Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/5Y9gZ-WgoqbbG6HfckJf-0vialE.roa
File:                     5Y9gZ-WgoqbbG6HfckJf-0vialE.roa (raw, json)
Hash identifier:          UmUPCEJVO6AjX+uINb5dBPGFUO71tYyksszxFdXXnxA=
Subject key identifier:   E5:8F:60:67:E5:A0:A2:A6:DB:1B:A1:DF:72:42:5F:FB:4B:E2:6A:51
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0A6C
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/5Y9gZ-WgoqbbG6HfckJf-0vialE.roa
Signing time:             Thu 15 Sep 2022 02:49:21 +0000
ROA not before:           Thu 15 Sep 2022 02:49:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18182
IP address blocks:        27.105.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668 (0xa6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Sep 15 02:49:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E58F6067E5A0A2A6DB1BA1DF72425FFB4BE26A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:38:e2:23:72:54:46:f6:6e:65:ac:d2:b3:
                    dd:39:57:6b:8f:0b:c7:22:83:a2:4e:36:81:84:a2:
                    9a:c1:5c:0c:00:bd:3b:a8:a0:f0:94:02:bb:93:f6:
                    d3:0a:c9:5e:10:b8:67:a9:cb:04:fb:38:a1:25:c8:
                    e9:9e:83:e5:b6:a6:2a:b8:52:1a:d7:bd:cf:ba:3f:
                    ca:d3:d8:22:13:34:f1:57:10:14:f5:07:63:56:9b:
                    3d:c7:31:1d:34:b9:55:33:cd:6b:34:66:34:6e:c8:
                    b8:ac:66:fa:94:90:ca:75:01:d1:83:c7:19:6d:d4:
                    e0:5e:a6:9b:fe:49:f8:d4:22:93:c7:41:28:71:64:
                    4a:c3:47:a2:8c:1a:8c:8e:0c:f1:29:6d:a2:23:31:
                    c6:fc:48:00:b3:17:3b:c6:df:8b:0a:df:ae:8e:e4:
                    37:96:97:7e:e1:5f:f6:da:fa:14:89:de:9a:4d:1d:
                    6a:75:f3:87:bd:c4:60:7d:8f:76:fe:c6:4a:8a:93:
                    ef:5e:d8:4b:b8:2f:a0:f0:31:b2:d1:b4:25:39:60:
                    d7:e3:f8:46:27:83:80:f1:de:18:3c:2e:61:ec:a3:
                    62:ca:61:9b:3c:ae:39:73:02:61:e7:9f:0e:57:27:
                    02:12:2b:ef:60:dd:bb:b6:aa:58:c4:48:c7:f1:33:
                    c7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:60:67:E5:A0:A2:A6:DB:1B:A1:DF:72:42:5F:FB:4B:E2:6A:51
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/5Y9gZ-WgoqbbG6HfckJf-0vialE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:f3:9e:70:dd:bf:1b:ee:24:ca:4a:7e:55:7b:87:bd:7a:ad:
         7b:97:e5:b3:28:de:ad:5e:7e:5e:a9:3b:26:23:48:00:49:43:
         23:cd:09:bf:e1:54:90:78:06:8f:f3:75:55:87:b2:7a:b9:d6:
         90:38:03:5a:67:a3:50:1c:be:8b:88:f7:bb:71:27:e7:7c:76:
         16:37:a7:57:61:ae:56:5d:e1:c1:14:ab:bf:f0:71:0e:2f:fd:
         22:dd:b6:69:41:cf:b1:18:e7:71:7f:ba:f9:15:dd:ea:c8:b9:
         7b:62:d6:6d:99:d6:56:df:5e:1c:48:72:35:54:09:91:ed:31:
         e7:63:09:86:5f:dd:0e:e6:da:7c:0a:28:60:3c:7c:73:e3:de:
         a5:b3:2b:6f:03:7d:78:28:35:42:66:39:31:c9:8c:72:25:b1:
         77:40:fc:b1:80:c3:91:52:2f:ed:45:4a:34:c0:3b:55:62:f3:
         15:35:6f:9c:29:80:7e:0c:52:a2:ec:cc:46:b2:81:c1:1c:4a:
         05:2a:7b:c0:13:eb:58:3e:6e:29:4a:99:ce:91:b9:df:a3:46:
         a8:a3:4b:56:30:6d:dc:29:bd:0f:2a:c9:22:3c:ab:dc:9c:fe:
         8c:93:db:2b:e2:fd:a5:c8:20:4e:a4:91:fd:80:64:7e:a1:ea:
         38:72:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org