Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/G2Dpq2y2duUhu-A_8T3VK-mHz60.roa
File:                     G2Dpq2y2duUhu-A_8T3VK-mHz60.roa (raw, json)
Hash identifier:          ozKRIQ4IlTFQjPY47pmnbU5tfMIXq6St3ERqNONvT/w=
Subject key identifier:   1B:60:E9:AB:6C:B6:76:E5:21:BB:E0:3F:F1:3D:D5:2B:E9:87:CF:AD
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       08BC
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/G2Dpq2y2duUhu-A_8T3VK-mHz60.roa
Signing time:             Thu 31 Dec 2020 02:54:59 +0000
ROA not before:           Thu 31 Dec 2020 02:54:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38047
IP address blocks:        103.106.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2236 (0x8bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Dec 31 02:54:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1B60E9AB6CB676E521BBE03FF13DD52BE987CFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:17:d7:cd:6a:37:4f:1f:f1:bb:6f:81:a0:
                    28:04:ea:7c:41:08:13:9a:d1:e3:40:57:86:b2:a0:
                    7f:31:86:d0:d0:92:83:1e:19:44:4b:82:9f:10:16:
                    71:c4:d1:f7:8e:0b:a2:14:fd:9a:ef:93:a0:8f:b6:
                    35:f4:cf:5a:b5:24:0d:f9:b8:55:30:ec:81:5e:13:
                    f8:19:1a:fa:e6:47:74:f8:6a:e8:7a:6b:3f:3c:24:
                    04:a5:e9:11:5f:66:91:dc:ea:d7:6c:85:23:d0:ba:
                    e9:ab:20:f9:c0:57:b9:b3:b9:c4:dc:1a:97:7b:02:
                    ec:59:4b:da:48:5c:f5:27:7e:8c:27:99:92:a7:16:
                    22:d3:af:8e:12:55:f3:e5:ee:e3:0a:61:3f:d6:75:
                    8c:60:7f:ab:3e:36:87:22:ad:93:d6:42:48:28:e3:
                    50:b1:84:78:f3:4b:d0:d7:18:d2:49:0a:37:f3:ba:
                    33:84:19:89:d7:be:23:31:8b:32:b0:84:b3:34:72:
                    31:d8:97:24:08:b0:fc:a7:64:34:79:f3:27:8e:c7:
                    c3:5e:85:7a:57:f6:36:ec:bc:6a:e6:7e:52:fb:0f:
                    9d:e6:77:02:3c:7c:2f:da:a4:3b:79:29:56:fc:a8:
                    67:59:a9:c3:b3:00:00:8b:79:a5:7b:20:a0:f9:e5:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:60:E9:AB:6C:B6:76:E5:21:BB:E0:3F:F1:3D:D5:2B:E9:87:CF:AD
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/G2Dpq2y2duUhu-A_8T3VK-mHz60.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:a5:21:8d:ac:ed:44:81:74:38:f0:c2:0d:ec:fe:36:75:cd:
         9a:a8:09:7a:35:34:df:c0:5f:09:79:fb:c2:ce:d7:82:1d:d6:
         38:c8:32:23:a0:f8:15:06:1e:0a:ae:dc:0f:fb:bf:38:ee:70:
         de:56:33:82:a0:24:db:33:b0:97:b3:9f:e7:18:df:03:ed:1a:
         36:64:b9:12:13:a2:6b:5e:fd:26:d0:a1:29:5f:5d:39:4e:46:
         e2:b4:6f:45:38:2b:1a:8b:75:e2:e0:b7:c4:9e:2e:d0:7c:0d:
         1e:ad:91:fc:7f:42:25:33:37:0b:52:b9:94:f3:82:7f:c0:04:
         fd:bb:3e:00:f9:07:27:3b:3e:6c:10:bd:1d:eb:68:34:42:f6:
         aa:58:c8:90:84:89:33:67:7b:76:cf:0b:4f:e9:fd:54:6b:0a:
         9b:b9:4d:c2:04:ad:34:08:df:3c:9e:9c:07:4a:8a:8c:f3:23:
         58:d3:6c:bf:a5:2b:78:ce:b7:41:04:3c:44:50:b5:c7:68:31:
         1e:fd:6b:88:f5:75:33:da:ca:71:97:f9:65:cb:4e:74:7b:ad:
         e0:50:1e:10:23:4b:68:1b:0c:15:b9:b1:b8:4b:cb:0b:d6:9c:
         08:df:c3:af:8a:1a:73:95:36:e5:55:64:02:40:10:24:31:8a:
         45:14:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org