Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/V8r-uIy_dQgzsejoVCdxeDSWCuY.roa
File:                     V8r-uIy_dQgzsejoVCdxeDSWCuY.roa (raw, json)
Hash identifier:          s+SbkT/V51MJnEBYTqr2C7yvw6wP82BUjA7VGjpGGQw=
Subject key identifier:   57:CA:FE:B8:8C:BF:75:08:33:B1:E8:E8:54:27:71:78:34:96:0A:E6
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0A7E
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/V8r-uIy_dQgzsejoVCdxeDSWCuY.roa
Signing time:             Thu 15 Sep 2022 02:50:02 +0000
ROA not before:           Thu 15 Sep 2022 02:50:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131596
IP address blocks:        2405:9200::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2686 (0xa7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep 15 02:50:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=57CAFEB88CBF750833B1E8E85427717834960AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:d4:20:4c:73:d5:4d:99:2b:dc:4d:1f:1a:
                    29:57:ad:f0:53:4e:13:af:5b:18:1a:dc:52:c2:29:
                    b8:1f:cf:71:3e:ea:75:58:0f:f8:f2:8f:b2:80:ab:
                    2d:cf:f6:d6:5b:ec:8e:0e:91:46:bf:9b:70:a9:7a:
                    37:81:bf:47:f7:b0:28:54:85:df:65:86:37:3f:1a:
                    0d:22:38:ed:7b:5c:64:5b:f4:4b:e1:38:23:59:25:
                    a8:3b:6c:2d:c7:1c:15:6d:85:1c:a4:d2:8b:46:e7:
                    20:b5:5c:0e:c2:63:06:f6:eb:43:c2:64:11:4e:ce:
                    b6:88:09:f8:70:25:d0:9a:4a:b6:2f:8f:9f:13:5f:
                    16:4a:ca:28:49:3a:87:08:c8:8d:75:b0:1d:8c:14:
                    fb:4c:83:71:e0:da:99:75:2c:aa:4b:c4:37:7d:8d:
                    29:1e:43:0d:ad:11:1e:a9:52:80:75:09:f2:f7:89:
                    7d:35:43:24:99:ec:49:b9:00:a7:12:60:34:b0:67:
                    8e:5e:0c:e5:71:aa:04:2c:15:cc:42:28:b3:91:95:
                    8e:ef:b0:b5:f3:c9:00:1e:14:1c:6b:76:b9:9f:b6:
                    94:92:6b:2c:41:6d:a6:39:f2:08:44:67:48:5b:b7:
                    47:2f:02:9f:42:ce:2e:31:22:5e:0c:51:f6:68:ce:
                    34:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CA:FE:B8:8C:BF:75:08:33:B1:E8:E8:54:27:71:78:34:96:0A:E6
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/V8r-uIy_dQgzsejoVCdxeDSWCuY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9200::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:51:5a:f0:c4:88:36:fa:dd:07:6d:06:1a:3e:0e:fd:db:32:
         39:0c:3b:3c:45:d3:e6:ae:72:29:bf:b7:35:ab:f3:03:45:74:
         3f:c7:88:44:2b:6f:c0:4a:61:d7:57:9d:3e:93:29:82:9a:61:
         26:27:27:56:ed:bd:84:dd:ef:d7:01:87:68:d1:d3:d2:22:a3:
         83:fe:47:23:19:47:91:d5:79:29:0e:ca:64:56:8a:a6:d4:84:
         6c:05:38:cb:cc:7a:c0:09:c5:86:a1:b1:37:f8:db:82:7c:33:
         f2:c6:15:d3:f9:23:ba:05:25:30:c2:25:78:3a:9a:b6:54:82:
         dc:56:05:b1:e7:45:76:8c:96:c1:c5:36:58:07:ac:55:7e:4a:
         63:44:07:33:95:77:da:67:d4:0b:95:99:cd:ea:7e:d8:f4:47:
         a1:0e:e8:5b:eb:6b:fc:d8:c5:5e:c8:98:7e:43:30:78:a8:0c:
         f7:06:ff:2c:00:f8:8e:f1:67:16:ce:43:7c:68:b7:4d:b0:64:
         08:67:a5:55:42:08:a0:8d:d9:bb:57:69:14:6a:83:86:ba:0a:
         32:0b:8f:9b:86:22:64:01:ab:7f:10:3c:5f:b5:6b:76:eb:a5:
         d9:5a:86:2f:49:e3:31:4c:92:5b:70:78:d7:1f:c4:f3:5a:eb:
         f6:f5:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org