Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/-uoWcYjAL-vUhSM1Jt3H34K9Jvs.roa
File:                     -uoWcYjAL-vUhSM1Jt3H34K9Jvs.roa (raw, json)
Hash identifier:          aJVtDLqlQbNXeLeZXxk3S7zK9tpYXRi+flqEmt6bees=
Subject key identifier:   FA:EA:16:71:88:C0:2F:EB:D4:85:23:35:26:DD:C7:DF:82:BD:26:FB
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0AA4
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/-uoWcYjAL-vUhSM1Jt3H34K9Jvs.roa
Signing time:             Thu 15 Sep 2022 02:44:10 +0000
ROA not before:           Thu 15 Sep 2022 02:44:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38047
IP address blocks:        103.106.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724 (0xaa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 15 02:44:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FAEA167188C02FEBD485233526DDC7DF82BD26FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ab:e1:cb:82:b7:4c:8a:28:f2:0c:0b:b7:1c:
                    2e:89:9c:6d:f1:56:1e:b3:86:45:69:e8:16:77:49:
                    55:0c:2d:d6:69:bb:77:e8:b7:37:81:e6:9c:e3:5c:
                    08:d6:4f:d4:b9:04:9f:10:ab:1d:8e:5c:1c:c7:af:
                    f4:a6:a2:b2:05:07:fa:2c:a5:6f:d2:eb:64:9c:e3:
                    a2:66:3f:1d:08:dc:6c:a6:45:e2:41:bd:48:23:16:
                    4d:d3:a7:cf:4b:07:c9:46:21:f8:15:f3:eb:a5:5c:
                    b2:bf:f6:f3:b4:3d:5e:06:bb:48:9c:46:00:aa:03:
                    a6:91:97:ee:ab:47:ae:eb:6a:95:c8:b7:36:e5:c4:
                    da:7e:3b:ca:b8:db:a5:5c:c1:86:10:32:b1:26:0b:
                    25:00:b5:f3:e4:c4:ca:e9:3b:d7:12:49:b0:7d:83:
                    47:a8:f6:a0:c4:2b:e7:87:67:fe:94:0b:d9:38:dc:
                    fa:f8:2a:8a:ad:d4:e8:2d:20:3d:a4:4f:78:37:16:
                    60:a6:f0:b1:c0:0a:d8:12:e9:33:05:de:22:33:89:
                    ca:91:c8:a0:00:02:d2:7d:c0:5f:e6:59:da:6e:85:
                    fd:4f:63:ec:6d:c7:b4:5e:5e:f8:06:5e:8e:5e:48:
                    ca:0a:84:0a:84:d8:14:82:c6:72:a0:1a:ad:31:63:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EA:16:71:88:C0:2F:EB:D4:85:23:35:26:DD:C7:DF:82:BD:26:FB
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/-uoWcYjAL-vUhSM1Jt3H34K9Jvs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f7:5d:a0:d7:a8:02:48:65:25:55:f0:99:75:a7:33:82:08:
         12:99:4a:94:e6:0f:bf:17:ee:f6:0f:5f:16:f9:96:7d:9a:d1:
         85:18:36:1d:a8:e2:41:39:e2:4c:3c:47:ba:2a:55:2a:2b:9e:
         00:92:45:0d:2d:b3:a0:9b:74:90:5f:cc:1b:d9:2f:60:93:32:
         5f:44:e8:04:89:b4:33:b3:1a:84:02:8d:b4:26:6d:63:e2:d2:
         f0:71:eb:94:d5:63:5c:c1:53:92:83:84:33:c3:fd:66:1b:de:
         77:d4:97:80:cc:29:d9:f1:ac:3f:6b:a8:1a:84:ef:c0:f9:9c:
         d1:12:99:16:ef:db:8c:0f:3f:ac:e9:dd:8d:cb:15:3e:be:5a:
         39:57:74:d1:07:b0:90:76:46:fb:c5:69:48:1b:de:8a:74:8e:
         df:f7:ae:87:79:83:c5:07:64:63:0d:cd:59:29:5a:71:99:5e:
         2b:37:ad:69:02:a9:34:0e:59:45:11:f6:2c:ba:8c:eb:bc:4b:
         25:ce:f1:db:8c:97:b6:82:3d:6a:9b:5e:8a:42:13:0f:82:89:
         8a:95:75:83:5f:a6:2d:8b:ab:a6:10:d9:c7:9e:a2:59:86:86:
         f1:62:53:34:2f:a8:b4:32:15:d6:37:16:f3:c1:ce:64:5f:17:
         a5:84:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org