Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/thhSGONviy0SNLnSCz84ODDsycY.roa
File:                     thhSGONviy0SNLnSCz84ODDsycY.roa (raw, json)
Hash identifier:          Z/gosFcVUzJnPNwWLGbB/B0TsYL77O3wKkdsLq9Qx80=
Subject key identifier:   B6:18:52:18:E3:6F:8B:2D:12:34:B9:D2:0B:3F:38:38:30:EC:C9:C6
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       09A2
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/thhSGONviy0SNLnSCz84ODDsycY.roa
Signing time:             Wed 29 Sep 2021 02:44:42 +0000
ROA not before:           Wed 29 Sep 2021 02:44:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38047
IP address blocks:        103.106.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466 (0x9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 29 02:44:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B6185218E36F8B2D1234B9D20B3F383830ECC9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:29:80:ae:32:23:ba:d6:da:53:12:04:1a:
                    0b:0a:7e:cf:2f:a5:62:b2:89:1c:b7:98:b1:1b:d1:
                    62:98:1f:9a:d9:74:08:e7:49:9b:1a:82:07:02:0c:
                    a7:c7:4c:7f:ab:84:86:6e:8b:cb:e1:58:a2:08:2c:
                    d8:3e:ee:b2:ed:8c:cb:8b:b0:a1:ba:be:fd:48:f2:
                    16:f0:99:8b:a7:4a:b6:36:ca:e8:83:2c:81:c2:f8:
                    a4:2c:3e:0a:4c:9c:6e:7d:2f:79:97:66:57:86:50:
                    df:42:d5:15:ca:0e:b7:08:4e:cf:d1:2e:29:62:1c:
                    f0:58:46:2f:cb:43:ca:0c:bd:4c:a0:70:5d:71:e6:
                    11:3d:3a:44:51:48:32:04:ce:8b:1b:6b:52:3a:67:
                    ee:54:77:7f:a9:b1:60:a7:51:6b:e4:93:69:01:61:
                    4a:33:c6:f7:fe:50:75:55:97:05:76:f0:28:aa:c0:
                    23:ff:6d:ff:0d:2d:95:cf:5d:de:c7:1e:93:2e:f2:
                    e8:87:d0:23:22:73:a4:0c:68:2c:3d:5b:af:cf:43:
                    9c:4a:a4:61:03:db:76:b7:08:4f:17:77:50:4a:e8:
                    60:26:22:31:d8:49:9e:b3:58:02:cf:87:a1:db:98:
                    e1:44:49:0e:d0:0f:a4:99:b5:c1:70:85:75:40:4f:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:18:52:18:E3:6F:8B:2D:12:34:B9:D2:0B:3F:38:38:30:EC:C9:C6
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/thhSGONviy0SNLnSCz84ODDsycY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e8:32:27:01:7f:4e:be:bd:d2:49:12:92:7b:11:29:5a:5f:
         14:5f:4b:a0:30:16:45:ee:fe:fb:f5:5e:82:b9:8e:ab:8c:22:
         b9:f5:e4:ee:f8:a1:7f:cb:60:41:1d:10:2f:ce:a4:62:2c:a9:
         cf:36:08:27:d9:cb:fc:9c:9a:de:88:31:ff:be:70:76:ce:29:
         e5:d7:5b:42:ac:40:de:53:d2:2b:2b:53:7d:89:2c:5f:d4:69:
         41:9b:4d:d3:0a:a1:9d:3f:ab:21:84:2f:a5:b7:54:95:b3:f9:
         77:94:f8:52:58:e7:45:1b:a3:df:f3:8b:63:b3:77:85:a7:80:
         1f:54:c6:55:af:42:89:34:98:bf:20:57:21:e2:2f:89:2d:f3:
         d4:50:df:b7:54:47:2f:41:24:7f:04:1d:20:39:82:57:2f:42:
         76:25:a4:7d:e8:c9:60:07:9d:1f:73:84:18:d5:85:9f:9e:c5:
         7d:1b:a1:3a:24:ff:6b:7f:39:a2:b4:03:3c:f7:a9:b7:3e:e0:
         6d:06:bd:d6:f7:8d:9e:13:f9:c3:87:db:94:a0:18:29:3d:4a:
         a1:10:45:2c:6f:a6:31:f0:7d:0e:1e:bd:ce:88:f3:15:a7:f9:
         ff:1b:2f:49:94:03:3c:0b:69:ce:ae:9e:d4:5c:1f:fd:fe:49:
         ec:d3:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org