Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/dgJ8Nyq-tOIkyhgIFjS0ievyYLI.roa
File:                     dgJ8Nyq-tOIkyhgIFjS0ievyYLI.roa (raw, json)
Hash identifier:          TU3xynzhPHJ6Z5THpsb1JjmhRXqcCI7REw++8hrLaNM=
Subject key identifier:   76:02:7C:37:2A:BE:B4:E2:24:CA:18:08:16:34:B4:89:EB:F2:60:B2
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/dgJ8Nyq-tOIkyhgIFjS0ievyYLI.roa
Signing time:             Thu 15 Sep 2022 02:51:01 +0000
ROA not before:           Thu 15 Sep 2022 02:51:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18049
IP address blocks:        61.58.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711 (0xa97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 15 02:51:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=76027C372ABEB4E224CA18081634B489EBF260B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:c0:93:de:9e:8d:80:d4:b6:a9:11:e1:84:
                    4d:ed:83:3e:6a:bb:52:43:f1:ff:e6:8b:bf:18:99:
                    dc:76:05:70:d6:82:d9:5c:94:f8:68:df:5a:0a:41:
                    84:b0:a9:86:54:27:e5:92:45:85:b5:1b:40:91:64:
                    5f:74:e4:70:cc:c3:f2:b6:2c:f5:bb:e7:77:ef:ed:
                    3e:ca:12:52:2c:e0:06:92:21:92:e2:17:70:c5:e8:
                    cc:c6:0d:f7:81:b9:94:c7:48:7f:dd:e2:c5:cc:cb:
                    7b:12:62:35:af:f5:7f:47:6e:f6:c5:a9:65:9c:72:
                    97:73:f1:d7:d8:51:70:e7:62:de:90:54:e4:e4:02:
                    20:e1:40:62:da:93:aa:c0:51:6f:9a:6e:98:8c:f7:
                    75:64:82:6d:e5:54:43:9f:56:d3:6f:29:c6:3d:99:
                    80:b8:8f:83:1e:57:67:e7:94:ab:50:e0:e8:d5:5c:
                    60:9f:59:8a:fa:e3:c0:0b:74:a2:95:9f:91:a7:68:
                    3a:6e:38:6c:86:ed:1e:12:b3:6c:4c:47:a5:c2:67:
                    75:ba:5d:58:f0:ec:0c:5c:ad:97:56:76:36:0f:48:
                    99:61:f0:28:72:39:30:aa:b5:98:b5:ae:f2:17:c3:
                    3b:43:29:40:4b:da:da:5a:fa:d0:e6:ed:e2:90:04:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:02:7C:37:2A:BE:B4:E2:24:CA:18:08:16:34:B4:89:EB:F2:60:B2
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/dgJ8Nyq-tOIkyhgIFjS0ievyYLI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:63:ad:b4:d3:62:0b:0a:ef:5b:1d:0f:d9:fc:31:e3:a4:89:
         98:d0:f7:15:da:6c:89:8d:ee:8b:a7:1a:f0:76:73:6d:61:df:
         51:13:a1:30:45:9d:34:42:05:a9:56:df:07:b2:0a:2a:24:dc:
         e3:2f:db:de:6a:fa:43:15:8b:4e:a2:68:b2:b0:7d:34:32:30:
         93:37:c9:3e:c4:47:23:f2:3f:1d:24:f2:8c:a3:27:51:78:f3:
         07:f6:9d:35:ca:e0:42:d9:45:ad:fb:5a:8f:8d:4f:cc:8f:38:
         d3:88:07:e0:02:52:da:ae:ff:93:3c:d0:8e:ac:8f:14:68:14:
         d5:14:fb:b2:fe:24:88:1d:3f:5c:44:d6:a7:c1:68:d3:41:2f:
         77:f9:2c:66:8c:13:ec:ed:36:d9:8d:90:34:71:01:1e:9e:10:
         ff:c3:f0:3c:7b:f2:cf:11:78:ba:03:41:e6:8b:95:9d:75:e5:
         f9:bd:d0:c5:0e:a3:43:c2:7f:f7:a6:50:97:f1:19:de:5b:30:
         5b:8f:f9:bb:9b:0f:ba:72:70:73:26:0f:23:63:d3:a4:91:58:
         c3:e8:22:8c:d3:15:db:60:c9:d8:4b:34:bd:6a:45:8f:b6:7f:
         53:84:dd:33:5d:37:1b:26:51:ce:8a:ff:b5:90:6e:47:a5:10:
         6c:1b:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org