Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/5CjB3nFKEt4hAHenAJMw02BdRYQ.roa
File:                     5CjB3nFKEt4hAHenAJMw02BdRYQ.roa (raw, json)
Hash identifier:          FM/7fd9P13CUHljD3XrmWaEQUeKQIcP7Hz6kk7QoN1Q=
Subject key identifier:   E4:28:C1:DE:71:4A:12:DE:21:00:77:A7:00:93:30:D3:60:5D:45:84
Certificate issuer:       /CN=1AB2E7A40EC81FDE8A617E9FAB5E6182479CCC2B
Certificate serial:       0767
Authority key identifier: 1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GrLnpA7IH96KYX6fq15hgkeczCs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/5CjB3nFKEt4hAHenAJMw02BdRYQ.roa
Signing time:             Tue 29 Sep 2020 10:06:23 +0000
ROA not before:           Tue 29 Sep 2020 10:06:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18421
IP address blocks:        202.6.104.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AB2E7A40EC81FDE8A617E9FAB5E6182479CCC2B
        Validity
            Not Before: Sep 29 10:06:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E428C1DE714A12DE210077A7009330D3605D4584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:47:0c:aa:26:e7:ee:86:b2:7f:24:5b:b5:
                    5a:76:a6:3a:a6:56:de:0c:7c:7b:eb:fb:a5:fd:80:
                    97:b4:95:70:93:70:de:bb:c3:3a:53:bd:51:08:bd:
                    b3:f1:43:e1:df:38:52:49:05:8c:fe:4b:16:af:5b:
                    78:f9:42:f1:bf:13:f1:21:23:6e:9c:9f:5b:7e:be:
                    5e:fe:5e:e8:ab:94:3b:8b:1f:26:af:ca:90:c4:8f:
                    e7:04:e6:ad:b8:dc:af:a3:d0:27:30:f7:4c:c2:72:
                    1e:f4:4c:ed:7e:a3:e9:3f:4a:2d:73:f2:c8:a9:9b:
                    98:7d:a9:05:48:0f:37:80:1b:48:11:5f:5c:4e:06:
                    fc:9a:92:02:cb:f0:1f:5f:93:ab:48:d3:73:eb:c9:
                    1c:7e:e8:3d:b1:3e:38:61:da:8d:b0:fb:80:b8:0c:
                    ef:06:3d:03:ef:ce:67:73:f5:8b:44:0d:63:75:9a:
                    b5:09:e6:25:ad:ed:b1:25:a2:e2:72:32:30:c7:4f:
                    11:8f:83:ea:13:1a:50:5f:1f:32:6f:95:26:de:77:
                    ed:54:fd:cb:9d:a9:78:ba:57:15:9c:de:de:47:c3:
                    d5:39:6e:88:e1:03:d1:54:70:2b:26:bc:9a:62:3d:
                    a7:76:00:bc:03:e4:0a:65:9c:32:c5:fc:34:69:a4:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:28:C1:DE:71:4A:12:DE:21:00:77:A7:00:93:30:D3:60:5D:45:84
            X509v3 Authority Key Identifier:
                keyid:1A:B2:E7:A4:0E:C8:1F:DE:8A:61:7E:9F:AB:5E:61:82:47:9C:CC:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/GrLnpA7IH96KYX6fq15hgkeczCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GrLnpA7IH96KYX6fq15hgkeczCs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAISHINBANK/5CjB3nFKEt4hAHenAJMw02BdRYQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:a0:57:b1:1d:8a:1f:be:fd:cb:8e:34:d4:ba:04:a8:5b:7b:
         40:65:0a:09:4f:92:e5:f6:c4:75:92:0f:f8:5b:5f:43:88:b7:
         2c:75:47:05:13:f1:c3:d3:7e:f5:47:19:ed:73:e1:a7:df:fd:
         19:f5:cf:75:1f:21:ca:99:ed:19:27:20:03:b8:5e:2d:e5:d4:
         f8:3c:9b:ed:f1:48:cb:ce:a4:3d:f7:0d:70:42:b0:ef:e0:a8:
         fe:5c:a8:3a:92:21:1b:59:d3:c5:fe:88:79:c4:b8:af:47:50:
         73:2e:d7:a5:be:71:92:44:fc:33:93:30:3b:56:58:a7:4c:8a:
         31:74:21:dc:4a:94:7e:98:0c:39:e4:83:c9:78:1a:ce:20:a5:
         44:ca:b2:70:fe:aa:5e:c8:4b:46:db:76:91:4d:54:63:33:05:
         07:24:ab:cd:db:05:b2:35:c0:6c:23:ff:00:db:aa:d1:d1:bb:
         72:77:60:e6:da:24:86:93:f3:12:02:54:25:a0:87:c4:dd:f3:
         2e:af:f9:53:f0:61:6d:a8:79:94:0c:9d:cd:b3:b9:be:61:41:
         08:6b:06:23:c8:e6:bf:df:73:ac:39:92:84:98:57:cd:1e:4f:
         d5:df:3e:25:d6:75:e5:e3:3e:66:76:64:0d:0d:a3:c7:d3:1f:
         c7:df:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org