Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/QVsZwhGo08ddfSJf5Pj5_ma72LA.roa
File:                     QVsZwhGo08ddfSJf5Pj5_ma72LA.roa (raw, json)
Hash identifier:          VmhbH83yALvnKTmiZ25sfxvtzg7gEyyB9M/M6pnP2Bs=
Subject key identifier:   41:5B:19:C2:11:A8:D3:C7:5D:7D:22:5F:E4:F8:F9:FE:66:BB:D8:B0
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       08D8
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/QVsZwhGo08ddfSJf5Pj5_ma72LA.roa
Signing time:             Tue 02 Feb 2021 12:36:51 +0000
ROA not before:           Tue 02 Feb 2021 12:36:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38047
IP address blocks:        103.106.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Feb  2 12:36:51 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=415B19C211A8D3C75D7D225FE4F8F9FE66BBD8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:65:21:22:5e:d3:1c:a4:f0:84:71:75:c2:
                    41:45:fa:c0:77:d0:1e:b6:8c:31:4a:b7:c4:7a:c1:
                    29:3e:e4:4e:69:be:2a:16:43:35:7e:ee:5b:f2:61:
                    65:09:53:55:79:80:41:ff:76:0b:be:88:9e:d5:c4:
                    04:2e:3f:c0:10:36:84:9d:e1:28:4f:e0:89:4f:7f:
                    27:43:a4:f3:ba:cd:35:3a:e4:7d:c8:99:9c:a8:4e:
                    3d:28:66:66:62:1c:c5:e3:21:d9:36:6d:3e:40:11:
                    eb:a4:20:e0:16:0e:ee:1a:4a:8e:5e:dc:0d:a9:dc:
                    06:3a:fe:05:75:50:3a:b7:4d:65:4a:86:f5:3a:ea:
                    d7:99:38:16:89:ac:71:fe:3a:92:93:d7:69:8a:53:
                    fb:06:eb:b5:31:ec:73:92:31:1f:d0:e9:5d:6d:a2:
                    90:b6:ac:ed:db:a9:e7:6a:ce:a7:8d:dd:37:ad:62:
                    e7:01:8e:13:9b:a2:b5:29:8f:b4:ec:09:ca:4e:cf:
                    64:4c:c1:42:37:16:6a:62:5b:a1:0c:4c:de:49:36:
                    86:0d:6a:3f:27:7f:5c:6e:00:9a:ff:c2:17:0e:a3:
                    5c:a8:08:97:b3:73:54:ff:13:f2:4c:77:ff:e4:f8:
                    1b:23:db:27:cf:cd:41:92:5b:94:00:b3:09:6c:62:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5B:19:C2:11:A8:D3:C7:5D:7D:22:5F:E4:F8:F9:FE:66:BB:D8:B0
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/QVsZwhGo08ddfSJf5Pj5_ma72LA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:dd:a3:34:27:51:c5:92:2b:e4:b9:6b:28:35:de:6b:b8:
         70:6e:49:d2:1e:5b:77:b0:c3:81:81:32:bf:8f:46:72:79:b3:
         cf:ed:ec:9b:79:86:17:fe:0d:24:f7:2c:07:c6:bb:0a:31:56:
         b6:f8:82:7e:ad:f7:29:2f:ba:38:5a:57:78:ac:28:47:ea:0c:
         34:05:c3:65:d8:6b:e0:2e:69:eb:dd:7e:79:d5:be:f1:8a:b8:
         39:ed:1f:ad:76:21:14:64:3b:6e:df:a0:b8:e5:81:6c:04:50:
         f3:be:f5:0e:a4:0e:26:78:12:0c:df:a8:b0:de:93:ad:a1:12:
         18:09:54:10:5b:c3:56:10:07:49:2a:8c:79:44:98:49:93:88:
         50:c6:a8:49:3c:8a:88:31:12:57:ee:e4:94:46:07:3e:df:5c:
         96:cf:78:17:82:bf:43:2a:91:e9:63:ba:33:95:eb:36:d3:53:
         d5:17:bf:97:6a:e9:99:5c:8a:91:67:8f:57:c7:37:e3:a4:ab:
         2d:58:a6:73:57:c5:1c:4d:44:e9:30:de:d5:6d:44:68:ac:b8:
         98:64:90:14:ff:8c:ee:f2:c0:eb:85:da:74:0a:bc:4e:17:71:
         94:d6:a2:f2:04:3b:4a:a4:6a:b9:2a:95:fd:80:41:08:12:7c:
         17:67:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org