Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/uuHGbiGNXkdryS7y-kZLwzqzAyk.roa
File:                     uuHGbiGNXkdryS7y-kZLwzqzAyk.roa (raw, json)
Hash identifier:          aZCUbld/kaY+JUYQkAYOyhONDSnLaNP0O4DGa9P0iLM=
Subject key identifier:   BA:E1:C6:6E:21:8D:5E:47:6B:C9:2E:F2:FA:46:4B:C3:3A:B3:03:29
Certificate issuer:       /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial:       557F
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/uuHGbiGNXkdryS7y-kZLwzqzAyk.roa
Signing time:             Sun 07 Feb 2021 13:15:52 +0000
ROA not before:           Sun 07 Feb 2021 13:15:52 +0000
ROA not after:            Tue 23 Nov 2021 09:15:57 +0000
asID:                     38851
IP address blocks:        43.227.26.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21887 (0x557f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
        Validity
            Not Before: Feb  7 13:15:52 2021 GMT
            Not After : Nov 23 09:15:57 2021 GMT
        Subject: CN=BAE1C66E218D5E476BC92EF2FA464BC33AB30329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:ea:9b:10:54:12:f9:6c:e6:ba:f6:a7:08:
                    aa:17:ac:9c:6d:25:c3:b4:7b:23:f9:2d:3d:4a:4b:
                    64:93:c0:59:fb:43:7a:3f:3d:81:bb:a8:2d:54:9b:
                    2c:56:60:5e:aa:bf:fa:92:18:8a:96:be:d9:c9:d6:
                    17:6b:d6:35:3e:84:9d:d1:ae:74:b0:b7:3d:ad:1f:
                    9a:66:b2:29:35:7d:e6:c5:b4:7b:89:77:46:f5:66:
                    7f:d3:54:70:d8:01:01:b5:e4:7a:4d:68:0c:e3:94:
                    87:bc:cb:7f:71:70:4c:ca:d5:d8:68:8d:5d:e1:1d:
                    c8:ac:0e:73:f9:21:6d:51:1e:de:16:8d:72:c0:19:
                    cd:23:84:42:58:f2:40:88:7b:74:c9:98:9b:2b:35:
                    ba:bf:aa:54:47:9d:8b:14:4f:b1:76:b0:13:b3:d8:
                    d3:00:bc:cf:69:9c:c5:9e:1d:2a:61:d6:ce:b9:69:
                    07:a0:36:35:bb:a0:61:c0:9b:b7:d0:0a:c6:aa:3a:
                    73:97:bf:ba:a0:f3:6d:bc:96:29:eb:44:8c:3f:86:
                    5f:5e:9f:a3:78:7b:2c:a6:7a:5e:4c:43:4b:19:73:
                    a1:5f:df:a7:45:47:9c:86:53:57:6c:ea:bd:2d:13:
                    59:e0:14:a7:01:57:59:23:2b:8e:67:9b:ed:f1:e3:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E1:C6:6E:21:8D:5E:47:6B:C9:2E:F2:FA:46:4B:C3:3A:B3:03:29
            X509v3 Authority Key Identifier:
                keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/uuHGbiGNXkdryS7y-kZLwzqzAyk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:04:c7:9c:73:83:e6:fd:8c:2f:b5:bf:7e:15:dd:e7:96:
         e5:0d:8c:4b:d0:9c:bd:c4:5b:7a:5a:5b:19:ab:3b:1f:c3:d0:
         51:2e:bf:2a:62:94:92:a0:56:da:fa:f1:c3:67:b0:b7:a4:df:
         74:ff:87:de:b5:3d:b6:e4:ad:d4:b2:3f:67:39:25:1f:cd:6b:
         15:c9:9d:3a:66:84:79:7e:59:d4:a2:31:25:54:ad:85:c4:a6:
         69:28:28:91:4d:d2:21:de:d1:ed:c3:5c:1d:27:53:7b:0c:d7:
         8c:03:17:ec:ad:44:0f:7e:bd:f2:8c:15:ef:ca:4f:5f:fb:7c:
         0a:9d:56:9e:61:4f:3b:bb:35:3c:3f:1e:24:68:bc:6c:1b:ac:
         e2:70:a7:fe:7b:80:f0:cb:80:5a:ba:93:e3:03:94:61:09:99:
         4b:1b:a9:2b:df:20:c1:69:4f:8f:4d:50:be:b8:d0:9e:72:88:
         fe:a8:dc:16:a3:af:63:aa:09:b1:77:ca:6d:10:27:ec:c9:1c:
         c9:86:04:57:5c:e4:df:86:3f:66:ce:76:24:23:d6:54:92:3e:
         70:b5:70:37:d8:be:78:13:47:7f:7d:0d:c2:da:73:94:17:8b:
         37:a6:0f:38:04:9f:f7:f0:ca:47:9a:75:27:49:cc:f9:4a:28:
         63:f8:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org