Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/uJHtA1Ednot3LRkQWAEmkcEUvWI.roa
File:                     uJHtA1Ednot3LRkQWAEmkcEUvWI.roa (raw, json)
Hash identifier:          EaZOOdhmskD9H/+MhTP0OY70Y55f/tf3Poj4g3uC26o=
Subject key identifier:   B8:91:ED:03:51:1D:9E:8B:77:2D:19:10:58:01:26:91:C1:14:BD:62
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0B92
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uJHtA1Ednot3LRkQWAEmkcEUvWI.roa
Signing time:             Sun 07 Feb 2021 06:26:05 +0000
ROA not before:           Sun 07 Feb 2021 06:26:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        45.64.228.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2962 (0xb92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 06:26:05 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B891ED03511D9E8B772D191058012691C114BD62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:d9:09:37:1b:cc:0e:da:b3:82:e6:89:89:
                    ea:e0:75:77:8a:af:e3:18:1a:5f:fa:69:42:92:37:
                    ed:6a:30:67:14:cd:08:29:20:9c:bd:07:03:d2:30:
                    53:10:0b:a9:06:4a:f4:a6:fe:83:b6:b9:7f:be:c1:
                    4c:a9:20:be:89:01:95:dd:06:8c:af:b6:f3:96:fd:
                    1e:dd:8c:18:9f:6b:d1:8b:52:2f:c1:f4:95:e7:3b:
                    ab:94:d7:45:42:0d:77:77:c5:bc:99:d2:26:11:a0:
                    88:c3:07:48:5e:4f:35:af:ea:95:30:c4:6c:bd:7a:
                    ec:a0:79:59:2f:e0:2b:a8:1f:eb:4e:a1:bd:12:6d:
                    9c:fd:4d:aa:cd:b3:c6:cb:8f:73:a3:5e:06:fd:1b:
                    6f:87:59:5f:62:e0:5f:75:59:ba:04:e4:f3:fd:a2:
                    ec:e3:77:9f:42:30:c7:b4:22:a7:ce:cb:52:b1:02:
                    5b:7e:c3:17:97:d0:3a:7b:08:9a:7e:03:b8:dd:8d:
                    0c:b0:da:4d:47:2f:b4:f6:40:ef:33:66:73:f8:07:
                    b9:28:db:74:47:0b:28:cf:0c:45:00:ce:fa:0d:4b:
                    61:4f:01:f4:1d:72:bd:b0:ba:c7:91:ef:c7:1f:f0:
                    e3:e9:05:a6:60:6f:31:e0:d4:be:02:1e:4a:df:5b:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:ED:03:51:1D:9E:8B:77:2D:19:10:58:01:26:91:C1:14:BD:62
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uJHtA1Ednot3LRkQWAEmkcEUvWI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:b3:99:33:59:99:2a:99:3a:6f:56:ff:57:40:13:ab:b7:49:
         e8:ec:c4:4b:2f:a0:9a:3f:54:c4:36:34:5b:8c:d4:78:ff:87:
         f6:50:f6:ae:06:ff:2a:36:7c:15:14:7e:ab:74:53:aa:3f:f4:
         77:d6:02:ac:aa:90:30:d2:b6:27:bf:47:4d:f2:54:ca:75:38:
         08:87:a3:fc:46:aa:9a:21:6c:1e:b2:72:ec:e0:f8:b0:02:6f:
         20:40:14:73:80:b0:8e:2a:a3:00:d7:51:f5:2f:1f:af:6a:72:
         15:bd:fe:a0:74:a1:60:3f:6e:5b:67:07:32:e2:c8:e7:07:88:
         c8:60:54:5d:5c:7c:5a:00:64:2c:ba:ba:68:5a:c7:06:60:f7:
         c9:1e:0d:5a:13:1b:c2:69:bf:42:c2:f0:44:fa:70:4c:e5:7e:
         2a:bc:c1:6d:fa:60:6b:0c:26:5e:91:ef:41:02:f6:f4:80:93:
         a0:43:00:81:27:f6:58:d5:07:0e:0f:da:b3:32:eb:38:b9:7a:
         ed:59:5d:de:37:db:46:fd:5d:47:bf:b1:21:75:da:6b:4c:4c:
         ac:fe:dc:12:e4:54:92:84:9d:08:25:6f:4d:09:a2:b1:0c:12:
         18:b8:14:11:8e:da:2d:bf:c3:2b:91:41:68:56:f0:9f:14:f2:
         0d:76:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org