Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/Boc52uGNgxwkFrxjVUt7UTMr3jM.roa
File:                     Boc52uGNgxwkFrxjVUt7UTMr3jM.roa (raw, json)
Hash identifier:          kvyS0iEcb/aZTzZzWAYCphj6ak5L5d/pfTx93Vc+SZk=
Subject key identifier:   06:87:39:DA:E1:8D:83:1C:24:16:BC:63:55:4B:7B:51:33:2B:DE:33
Certificate issuer:       /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial:       0750
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/Boc52uGNgxwkFrxjVUt7UTMr3jM.roa
Signing time:             Tue 29 Sep 2020 10:00:42 +0000
ROA not before:           Tue 29 Sep 2020 10:00:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17710
IP address blocks:        103.234.80.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
        Validity
            Not Before: Sep 29 10:00:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=068739DAE18D831C2416BC63554B7B51332BDE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c6:7e:d9:00:e3:e0:2c:85:38:b3:b3:ea:5c:
                    8a:6c:97:41:44:1c:ff:2a:30:fb:ed:71:c9:fc:61:
                    a8:e4:72:69:6e:50:82:ea:f5:1f:f9:fd:e9:04:64:
                    c1:9f:8d:fc:e3:28:8c:b9:aa:d9:ae:3e:91:f7:a8:
                    b6:06:ec:bc:c1:fb:f8:b0:d4:67:ba:37:ff:af:47:
                    ef:8f:5a:c5:50:72:3c:f7:f8:4f:e2:a8:6f:21:51:
                    1f:ad:cc:32:73:46:41:ec:61:10:08:af:d7:c6:b9:
                    6d:fd:f9:3f:91:e9:04:7d:41:75:f5:9d:19:4c:21:
                    8b:7f:f6:26:5a:5d:5a:11:be:74:7a:10:31:ff:ef:
                    b0:fa:e8:64:96:27:1f:13:e2:fc:63:03:0d:84:a5:
                    82:00:0c:69:3f:de:d1:75:f8:92:e3:98:b0:bc:66:
                    c6:b2:7f:c5:38:4d:37:b0:1c:67:96:90:4e:a6:e2:
                    c4:01:86:e4:34:1e:58:7a:82:81:27:76:8b:25:16:
                    de:43:b9:2c:61:1a:7e:81:79:4a:4c:7d:e2:18:07:
                    09:55:d1:ad:44:8d:58:72:98:54:65:86:06:6d:7e:
                    a1:6d:a6:f1:b5:e0:d2:14:98:2d:bd:b6:42:c7:bd:
                    e7:02:09:e8:68:52:54:cf:6c:b5:ed:3f:0e:3c:4c:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:87:39:DA:E1:8D:83:1C:24:16:BC:63:55:4B:7B:51:33:2B:DE:33
            X509v3 Authority Key Identifier:
                keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/Boc52uGNgxwkFrxjVUt7UTMr3jM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:12:2c:1a:ef:85:cb:ea:72:c1:aa:74:dd:2d:6b:85:89:
         7d:49:99:74:9f:c6:53:fa:b9:3c:da:62:84:d0:53:04:2c:7e:
         85:4b:a9:ae:5b:49:a0:c2:2e:d7:7b:e9:34:ac:9c:4d:12:06:
         b1:22:cf:0c:15:5f:81:1b:10:05:e9:5a:b8:c7:e2:08:8a:13:
         d2:a6:b4:0a:2e:30:87:05:b7:a0:7c:b7:8d:c9:8a:1d:7c:2d:
         71:f5:1b:ec:29:0e:7c:f2:b1:98:6e:f7:b6:25:a3:f1:ea:8c:
         53:21:cc:a9:00:f7:ea:a9:fd:02:2f:5f:d0:6d:e1:37:28:33:
         58:05:04:38:c6:8b:b1:bb:2d:6e:6d:50:05:4d:68:29:0a:51:
         67:01:c8:31:e2:69:da:43:9c:d2:f5:52:8b:aa:a4:3d:41:6d:
         40:ae:5c:e6:f5:a4:f8:a0:7a:95:f2:d3:07:58:64:9a:67:f9:
         da:f4:19:80:fe:35:c1:73:bb:f3:67:b7:fd:1f:2b:74:51:13:
         6c:c4:2f:a1:be:bd:5c:3c:42:fd:a1:da:b9:0d:29:a3:ce:91:
         6d:66:25:d1:6b:22:e7:aa:c1:63:79:b8:d8:4c:d3:20:62:b7:
         4c:18:fb:f5:90:26:7a:d6:0f:32:92:5a:00:10:8f:f5:b4:f6:
         84:b4:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:17 2024 by rpki-client on console-ams.rpki-client.org