Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/loBZGYPowmN-4KJ0FY1wXQJhlss.roa
File:                     loBZGYPowmN-4KJ0FY1wXQJhlss.roa (raw, json)
Hash identifier:          Ig7pZA9wWDKeqpvPHgc0qpf+FMEHTDkmOAixAps4QSU=
Subject key identifier:   96:80:59:19:83:E8:C2:63:7E:E0:A2:74:15:8D:70:5D:02:61:96:CB
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0A54
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/loBZGYPowmN-4KJ0FY1wXQJhlss.roa
Signing time:             Wed 01 Jun 2022 11:41:48 +0000
ROA not before:           Wed 01 Jun 2022 11:41:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38047
IP address blocks:        103.106.54.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644 (0xa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Jun  1 11:41:48 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9680591983E8C2637EE0A274158D705D026196CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:1b:82:04:a2:a0:5c:55:18:a5:b7:db:f6:
                    7b:fc:dc:cd:ac:f9:5d:cd:18:14:c1:b3:f6:33:6f:
                    6e:d2:de:d8:26:18:02:0f:2d:93:32:c8:ff:c1:a0:
                    7f:6b:d4:49:9d:90:35:b4:c4:d4:b1:18:f2:cd:ed:
                    63:08:76:6c:04:70:22:eb:8c:87:91:e7:1d:82:28:
                    16:72:a2:24:01:65:89:f9:f7:92:7e:fd:2c:b9:18:
                    d7:fd:f3:63:90:75:3c:d4:d5:e8:82:55:be:cd:92:
                    89:30:aa:1c:c6:7d:d6:4e:b0:d6:8d:ed:a1:b1:47:
                    cb:a7:57:44:d7:43:54:0b:d9:f3:e4:94:65:b1:9f:
                    1e:25:5c:17:0f:11:f6:58:ad:06:f6:18:36:40:26:
                    74:e8:8f:62:d2:a2:da:9b:6e:0b:66:2c:d3:86:98:
                    fd:79:1b:3e:79:3b:d9:58:ca:81:dd:90:e0:0f:ae:
                    f5:01:58:f6:39:50:fc:31:21:76:3d:e3:c1:70:c6:
                    4d:05:dc:dd:62:8b:ed:5d:5d:43:76:7d:24:2a:a8:
                    ec:8d:45:3f:a0:8c:4e:b9:99:01:b6:9e:ff:18:14:
                    6c:d3:fd:54:68:85:be:dd:ba:38:94:e6:73:ac:de:
                    31:a2:07:b5:0a:47:dd:38:c3:e3:7e:23:4f:d2:aa:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:59:19:83:E8:C2:63:7E:E0:A2:74:15:8D:70:5D:02:61:96:CB
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/loBZGYPowmN-4KJ0FY1wXQJhlss.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:49:10:cf:8f:88:61:4a:8c:29:0f:48:fe:85:aa:46:d5:85:
         b8:5b:76:bf:bc:49:a2:5a:b1:df:3d:0f:ba:01:29:0e:b6:ae:
         23:88:38:14:ab:de:05:f3:4f:86:71:ce:71:93:46:bf:f6:58:
         99:2f:a5:0e:a3:83:4b:34:ac:48:c3:0a:86:f3:16:cc:1d:8d:
         a6:f6:48:40:ff:1c:51:5e:26:6f:65:e1:cc:74:c5:90:ce:70:
         f4:58:5d:be:aa:0f:6c:61:25:db:36:57:45:11:c8:3c:06:c6:
         66:f5:62:8f:82:de:16:e6:95:ea:57:f4:9c:05:11:77:90:dd:
         fa:20:43:18:31:bf:24:11:84:9b:8f:d8:d9:22:fd:97:94:0f:
         a5:a8:82:b3:e1:fa:d5:4b:65:d2:3d:e3:c6:7f:24:58:e0:7a:
         a4:8d:b9:0e:1e:83:76:0e:b4:7f:93:49:a2:55:a8:d7:f4:d8:
         39:8c:86:0a:0e:99:15:80:66:64:d4:d3:c2:3c:14:d1:8e:c4:
         a3:4a:41:2c:51:9e:67:e3:3e:ed:23:4f:76:c8:fc:c8:25:4e:
         8c:b6:c8:4a:e6:0e:83:60:48:6d:ba:d6:e0:b6:79:11:01:71:
         95:fb:d8:8d:4c:b2:09:f3:69:dc:7e:b6:0e:00:dc:4e:b7:78:
         5a:59:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org