Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/rtCBBgKrL0Y9WZMbWHTfVBZzQy4.roa
File:                     rtCBBgKrL0Y9WZMbWHTfVBZzQy4.roa (raw, json)
Hash identifier:          qexlIOd+TL3Ttvox3qWX/Ln3LEBUa7PP+I4By/ma1PY=
Subject key identifier:   AE:D0:81:06:02:AB:2F:46:3D:59:93:1B:58:74:DF:54:16:73:43:2E
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0A6C
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/rtCBBgKrL0Y9WZMbWHTfVBZzQy4.roa
Signing time:             Thu 15 Sep 2022 02:49:22 +0000
ROA not before:           Thu 15 Sep 2022 02:49:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     45474
IP address blocks:        27.105.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2668 (0xa6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Sep 15 02:49:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AED0810602AB2F463D59931B5874DF541673432E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:74:0a:b4:4f:ca:e1:93:d8:f7:55:c4:f2:36:
                    cc:51:75:66:f1:8a:de:c4:2b:66:1b:7c:75:da:f6:
                    79:82:0a:20:b6:66:31:2b:5a:90:5d:40:3c:98:ea:
                    5f:16:7b:69:57:7c:27:d5:c3:4b:cb:dc:62:32:2a:
                    ba:25:6e:67:dc:1f:8f:e6:e5:23:ea:4b:5d:ce:ba:
                    2a:4c:3f:46:c7:99:fa:8e:1b:63:cd:87:bc:df:34:
                    88:44:8b:21:2d:ad:72:df:e5:16:a3:fa:e1:04:bb:
                    74:32:d4:96:c0:4c:5e:85:15:5c:80:8f:92:65:8a:
                    52:7c:7b:cd:af:94:5b:c3:43:b6:a6:25:88:e3:2d:
                    8d:b6:ef:36:c3:72:cc:68:06:08:c2:e6:06:0b:1e:
                    52:ae:c1:b8:94:c9:e3:61:f8:e4:17:43:87:14:01:
                    d1:7f:60:ce:bb:93:ff:21:10:26:5e:94:07:3f:76:
                    17:59:27:0f:a2:b9:8e:06:83:a5:b1:3d:f1:8b:77:
                    c1:3d:5d:8c:48:d5:ee:ed:8f:fd:93:8f:2b:84:f2:
                    bc:d9:95:38:19:6c:1b:e2:f7:b0:98:ee:5e:23:d0:
                    39:34:d5:24:0a:ec:ac:6a:1b:ca:93:9d:0e:66:f5:
                    6e:e8:1e:5b:b5:23:cb:c9:af:cc:58:f2:7c:67:76:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D0:81:06:02:AB:2F:46:3D:59:93:1B:58:74:DF:54:16:73:43:2E
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/rtCBBgKrL0Y9WZMbWHTfVBZzQy4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.105.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:36:1e:8b:e5:f1:ba:1b:16:4f:29:33:47:cb:14:4e:4c:51:
         ca:1f:b5:ac:d4:b2:84:fa:cd:4d:59:98:8a:e4:cb:63:57:b3:
         e4:3a:c5:c9:a8:83:3c:45:df:10:55:b7:85:05:65:67:1b:10:
         cd:fe:25:96:05:09:81:19:1d:95:2d:2e:dc:75:6e:f2:dd:d5:
         19:b8:13:00:2d:96:cb:37:98:b8:6a:34:1f:de:2b:27:e0:51:
         a2:06:79:d2:4f:9f:d0:83:de:73:e1:e0:13:69:5f:1f:e7:cd:
         16:23:a0:f0:e1:3a:1a:07:d8:54:5f:84:7a:c4:0e:3d:44:33:
         ac:73:35:26:5d:9d:a0:d4:bc:4e:45:6c:5f:71:15:14:12:ef:
         af:65:90:b4:70:25:ad:aa:9c:89:57:b9:3c:2d:55:71:9a:c4:
         1b:fe:71:64:2c:d0:b1:d8:d2:06:0a:b9:c1:86:ca:fc:e4:41:
         6d:24:44:07:c0:67:01:e6:09:ec:41:bd:f5:e3:6f:4e:f7:fc:
         df:fa:4e:6d:f5:47:a9:3b:00:39:a8:c6:d0:da:58:05:2f:c8:
         b7:03:06:13:75:df:81:1b:60:d2:6e:58:15:6b:67:5b:43:a2:
         b9:f3:d8:d1:f9:65:6f:96:a0:a0:61:e6:6f:2e:16:bc:5a:99:
         20:64:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org