Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/CR510CW_QjPyptZXhiZginnkfoQ.roa
File:                     CR510CW_QjPyptZXhiZginnkfoQ.roa (raw, json)
Hash identifier:          3Y5V7mP4rKuJzo6yInL26PafI6KhbqyuzRAlspzDF4o=
Subject key identifier:   09:1E:75:D0:25:BF:42:33:F2:A6:D6:57:86:26:60:8A:79:E4:7E:84
Certificate issuer:       /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial:       5714
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/CR510CW_QjPyptZXhiZginnkfoQ.roa
Signing time:             Thu 15 Sep 2022 02:47:40 +0000
ROA not before:           Thu 15 Sep 2022 02:47:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38851
IP address blocks:        103.131.172.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22292 (0x5714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
        Validity
            Not Before: Sep 15 02:47:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=091E75D025BF4233F2A6D6578626608A79E47E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:f6:14:4c:56:ed:14:b5:ea:59:f7:4e:56:
                    59:10:55:09:69:55:f3:4f:5a:27:bc:ad:04:2a:db:
                    35:94:90:33:ae:fa:aa:ef:3e:a4:29:47:34:1d:c7:
                    75:79:79:01:15:c2:d6:60:65:e2:3f:f7:ec:2f:6e:
                    5d:8e:09:38:a0:a2:2d:a9:db:80:76:50:a3:f3:bf:
                    d5:89:7b:93:16:3d:35:48:26:6a:a0:f0:d2:4a:04:
                    f2:9b:1f:73:7e:4d:4b:5e:95:72:f9:5e:26:a3:62:
                    7d:d1:d8:9b:47:93:02:14:5d:f3:71:8e:66:89:96:
                    83:e8:22:ec:dc:55:da:de:9e:31:fa:e9:0c:d5:64:
                    78:6f:68:10:24:08:7f:c9:fc:00:2a:c7:61:e0:b0:
                    83:07:48:67:a3:a1:ac:78:78:0a:39:a5:58:34:30:
                    ab:5e:eb:7a:1a:09:0b:3e:10:4b:e1:ff:14:d9:9f:
                    ce:3f:f7:f1:1f:bc:4e:9e:a8:a3:c8:07:3f:ca:c3:
                    29:25:d2:52:58:ab:17:ee:86:e0:20:eb:03:db:43:
                    6f:e1:2d:6f:74:ea:c4:e8:d0:8f:31:eb:fa:30:bc:
                    9b:d0:83:66:a7:d4:d5:71:3e:50:44:d1:39:84:5d:
                    07:0d:0e:e4:85:9a:c2:23:52:82:9a:f6:8f:b7:3f:
                    0a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1E:75:D0:25:BF:42:33:F2:A6:D6:57:86:26:60:8A:79:E4:7E:84
            X509v3 Authority Key Identifier:
                keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/CR510CW_QjPyptZXhiZginnkfoQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:61:53:04:c9:f5:fe:84:d6:6a:0f:e1:de:d7:2b:27:54:40:
         38:f8:10:32:c0:23:f7:ed:a4:f3:2a:56:b4:cf:70:92:fd:b9:
         4f:46:3c:8e:20:77:4b:90:24:20:43:40:df:44:b5:63:ec:60:
         7c:1f:e7:ca:48:39:e4:d2:ee:89:50:c6:e8:1f:a9:cf:59:b3:
         d8:b5:7f:68:2e:45:b0:c6:43:d4:ae:96:d2:92:4c:fa:b7:b1:
         e4:80:f2:47:0a:57:20:f1:28:60:6b:d7:38:04:6b:19:66:bc:
         f8:d6:4d:fa:32:75:92:71:02:c8:88:f7:1e:d4:ee:d6:dd:0b:
         19:34:ab:d0:1c:21:a4:e6:c0:75:ff:d4:b8:b7:89:5d:ca:21:
         7e:af:44:c2:9e:79:82:b6:0a:85:59:e2:37:cd:e0:3a:46:46:
         d2:d2:83:b4:7b:02:59:6e:27:f6:b9:58:ef:f2:9b:6d:64:f7:
         bc:32:53:07:57:9e:75:21:f2:1f:51:19:77:ce:12:72:1c:8a:
         5f:11:4e:7b:8d:47:7d:20:6f:4d:31:7e:6c:37:c2:0c:09:0d:
         cd:05:e8:a8:69:96:79:8d:35:00:dc:b5:59:2a:cc:41:bb:d9:
         a1:07:bb:e4:50:e2:1f:92:c5:a1:2a:e6:03:49:fa:7a:73:bc:
         4a:bf:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:16 2024 by rpki-client on console-ams.rpki-client.org