Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/Gyzlud70ibUKuJru5uCmAFQOWtM.roa
File:                     Gyzlud70ibUKuJru5uCmAFQOWtM.roa (raw, json)
Hash identifier:          rQG56RrDvAg5aD0Ch8TvlEysLs6WFVAjny+qPRJ1zDw=
Subject key identifier:   1B:2C:E5:B9:DE:F4:89:B5:0A:B8:9A:EE:E6:E0:A6:00:54:0E:5A:D3
Certificate issuer:       /CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
Certificate serial:       03
Authority key identifier: 7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/Gyzlud70ibUKuJru5uCmAFQOWtM.roa
Signing time:             Wed 30 Jun 2021 09:05:16 +0000
ROA not before:           Wed 30 Jun 2021 09:05:16 +0000
ROA not after:            Thu 30 Jun 2022 07:27:03 +0000
asID:                     38853
IP address blocks:        103.169.46.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8257FFDC7CD1CB4196129CD40493352BC83BB9
        Validity
            Not Before: Jun 30 09:05:16 2021 GMT
            Not After : Jun 30 07:27:03 2022 GMT
        Subject: CN=1B2CE5B9DEF489B50AB89AEEE6E0A600540E5AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:71:39:aa:45:4d:39:d1:ff:36:c7:36:74:
                    62:9e:77:8d:5d:2c:3c:06:b4:ac:1e:09:92:34:a8:
                    66:80:a6:9d:5e:3b:52:7d:be:e2:d0:97:cb:30:0f:
                    f2:dd:b6:e2:ee:82:06:7f:d3:3f:07:14:cf:57:ac:
                    b0:55:da:f1:7d:60:69:15:f4:97:36:81:8d:d4:be:
                    73:8d:88:c5:39:16:ab:63:97:7b:7b:ea:7e:80:25:
                    bb:c4:c9:3b:4a:2d:38:b0:0a:e0:2f:ef:fa:1b:fd:
                    91:af:e8:ec:2a:b0:be:af:14:7c:79:fc:82:b8:d4:
                    5d:99:ae:61:f8:04:9b:53:71:10:7d:58:a1:85:b1:
                    8b:c9:2e:e5:c3:1e:82:76:3a:24:1f:14:5e:a0:77:
                    78:05:df:f9:6e:e2:b6:1f:c3:63:2c:68:ca:41:bf:
                    f8:7f:4c:93:54:e9:be:32:69:4a:40:26:bd:d1:7b:
                    cc:6b:57:a2:aa:d5:16:50:a0:72:f8:79:22:8e:df:
                    88:58:29:f4:ea:bd:ba:5c:ab:63:21:b9:8d:62:5f:
                    78:9e:6e:4f:e3:65:68:f7:ab:23:39:19:7b:e1:cf:
                    2d:2c:ac:f7:00:a6:29:c3:d4:bb:8b:62:6a:dd:b9:
                    93:b2:72:a0:11:35:7d:ec:44:ce:dc:c3:95:c9:e7:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2C:E5:B9:DE:F4:89:B5:0A:B8:9A:EE:E6:E0:A6:00:54:0E:5A:D3
            X509v3 Authority Key Identifier:
                keyid:7B:82:57:FF:DC:7C:D1:CB:41:96:12:9C:D4:04:93:35:2B:C8:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/e4JX_9x80ctBlhKc1ASTNSvIO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/e4JX_9x80ctBlhKc1ASTNSvIO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PARAMITA/Gyzlud70ibUKuJru5uCmAFQOWtM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:2f:c0:3b:bd:6c:4a:7e:03:66:44:0e:a0:38:b1:dd:0a:24:
         5e:ed:51:2e:ca:7f:e5:23:76:8d:14:75:93:6e:c0:78:0d:0f:
         71:b2:6c:72:5b:64:82:23:d7:e8:e0:e4:48:1b:37:dd:41:ee:
         15:dd:64:7a:cc:9c:d5:b9:94:7d:ab:0c:52:55:9c:2c:f0:ef:
         04:54:98:2c:e3:10:08:1d:91:3b:07:d1:05:5a:21:35:2e:db:
         0a:3b:a6:6b:e2:f3:29:99:0d:70:99:b3:b0:37:b8:e5:aa:e6:
         4a:af:21:a9:18:92:99:d5:02:c9:31:9f:26:de:33:cd:5a:31:
         77:54:72:7f:68:66:bf:f2:62:e7:60:51:9f:60:40:1c:59:cd:
         0e:1f:86:87:29:cc:21:34:c7:55:c9:0d:5a:11:c4:af:94:64:
         4a:45:e2:e3:80:fb:1e:30:de:28:77:e6:c7:bb:e3:b6:a1:77:
         30:80:c5:01:72:f6:0e:1b:98:f8:85:67:e6:fa:5d:91:60:2f:
         5b:03:1d:28:eb:7b:db:64:e3:89:10:95:49:0a:f6:23:59:6e:
         e2:64:bc:a7:b3:2a:7f:f8:93:87:ff:36:db:87:ad:cd:91:b5:
         d9:4e:83:85:2f:b9:45:09:41:58:73:1b:ce:1d:61:35:b6:63:
         ab:bd:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org