Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/lTB060bcw9AfriMiJQbR-r8N8oI.roa
File:                     lTB060bcw9AfriMiJQbR-r8N8oI.roa (raw, json)
Hash identifier:          AVARTvMMxZE6a9p9HfImvOWdSsTWYpNSjd7QiqzWCnY=
Subject key identifier:   95:30:74:EB:46:DC:C3:D0:1F:AE:23:22:25:06:D1:FA:BF:0D:F2:82
Certificate issuer:       /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial:       0892
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/lTB060bcw9AfriMiJQbR-r8N8oI.roa
Signing time:             Mon 01 Mar 2021 11:41:19 +0000
ROA not before:           Mon 01 Mar 2021 11:41:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     48024
IP address blocks:        103.122.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
        Validity
            Not Before: Mar  1 11:41:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=953074EB46DCC3D01FAE23222506D1FABF0DF282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:11:b4:f6:06:60:ea:fd:0c:2e:da:c4:44:
                    9c:f1:e9:4c:80:c2:07:9a:c1:06:f9:17:dd:fa:eb:
                    38:28:61:e4:1a:8c:76:f1:d5:dd:8b:33:4d:94:11:
                    17:57:cf:78:1e:25:29:c5:bf:92:10:54:a7:f1:09:
                    09:86:e8:f5:a2:98:37:89:5a:03:30:e7:1e:e0:0d:
                    8f:8d:6b:00:e4:f6:24:c4:f7:ac:7e:89:78:a5:95:
                    08:fe:a2:9f:22:f9:80:46:46:ff:6a:0f:62:28:87:
                    f4:fa:a6:8b:4d:00:87:0f:c9:88:e5:79:ef:4b:7b:
                    c8:af:73:18:a8:93:c7:42:03:e1:0e:d6:62:5b:fc:
                    5b:18:e8:ab:aa:8b:bb:ce:a4:a7:ae:f9:90:8d:8d:
                    2d:fa:91:4b:93:ce:84:42:e3:d0:95:a6:b5:ec:c2:
                    8f:c7:f5:ad:19:fc:a8:dd:68:c4:68:c0:22:23:71:
                    93:aa:21:e2:a8:60:f1:15:a3:22:19:68:f0:8a:5c:
                    a6:09:6a:18:2d:ee:7d:08:be:9f:55:0b:30:13:35:
                    96:e5:8b:e4:05:cc:f9:7d:48:b5:60:fe:17:b1:e2:
                    66:98:3f:75:d6:c2:e7:36:a3:c6:ec:46:f2:a8:58:
                    11:d0:3a:60:4f:28:99:b9:67:2f:43:75:40:f2:59:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:30:74:EB:46:DC:C3:D0:1F:AE:23:22:25:06:D1:FA:BF:0D:F2:82
            X509v3 Authority Key Identifier:
                keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/lTB060bcw9AfriMiJQbR-r8N8oI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:51:13:95:96:29:b7:98:dd:11:92:e0:06:66:89:95:39:c2:
         cb:34:9e:10:4b:f8:0a:f8:d9:bc:09:87:f2:ed:67:7f:a5:e7:
         0f:07:af:ad:c8:85:23:c6:3b:5d:00:97:26:db:6d:96:7c:f5:
         67:aa:5c:35:e2:f8:fd:88:ed:b1:64:0d:b5:e5:85:dc:e6:89:
         39:1b:cf:21:2b:de:bf:0b:24:12:55:45:20:f9:2d:6d:b1:55:
         6c:83:1d:47:df:de:2d:66:be:40:44:90:af:7e:31:e5:3d:de:
         2c:ad:15:3f:25:4b:62:b3:7f:cf:46:7e:9c:34:3f:ac:e2:a0:
         2e:18:7f:0e:b3:cd:b5:63:90:39:9e:cb:aa:dc:ea:b2:66:c6:
         56:db:70:6a:86:20:03:33:7a:d9:d7:13:27:2c:ce:e9:d3:21:
         34:82:3f:54:e0:64:3c:b7:a6:4b:c0:7c:b7:70:2b:c1:65:f5:
         df:ef:d1:e2:aa:7f:94:3c:1a:70:9f:e3:6e:5a:a8:c5:54:0c:
         9d:29:bf:7d:41:83:86:e1:9b:52:f3:02:3e:24:f6:18:84:80:
         6d:d6:01:d2:ed:9d:15:31:ff:6b:fe:7a:7b:4e:f3:60:d0:ac:
         07:ab:07:12:c2:7f:00:6e:c6:69:eb:10:84:68:96:06:f9:c9:
         e9:5d:fb:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:16 2023 by rpki-client on console-fra.rpki-client.org