Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/yVvTCuc6z1NoQaIDdSt-oxDKei4.roa
File:                     yVvTCuc6z1NoQaIDdSt-oxDKei4.roa (raw, json)
Hash identifier:          Kcsx/0vlgSnAx2m9Q8qKnC61HKN44w/PWWMvklrkWBY=
Subject key identifier:   C9:5B:D3:0A:E7:3A:CF:53:68:41:A2:03:75:2B:7E:A3:10:CA:7A:2E
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0793
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/yVvTCuc6z1NoQaIDdSt-oxDKei4.roa
Signing time:             Tue 29 Sep 2020 09:53:06 +0000
ROA not before:           Tue 29 Sep 2020 09:53:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     138145
IP address blocks:        103.106.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 29 09:53:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C95BD30AE73ACF536841A203752B7EA310CA7A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:fe:df:1a:bf:fe:4a:76:af:8a:bd:fa:8e:
                    76:d1:36:6f:b9:00:cb:52:a6:29:8a:85:64:8c:1f:
                    bd:b5:be:de:f9:5a:6e:19:bb:01:58:19:7c:92:8f:
                    d4:61:58:e9:c5:2e:28:1c:74:87:e0:6f:3e:c1:0a:
                    9d:4c:38:31:9b:d0:50:d9:b3:86:2c:c8:53:1f:e8:
                    3f:b3:81:33:d2:3c:17:c9:3d:ef:ba:54:75:1d:3b:
                    f4:2f:f0:47:5e:70:ba:1e:2c:92:76:00:3b:89:c5:
                    62:fa:39:e2:40:a7:cd:84:df:86:9b:31:fa:6c:a5:
                    7c:de:58:f9:dd:b0:51:2a:86:6e:93:9e:5d:55:25:
                    b8:b6:51:1a:3a:05:16:b9:77:46:3b:0f:cf:29:3f:
                    c7:4b:78:9b:90:e7:e0:12:12:e9:1d:ed:24:fd:89:
                    72:fe:7d:18:83:41:62:70:83:ef:1d:f4:dc:44:8f:
                    a4:1a:bc:a9:48:b1:31:da:eb:f5:36:e5:fb:7f:cd:
                    db:09:f0:fe:12:82:c0:96:51:d4:8f:70:ab:3d:05:
                    8c:e8:f0:64:4c:e6:56:f5:84:1a:1e:e8:e4:54:10:
                    25:33:0e:2b:c0:ee:ee:a3:7c:5b:6a:5e:60:8a:e1:
                    c7:8a:34:0a:7f:e9:de:13:e6:12:22:3d:57:21:ab:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5B:D3:0A:E7:3A:CF:53:68:41:A2:03:75:2B:7E:A3:10:CA:7A:2E
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/yVvTCuc6z1NoQaIDdSt-oxDKei4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:62:55:2f:d1:37:e4:5c:30:90:b6:b3:4c:6e:9c:6e:cf:66:
         eb:19:b4:9a:80:96:d8:b1:a0:7d:49:73:3d:22:98:e1:ed:f8:
         01:bd:57:ea:88:88:20:e6:6a:ee:5c:b9:7c:9f:0f:1c:ff:c5:
         db:39:8d:69:97:40:a8:8c:50:a0:d3:e8:31:2b:93:0a:83:76:
         e9:89:8a:7f:7d:1a:36:f7:f7:44:eb:30:ae:6e:55:3d:12:03:
         3c:99:b5:0b:71:35:cf:d8:1b:cc:0d:d6:33:bb:d9:12:f5:70:
         44:cb:8d:04:62:07:e8:4d:69:b5:68:25:eb:91:67:ea:d4:e2:
         c0:e9:cb:5e:28:5b:36:9e:e3:aa:34:2e:40:1d:6d:23:70:52:
         a8:a5:47:ca:14:6b:06:02:42:52:85:d3:34:1b:93:00:0b:fa:
         5e:35:83:27:e7:f1:fb:4c:cb:2c:6d:bc:eb:be:6c:4c:eb:e4:
         59:be:66:06:b6:e4:2c:36:34:98:a4:d0:86:96:d3:c4:b2:75:
         59:45:aa:a4:d1:98:c5:2b:87:4a:7b:84:2d:ba:34:c9:0b:47:
         34:5a:2e:68:c5:c9:04:2f:7f:25:df:d5:00:00:fd:d3:b6:c1:
         81:a1:e1:d9:f3:d8:89:6c:b0:70:b9:11:d8:10:ea:17:c8:2e:
         3c:7d:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org