Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/kARGXVgnm6wnoHOR6zGa6fZnGW8.roa
File:                     kARGXVgnm6wnoHOR6zGa6fZnGW8.roa (raw, json)
Hash identifier:          L/+VekChwMyl3d4NThoRKtIQsGXakYjVPafQj9Altpc=
Subject key identifier:   90:04:46:5D:58:27:9B:AC:27:A0:73:91:EB:31:9A:E9:F6:67:19:6F
Certificate issuer:       /CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Certificate serial:       08F7
Authority key identifier: 33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/kARGXVgnm6wnoHOR6zGa6fZnGW8.roa
Signing time:             Wed 29 Sep 2021 02:52:43 +0000
ROA not before:           Wed 29 Sep 2021 02:52:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131597
IP address blocks:        45.113.156.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
        Validity
            Not Before: Sep 29 02:52:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9004465D58279BAC27A07391EB319AE9F667196F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:83:b9:3e:ac:75:f7:1f:6e:50:ea:22:a7:
                    f9:6b:1e:22:a4:43:19:08:90:db:ac:99:9f:0d:85:
                    e9:41:aa:32:2a:aa:93:8c:0b:9d:e3:91:8b:ee:e5:
                    a1:b7:94:2e:e8:86:97:bd:b6:83:96:b5:87:d1:29:
                    7b:d3:79:4c:d7:02:b4:b9:2d:f9:cd:30:f9:63:19:
                    a2:5b:02:7d:b3:46:ee:e8:60:04:45:e6:9d:0a:4c:
                    56:34:17:29:52:81:44:d3:96:6b:fa:36:d1:38:71:
                    48:d0:40:42:8b:b5:e2:af:fe:60:f8:a6:f8:99:9c:
                    f5:bf:2b:d8:ee:1a:88:6a:ae:71:41:75:a4:e1:0e:
                    a8:0f:d0:ef:92:d0:13:dd:b1:0f:2a:9c:f9:aa:90:
                    35:0c:92:8a:fa:e5:30:49:47:7d:e8:83:07:ab:16:
                    8b:88:5e:c4:e4:e8:d5:34:32:9f:13:24:be:19:c3:
                    12:e7:39:2c:41:a3:ac:8f:8b:03:1a:6b:26:3c:4d:
                    8b:79:4a:f7:b1:bd:da:e4:97:6f:ca:a5:5e:0c:2f:
                    48:bd:07:44:4a:d3:b8:4c:2b:f3:e1:8b:41:f5:3a:
                    06:c6:f1:cb:96:9a:c8:33:53:07:20:ba:fe:b4:c5:
                    46:e6:da:85:78:46:b6:7b:99:14:14:b7:df:69:54:
                    0f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:04:46:5D:58:27:9B:AC:27:A0:73:91:EB:31:9A:E9:F6:67:19:6F
            X509v3 Authority Key Identifier:
                keyid:33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/kARGXVgnm6wnoHOR6zGa6fZnGW8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:c0:d0:4f:fe:d5:c5:66:81:20:a4:df:54:53:73:ba:95:a3:
         a9:bb:ed:fe:71:5b:c7:07:40:38:d9:d5:12:58:d7:d9:81:7b:
         42:ea:2d:07:f0:3d:f1:2a:d9:db:b4:92:22:d3:1c:6e:e3:aa:
         4e:8e:86:1d:e2:f6:4e:5b:4c:b1:43:cb:ce:79:f1:29:2a:de:
         38:64:8e:ab:d8:8b:12:3e:51:71:14:f4:7d:2f:bd:58:76:bf:
         58:fe:b9:7a:98:58:ee:87:8e:19:72:30:49:7f:2e:31:cf:5b:
         50:9c:9a:0b:75:ea:fe:b5:db:01:a0:96:f2:df:a8:a9:bf:59:
         0a:a9:75:80:e3:3a:76:53:f7:cc:a1:1b:92:f6:f3:c9:db:59:
         65:87:d8:0d:16:20:14:dc:05:01:7a:be:a5:1c:f9:b8:bd:ec:
         4d:d8:b9:25:1c:39:44:bc:9d:bb:af:fe:4b:91:43:8a:c6:ac:
         9e:4a:0c:61:1d:cb:1b:3c:46:c8:fb:3b:25:d7:97:aa:d0:10:
         44:ff:16:47:4a:d3:0c:ba:74:e3:e9:fa:81:60:eb:ec:fe:a9:
         ba:c1:a4:8f:74:4b:c3:f2:e4:a6:22:12:8a:93:b9:b9:7c:eb:
         ca:04:3f:3b:26:70:ff:88:e8:ab:a9:84:a8:67:60:8c:1a:71:
         03:3a:d1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org