Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/MlCOMizVy_F5ypReEbRtcs-sNEE.roa
File:                     MlCOMizVy_F5ypReEbRtcs-sNEE.roa (raw, json)
Hash identifier:          d3mSheZTEcQ0mahFZ34ToL7P8YQgw4tFvxxtt122DAo=
Subject key identifier:   32:50:8E:32:2C:D5:CB:F1:79:CA:94:5E:11:B4:6D:72:CF:AC:34:41
Certificate issuer:       /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial:       0A6D
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/MlCOMizVy_F5ypReEbRtcs-sNEE.roa
Signing time:             Thu 15 Sep 2022 02:50:46 +0000
ROA not before:           Thu 15 Sep 2022 02:50:46 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18018
IP address blocks:        122.255.94.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
        Validity
            Not Before: Sep 15 02:50:46 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=32508E322CD5CBF179CA945E11B46D72CFAC3441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:52:86:1d:86:d1:6b:1a:81:30:f8:a8:b8:
                    89:31:e8:5a:28:d5:6d:df:4e:93:3b:ec:01:57:49:
                    5d:b7:b9:a7:d7:4c:0c:fd:69:d0:a3:00:79:3d:c1:
                    f9:a4:94:2a:66:4c:ec:da:18:a4:bc:c8:e6:ee:52:
                    31:35:17:7c:1b:c1:89:3a:b7:49:82:4b:c0:80:1d:
                    32:7b:35:b9:36:a0:e5:53:97:ef:94:91:17:42:7c:
                    e1:e0:d7:64:d1:0a:e7:2b:f3:58:64:f8:91:05:6a:
                    9f:51:19:ec:90:2b:d1:e0:36:11:39:6d:86:35:5d:
                    94:24:36:4d:ac:2a:90:5c:9d:5a:f0:27:d0:8c:bb:
                    da:74:4b:a9:c7:96:4f:75:5b:9c:13:dd:85:85:a7:
                    6b:35:aa:13:95:59:2f:2e:5b:1b:99:5b:09:d9:4a:
                    a8:f2:1d:2a:f0:ef:9e:95:39:a4:03:5a:89:47:76:
                    0a:75:4d:14:ae:be:e4:e1:93:97:05:2c:18:a1:b4:
                    c4:f0:2b:7e:8d:49:f1:ce:87:6f:18:c7:fe:75:0f:
                    66:76:ba:de:36:87:0d:7e:c5:23:67:98:99:e0:56:
                    d9:b4:2e:74:dc:b3:ea:3c:16:79:c5:db:e1:42:1e:
                    27:21:ef:50:b7:ef:d7:2a:b4:35:9c:27:a7:03:4d:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:50:8E:32:2C:D5:CB:F1:79:CA:94:5E:11:B4:6D:72:CF:AC:34:41
            X509v3 Authority Key Identifier:
                keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/MlCOMizVy_F5ypReEbRtcs-sNEE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.94.64/26

    Signature Algorithm: sha256WithRSAEncryption
         24:66:7b:df:00:8e:ee:4e:ed:f8:40:72:1d:d6:33:d5:ee:a0:
         82:84:62:9e:84:7f:89:d0:ff:0a:f5:ab:23:ca:70:60:52:6c:
         77:98:10:4d:de:f6:5e:9a:2c:f2:db:96:35:b1:68:4c:cf:a6:
         43:16:37:4b:58:8e:19:66:d8:55:c2:56:c7:86:e8:50:1a:2d:
         62:d7:c0:b1:93:63:c2:6c:79:62:3e:22:95:c6:f5:d5:87:a7:
         ee:cf:0f:2c:2b:75:a7:d9:b9:b5:c4:67:89:ee:78:27:25:a7:
         85:9b:ab:e1:38:59:cc:99:5e:a9:f4:ac:7d:d5:38:46:96:84:
         71:61:28:ce:b8:79:c9:15:91:ca:49:da:ef:05:b3:8c:b0:ef:
         ad:d4:84:17:75:59:4c:ac:c2:38:77:c4:17:2e:d1:dd:e3:76:
         e4:38:1c:83:98:7d:41:2a:18:ee:b3:56:3e:ce:d5:e0:6a:94:
         df:93:fe:64:b7:9f:fc:f7:bc:a3:d0:fc:ec:de:70:9f:7a:a8:
         53:40:0f:c4:ee:39:fd:4a:66:cb:78:ea:43:5d:71:ea:1b:7e:
         56:9d:9e:b9:d5:08:13:07:23:82:67:b5:12:52:ef:b1:cb:22:
         76:b4:c4:01:df:6b:ad:93:d0:93:6d:39:dc:29:a6:3d:72:43:
         48:2c:06:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org