Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/SIXXLyojMiIfcu0H--XS7oaUF4A.roa
File:                     SIXXLyojMiIfcu0H--XS7oaUF4A.roa (raw, json)
Hash identifier:          n/Wbz6PZ3smuGrdSF91HaVQO8yuiC4rx4GvwrjFJcJY=
Subject key identifier:   48:85:D7:2F:2A:23:32:22:1F:72:ED:07:FB:E5:D2:EE:86:94:17:80
Certificate issuer:       /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial:       5587
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/SIXXLyojMiIfcu0H--XS7oaUF4A.roa
Signing time:             Sun 07 Feb 2021 13:15:58 +0000
ROA not before:           Sun 07 Feb 2021 13:15:58 +0000
ROA not after:            Tue 23 Nov 2021 09:15:57 +0000
asID:                     38851
IP address blocks:        103.46.190.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21895 (0x5587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
        Validity
            Not Before: Feb  7 13:15:58 2021 GMT
            Not After : Nov 23 09:15:57 2021 GMT
        Subject: CN=4885D72F2A2332221F72ED07FBE5D2EE86941780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:4b:71:c7:56:e1:c2:ab:30:40:39:1f:e4:
                    7f:5e:94:7e:67:7c:bb:61:b3:32:83:00:fb:2a:4c:
                    74:c3:38:ea:c0:72:6c:d7:dc:7f:76:33:5b:87:2b:
                    04:1b:7a:20:cd:8b:2f:37:ef:2c:85:2d:bb:0a:0d:
                    a6:34:65:ba:51:f9:e2:af:f9:d3:33:26:83:84:d2:
                    b9:da:e1:d9:92:23:e8:0a:a4:5e:24:d1:8e:05:15:
                    7e:59:d9:b5:34:70:e3:03:82:da:89:c3:51:43:5d:
                    77:70:9a:dc:95:12:c6:a5:db:1b:5a:83:64:f3:3e:
                    2d:1e:28:31:7a:ca:d8:fe:59:7d:94:31:07:73:c1:
                    03:1d:f4:34:f9:fc:c7:b1:e1:1c:05:d7:f6:aa:6f:
                    15:2c:71:7f:1a:41:d6:bf:60:16:b5:5e:78:7e:32:
                    ba:49:73:cc:a2:a9:4b:3e:8a:d0:f0:9e:0d:32:be:
                    56:b9:08:33:f1:3e:25:14:5f:32:65:fc:4a:43:0a:
                    f6:51:61:d0:19:bd:d2:68:a0:32:e8:b4:1c:09:6a:
                    1d:58:fe:e5:76:7c:8d:d3:14:3e:4b:9a:16:41:bf:
                    69:59:57:88:07:4c:25:b0:0d:e4:22:e0:cc:fd:e9:
                    fc:0f:df:8e:16:70:51:68:5c:b9:92:d1:31:69:54:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:85:D7:2F:2A:23:32:22:1F:72:ED:07:FB:E5:D2:EE:86:94:17:80
            X509v3 Authority Key Identifier:
                keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/SIXXLyojMiIfcu0H--XS7oaUF4A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:d9:8c:b9:89:00:0c:38:ca:cd:f7:ce:02:20:3b:6c:cd:21:
         88:11:32:ad:93:a6:9b:6d:68:7c:80:1c:f2:15:7f:9d:6e:54:
         ad:e2:c2:c3:59:72:39:09:a0:21:b8:4f:bc:d0:fa:41:2b:5b:
         bf:00:b7:38:aa:8d:56:66:c6:00:35:20:10:75:ce:16:35:9a:
         e3:31:10:8e:51:d9:93:78:ab:9e:20:ee:eb:0d:96:bc:f5:80:
         c4:19:8f:9b:44:2d:83:7a:ad:23:91:15:d7:54:9e:70:f5:9b:
         41:d9:39:06:2f:9c:51:54:05:f6:12:ce:25:91:72:9e:76:cb:
         1c:50:e9:a9:7e:b3:da:01:27:60:0f:6d:31:53:d9:72:1b:1a:
         09:6d:5f:71:cc:cb:0e:56:f5:e5:a0:34:d3:4c:7e:f1:1e:5c:
         68:f0:6e:4d:6a:b1:59:1b:66:fc:2e:44:83:34:29:90:6b:ef:
         60:1a:85:b5:4d:42:01:28:86:ef:02:be:2e:47:a8:67:f3:f5:
         e8:84:86:dd:0f:62:bc:ee:92:96:a0:4e:ac:89:85:6c:84:f0:
         9a:6c:65:0a:80:09:d7:5c:8e:96:ab:29:af:83:26:3e:09:e6:
         6c:3e:bd:1c:95:db:9c:b9:b0:db:30:25:b0:76:e0:b1:cb:c1:
         4d:e0:11:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org