d3:45:7d:2b:b6:f6:d6:96:
                    de:e1:f8:b5:d2:ee:de:f5:e5:fc:5f:6e:4d:76:20:
                    6a:8b:de:f9:0d:69:52:40:b5:87:d5:f5:b9:2d:f4:
                    ef:5b:e0:f2:db:5b:12:d5:67:5e:53:0f:94:6c:6c:
                    fc:34:04:84:1c:70:37:c1:b2:17:49:cc:94:4e:31:
                    a3:4e:b0:04:16:3d:f5:55:17:ec:30:ea:79:07:97:
                    3d:93:4d:b3:d4:30:53:a1:b6:c6:67:50:95:ee:fc:
                    20:5d:b1:d6:d4:b9:0c:b3:b0:03:b5:79:82:20:ac:
                    a9:40:67:f3:55:dd:24:86:c4:fb:ea:84:43:ea:f1:
                    db:19:a8:d1:c4:11:f6:8d:a5:96:63:b3:7a:fd:52:
                    d4:a4:72:46:c8:89:28:7e:21:60:7d:47:29:40:a2:
                    73:ec:90:29:a0:a3:62:fe:c0:c2:72:e0:36:19:2d:
                    64:fc:71:81:ae:75:c1:7a:c0:6d:b6:a3:e3:82:57:
                    84:4c:89:07:ac:ee:b8:d4:c6:de:e9:53:ea:16:d3:
                    ca:6b:af:d6:ba:5e:bc:bc:5a:97:58:49:0f:b3:a7:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:22:DF:3B:8A:1B:DF:8C:24:F1:AF:FA:92:F7:E8:B5:D1:F4:9A:A2
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/jCLfO4ob34wk8a_6kvfotdH0mqI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:4c:a0:aa:57:5f:0c:d4:d8:1b:77:79:d0:4a:24:8b:e2:fc:
         4b:8f:a7:06:c9:bb:3d:fb:30:4a:cf:79:10:5f:f3:31:ed:91:
         e3:21:1b:cf:6a:37:73:04:f1:5f:22:f2:fa:74:3a:0f:ed:6f:
         f2:24:a9:0b:4d:31:79:57:b5:36:59:5d:0e:fc:0c:b8:85:b1:
         4b:a1:c3:c5:ca:77:53:44:a9:58:9a:2d:d6:8d:3f:88:a9:9d:
         36:62:e3:dd:be:ca:bf:2d:fd:47:ed:2a:eb:98:27:06:ba:c0:
         90:ad:ae:fd:45:33:34:8d:9e:a2:a8:94:f6:da:7c:c0:6f:59:
         d7:26:fe:74:e2:f5:71:ad:00:7a:4a:28:84:e9:ef:de:bb:53:
         19:ba:88:5b:75:5e:04:5d:6b:b6:6a:b4:92:f7:34:0f:d6:ba:
         bf:11:fa:a8:8d:95:3b:f3:8a:03:f5:9c:15:75:f5:99:fe:48:
         aa:44:1b:64:12:90:2a:32:c4:dc:b6:ec:ed:08:74:79:7e:88:
         da:24:25:d9:ec:7d:c0:e4:38:df:9c:0c:c7:48:25:87:1a:e7:
         95:a0:c2:4e:1f:7d:74:c2:74:92:05:bf:02:e3:30:7a:5e:10:
         56:db:0d:b3:70:3e:e4:3b:e7:67:1b:70:fd:85:a6:24:8b:c1:
         45:0f:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org