Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/DKPIEJoRcY7Eqto0jzHprcoEfOM.roa
File:                     DKPIEJoRcY7Eqto0jzHprcoEfOM.roa (raw, json)
Hash identifier:          i7EeRlSsi24CMRcze9qwrDR8OycUDaRp9b1lXRO9/iE=
Subject key identifier:   0C:A3:C8:10:9A:11:71:8E:C4:AA:DA:34:8F:31:E9:AD:CA:04:7C:E3
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0A4B
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/DKPIEJoRcY7Eqto0jzHprcoEfOM.roa
Signing time:             Wed 01 Jun 2022 03:57:58 +0000
ROA not before:           Wed 01 Jun 2022 03:57:58 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131613
IP address blocks:        103.106.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2635 (0xa4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Jun  1 03:57:58 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0CA3C8109A11718EC4AADA348F31E9ADCA047CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:12:97:34:34:38:bd:3d:4f:64:25:65:89:
                    eb:2c:c8:6e:8e:1e:30:13:19:04:62:66:08:1d:86:
                    aa:37:d8:65:63:dd:4d:06:dd:39:12:14:0e:09:d1:
                    b4:4d:f6:af:4e:29:2d:aa:0c:a2:ee:95:f0:9d:e8:
                    8e:89:ed:e6:40:a7:18:1a:42:d3:b0:84:d0:b7:54:
                    45:9d:11:28:3e:a7:b5:bf:ee:93:cf:42:54:49:bb:
                    e0:3f:1b:8b:b7:bb:42:04:16:20:5d:80:19:a1:9a:
                    d2:17:bc:06:68:90:77:0f:91:62:64:c1:94:93:81:
                    40:47:60:16:4d:28:78:e5:a0:19:68:c7:d6:b2:ef:
                    d4:54:72:2f:87:7b:18:ed:4d:6e:66:65:23:75:66:
                    5b:49:fd:d0:07:2f:a0:1f:14:03:f7:60:85:11:4b:
                    6b:a7:15:ab:7b:8e:90:c4:39:3f:90:15:e3:ad:b8:
                    ac:10:f9:64:3e:6d:af:58:93:3f:47:bb:81:9f:72:
                    91:1b:94:05:f4:7c:84:2e:f5:27:90:17:7e:e1:0d:
                    e9:d9:1e:46:c1:7d:9a:61:35:35:ef:80:2a:f6:ae:
                    27:ae:ed:e4:03:ba:9a:c2:a8:8c:7a:72:25:31:e2:
                    58:45:a8:b6:40:8c:65:6d:e9:12:52:a9:46:68:cd:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A3:C8:10:9A:11:71:8E:C4:AA:DA:34:8F:31:E9:AD:CA:04:7C:E3
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/DKPIEJoRcY7Eqto0jzHprcoEfOM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:2d:ee:3d:6e:3e:da:a5:4c:9e:20:80:9b:96:ca:eb:7c:e5:
         23:b0:93:d0:d1:bc:ec:51:bd:89:9a:da:36:c1:b6:d6:19:e4:
         c3:da:58:e1:1e:5e:eb:02:9f:d7:b5:c7:28:67:2f:6e:95:65:
         7d:8d:ac:a2:01:54:f7:c1:f0:52:5f:85:48:f4:6c:61:53:ab:
         7b:45:04:c5:88:bf:c6:22:be:d7:c1:40:93:21:3a:82:ae:73:
         3f:37:eb:2c:40:1d:0e:55:33:66:5f:19:f8:cf:0f:ec:c0:56:
         a5:f7:f0:dc:93:cc:83:6c:24:d7:46:46:97:47:dc:29:98:06:
         26:73:1c:58:72:b3:64:51:1b:05:cf:b9:29:fb:50:44:9b:25:
         bb:79:fa:65:90:fd:6c:69:00:12:e0:98:cd:ee:f9:1c:1b:0e:
         5c:d0:b8:3c:82:72:58:2e:0a:b8:17:14:31:18:89:55:72:2b:
         ac:28:9d:2f:46:40:83:37:3a:c9:03:b3:c7:be:93:0b:00:e6:
         3b:9b:04:d4:44:6a:49:86:12:be:3d:d3:7c:99:e6:91:72:dd:
         b6:de:3b:90:e8:63:57:e8:8f:ca:e2:6f:76:56:f9:dd:6e:3b:
         c8:44:6b:7c:d0:63:80:a0:e5:d0:27:d4:46:fc:ee:89:26:a7:
         a8:2b:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org