Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/tyMDBLt5yExV3j4hJpotTv2vZRo.roa
File:                     tyMDBLt5yExV3j4hJpotTv2vZRo.roa (raw, json)
Hash identifier:          N9XmnUbTo+IEryrAgNRsML1FB49cfxJxnpyF5kbYVAE=
Subject key identifier:   B7:23:03:04:BB:79:C8:4C:55:DE:3E:21:26:9A:2D:4E:FD:AF:65:1A
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       09A1
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/tyMDBLt5yExV3j4hJpotTv2vZRo.roa
Signing time:             Wed 29 Sep 2021 02:44:41 +0000
ROA not before:           Wed 29 Sep 2021 02:44:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38047
IP address blocks:        103.106.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465 (0x9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 29 02:44:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B7230304BB79C84C55DE3E21269A2D4EFDAF651A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:32:3c:3c:5e:74:7e:a2:7f:6a:84:41:fc:
                    13:98:76:cc:63:94:32:5d:fc:02:bd:48:d5:4d:68:
                    65:53:b0:99:29:e6:8c:55:37:11:fd:06:96:ad:46:
                    38:5d:c0:76:af:7a:ce:3a:76:37:70:bc:cc:d6:46:
                    8e:62:9f:ff:76:5c:fa:0e:58:55:89:35:26:5d:f5:
                    cb:69:92:d3:8b:63:a3:dc:7a:92:68:2c:5a:b1:b7:
                    e2:ef:42:74:12:df:f9:de:74:26:64:e6:e7:16:92:
                    f3:00:08:ba:0d:8c:e7:32:3b:e4:f5:99:b0:76:a6:
                    b2:a1:08:04:d5:05:4a:9c:8f:08:f0:56:07:55:5f:
                    03:43:4b:a0:30:ca:27:92:cf:b8:70:53:b8:70:7c:
                    08:5a:c5:86:fd:48:85:1c:10:1f:10:bd:d8:b3:64:
                    5d:ff:eb:e9:ed:a1:0e:5a:1a:2a:22:49:db:37:80:
                    4a:53:3a:f6:47:26:9b:63:00:a6:f5:83:12:72:12:
                    bb:b1:e6:2c:02:33:d3:63:72:9e:7e:41:02:e6:f5:
                    a8:46:37:e7:75:27:4c:95:ad:e1:e3:47:2e:c8:03:
                    c3:b0:2e:66:5f:b8:fd:1a:5b:55:f9:f7:fb:cc:7e:
                    b3:5c:fd:d4:8d:05:d5:00:6e:f5:aa:c4:00:78:bd:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:23:03:04:BB:79:C8:4C:55:DE:3E:21:26:9A:2D:4E:FD:AF:65:1A
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/tyMDBLt5yExV3j4hJpotTv2vZRo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:77:65:81:08:9f:17:b7:10:96:2f:fb:2e:3c:60:0f:a0:6b:
         7f:de:d4:ae:86:08:12:96:af:7e:da:69:31:83:28:2c:34:4f:
         30:80:1c:85:8e:21:e1:fa:31:00:5b:32:99:eb:20:a9:43:2f:
         94:dc:78:d6:d7:79:9e:a2:5b:ff:e3:ad:5d:8a:95:66:66:00:
         08:6a:e1:36:80:92:f4:4a:dd:d3:e2:4c:32:78:b8:13:42:fb:
         2d:89:d9:b2:bf:a6:aa:1c:cf:c6:37:bd:3d:3a:03:36:bf:49:
         3e:69:08:83:25:7f:90:98:e7:4a:8b:cd:a5:16:c9:99:0b:d8:
         ad:97:85:12:35:2a:46:76:68:2c:70:8b:c1:66:4c:05:87:8c:
         14:4c:ea:a8:e1:0d:08:13:58:f5:a2:2e:ad:72:c3:87:da:57:
         81:f8:e2:b3:ee:a3:7d:30:84:59:dc:ed:fd:bf:6b:40:97:a0:
         e7:05:fc:78:09:95:54:15:7f:ac:9f:b9:6f:0c:96:ec:18:d6:
         f3:07:6a:ce:7f:24:95:49:9d:f5:2e:05:ee:d6:37:fc:90:46:
         c9:2d:43:18:46:46:43:08:f9:e6:c8:b2:e2:d5:1d:ff:64:94:
         d0:0e:ba:5f:ba:c7:9a:aa:df:4a:81:75:c7:86:b5:ed:7f:f0:
         e4:b8:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org