Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/9sBYcbwp59r103q-Hdr9VJDe2Zw.roa
File:                     9sBYcbwp59r103q-Hdr9VJDe2Zw.roa (raw, json)
Hash identifier:          OqZGMdX1yOslvLvzqCcv11ggGXvpI2ggAEK1EpFWEPw=
Subject key identifier:   F6:C0:58:71:BC:29:E7:DA:F5:D3:7A:BE:1D:DA:FD:54:90:DE:D9:9C
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       0B8A
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9sBYcbwp59r103q-Hdr9VJDe2Zw.roa
Signing time:             Thu 15 Sep 2022 02:41:19 +0000
ROA not before:           Thu 15 Sep 2022 02:41:19 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     1659
IP address blocks:        140.112.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2954 (0xb8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Sep 15 02:41:19 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F6C05871BC29E7DAF5D37ABE1DDAFD5490DED99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:6c:49:e4:45:46:4c:6d:67:16:eb:00:44:
                    ac:cc:4c:42:9a:81:24:19:c9:01:d9:85:9b:d0:b3:
                    37:79:77:26:50:f0:22:1f:1d:e4:8b:94:22:3a:d0:
                    cd:cb:e2:f1:f9:6d:24:e3:0c:22:1d:8f:2c:de:36:
                    b8:17:bd:08:85:47:45:82:d5:75:77:f6:9b:a4:70:
                    06:d9:9f:4d:07:91:bf:3e:66:a4:ae:e2:67:72:bb:
                    83:86:48:82:cd:24:bb:14:5c:1f:f1:44:30:5e:14:
                    0a:88:7c:bf:ab:e1:50:72:e6:7c:ef:63:df:43:44:
                    05:41:fb:71:9d:6a:30:2d:98:ea:2b:2c:3d:03:15:
                    86:80:d1:fc:f9:e7:2e:ec:25:2d:99:24:27:44:84:
                    51:ec:0e:6d:3e:f9:70:a4:7b:34:01:ee:50:0b:aa:
                    4a:d4:20:0f:89:f0:8a:b0:b4:fd:ab:30:31:c7:18:
                    15:19:f9:fa:f8:b1:2a:5a:a1:52:18:3f:90:f4:c1:
                    c8:89:7b:7e:28:90:72:f8:17:96:08:9b:43:19:f6:
                    45:06:20:56:8a:37:2f:e1:4e:3a:07:f5:e8:32:9f:
                    3b:26:6a:11:2c:56:71:13:28:51:6e:e3:24:ca:14:
                    bf:fa:ed:b4:84:56:ae:5d:5c:75:8f:dc:6e:9b:33:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C0:58:71:BC:29:E7:DA:F5:D3:7A:BE:1D:DA:FD:54:90:DE:D9:9C
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/9sBYcbwp59r103q-Hdr9VJDe2Zw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.112.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         19:0e:9e:0e:5a:9d:12:41:e7:91:9c:0a:65:e3:55:5a:03:d7:
         a7:46:88:2d:d3:8b:e8:e4:42:52:69:6b:b6:a7:dc:f6:35:38:
         bf:93:00:e9:b4:2b:3e:23:ec:af:e3:36:d8:1e:4e:88:6f:07:
         fc:e8:48:a9:76:e6:1f:a2:fc:9d:a0:80:61:09:05:fc:2f:20:
         cc:2e:ee:26:5b:37:85:41:5a:91:73:40:c0:67:03:a3:c2:96:
         bf:dd:6c:71:28:2f:23:d0:4b:31:45:d7:f0:6d:55:ae:42:d1:
         f1:bd:f7:02:83:82:4f:66:29:16:ba:ef:65:b5:c5:82:c2:29:
         ec:d8:e3:7d:27:6a:b6:28:aa:ed:e8:10:f4:f4:11:ca:42:06:
         01:fa:fc:c8:d9:65:b2:f0:41:fc:76:9b:05:47:b6:ce:16:99:
         a3:4f:d8:c9:8b:de:d4:fd:b6:82:b6:15:cf:35:97:3f:cb:34:
         2e:d7:a1:e3:2d:dc:33:da:d0:47:9f:ba:07:05:6d:64:fb:9e:
         51:70:fa:b2:be:fc:45:07:a7:dc:66:a9:a1:79:8b:9f:37:b6:
         d3:92:8a:29:0d:4a:40:87:11:11:98:91:62:f6:7d:f5:9f:30:
         b9:7a:27:07:fa:8e:59:2d:31:de:6e:17:2e:54:4f:4b:e5:0e:
         90:f9:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org