Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/_52trcv10CGgWWtuQXIEsVtbgas.roa
File:                     _52trcv10CGgWWtuQXIEsVtbgas.roa (raw, json)
Hash identifier:          fGbPeOoUXDTJ1i47jM5pz7ATwcQiHfgJjmg6xxCchpI=
Subject key identifier:   FF:9D:AD:AD:CB:F5:D0:21:A0:59:6B:6E:41:72:04:B1:5B:5B:81:AB
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0AEA
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_52trcv10CGgWWtuQXIEsVtbgas.roa
Signing time:             Wed 29 Sep 2021 02:41:15 +0000
ROA not before:           Wed 29 Sep 2021 02:41:15 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     1659
IP address blocks:        210.240.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2794 (0xaea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep 29 02:41:15 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FF9DADADCBF5D021A0596B6E417204B15B5B81AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:a8:32:87:9d:d0:5d:bc:07:6c:07:00:bf:
                    d3:cd:db:2a:78:6c:30:c1:36:ae:b8:10:2a:89:65:
                    09:8d:80:1d:37:ae:a6:7b:2e:6e:c0:9f:36:88:77:
                    95:b7:82:9a:4d:40:d7:49:b3:00:e2:7e:59:5d:be:
                    a6:4e:c4:c5:42:53:8b:c1:fb:56:12:34:f3:3d:f9:
                    a6:9f:e1:b6:43:38:9d:ec:55:81:ce:17:9f:9e:04:
                    ae:f7:05:be:0a:6a:e2:b9:7b:f7:9b:97:7e:e5:fa:
                    52:11:fe:22:de:4d:95:80:09:1e:37:b2:71:c4:da:
                    85:57:a4:fd:ad:f4:a3:8d:61:c4:5c:75:eb:e0:98:
                    c5:39:dc:39:79:eb:95:34:ac:98:b0:63:08:50:67:
                    21:39:51:f1:ce:03:40:0e:76:51:d3:2f:5d:39:24:
                    43:19:5f:4b:c8:52:31:3d:6c:fd:96:06:d8:46:e0:
                    e6:cd:3f:92:c7:43:f6:eb:c2:3c:82:20:d7:5c:1c:
                    0d:b7:b9:30:1e:94:ed:ed:70:00:2b:71:2b:be:48:
                    60:e1:e1:03:70:5d:c5:3f:30:d5:56:27:73:4b:e6:
                    42:94:94:e9:7c:01:f0:6b:5d:74:70:fb:24:39:02:
                    ff:53:83:73:93:83:72:88:a1:19:af:8e:a1:3a:42:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9D:AD:AD:CB:F5:D0:21:A0:59:6B:6E:41:72:04:B1:5B:5B:81:AB
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/_52trcv10CGgWWtuQXIEsVtbgas.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.240.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:d6:86:ba:25:2f:32:5c:d2:98:f5:ba:41:36:38:b9:3e:
         22:1f:6e:aa:ca:8c:49:8c:3e:db:b6:fe:a6:32:d6:6b:72:19:
         a8:36:83:fd:c6:53:f0:29:51:6f:9e:78:ff:06:11:53:ea:b2:
         03:61:6c:df:f0:51:e1:25:a7:13:f2:2e:0f:f8:15:52:20:06:
         7c:36:ee:93:43:57:b0:ea:5a:a3:16:49:45:f3:d0:ef:7f:84:
         e4:59:50:27:11:02:3f:6b:eb:02:cb:74:8b:76:42:ac:d9:fa:
         be:e2:44:0a:59:88:64:7b:88:aa:71:d4:ea:61:c5:86:e0:c5:
         0f:11:65:2c:1b:21:d8:ba:a2:fb:79:99:e6:67:20:48:34:fb:
         bc:ae:57:99:da:05:f3:fd:35:92:e0:ad:4d:c6:22:d4:d5:87:
         58:d3:6a:45:e2:3a:3e:83:4e:36:78:54:c0:90:7f:2a:d8:80:
         d2:52:5f:f2:ba:df:eb:c6:44:27:6a:cb:b2:08:42:39:84:8e:
         d1:61:01:75:09:dc:b9:f3:87:65:14:6c:20:9d:1f:f4:6d:36:
         7f:c0:d4:00:d7:f8:71:9b:a7:85:47:43:d7:0b:54:01:0c:83:
         b5:5b:d3:1a:3a:a4:83:b1:8b:b9:66:c8:47:9e:6e:15:6d:7b:
         45:d8:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org