Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/FBUJ-kXTkFNwgh3h005uN4PBk-U.roa
File:                     FBUJ-kXTkFNwgh3h005uN4PBk-U.roa (raw, json)
Hash identifier:          Mm9durkFEG3wKD7xim7lh9jqJp6qTrnGAkr/KD85Sx0=
Subject key identifier:   14:15:09:FA:45:D3:90:53:70:82:1D:E1:D3:4E:6E:37:83:C1:93:E5
Certificate issuer:       /CN=1E79C6C033BB9D469E0CE8164538DF39E9F1C3BC
Certificate serial:       01BF
Authority key identifier: 1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/FBUJ-kXTkFNwgh3h005uN4PBk-U.roa
Signing time:             Thu 15 Sep 2022 02:48:56 +0000
ROA not before:           Thu 15 Sep 2022 02:48:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38856
IP address blocks:        2406:d040::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E79C6C033BB9D469E0CE8164538DF39E9F1C3BC
        Validity
            Not Before: Sep 15 02:48:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=141509FA45D3905370821DE1D34E6E3783C193E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:6f:30:e3:b9:26:c2:12:00:9f:d9:ef:74:
                    43:e4:b8:5f:ba:f3:dd:59:cf:1d:ba:4c:27:d3:86:
                    50:e6:ae:5a:57:34:c8:6e:eb:01:40:b0:21:4d:2c:
                    22:fa:36:ee:7d:90:87:e5:41:71:cc:e5:b3:86:8b:
                    5d:a1:9e:12:1c:a3:ff:99:99:d6:5f:4a:a2:7c:0a:
                    14:87:31:11:3a:01:69:9b:65:9c:e2:30:75:64:63:
                    cd:48:ab:77:68:f8:a8:9f:a1:e5:1e:d4:e9:ab:a4:
                    13:a3:7e:64:b3:e0:6e:3f:45:3e:3b:08:d5:3e:d6:
                    3f:6e:46:29:49:f5:39:5f:ea:d9:1d:7a:62:2f:7d:
                    0e:12:a6:2d:b1:e9:fe:34:c5:af:3f:92:ea:8a:24:
                    d5:98:7d:22:28:49:df:5d:12:b3:4f:ca:1d:81:4d:
                    5e:9a:c0:52:57:40:d5:f5:9e:53:2c:7b:e0:7f:65:
                    2d:16:61:c7:1f:67:62:bb:ce:23:57:9d:ea:fa:19:
                    40:d6:7b:ef:8d:d5:8b:39:38:cc:34:05:f0:c6:25:
                    60:ec:dd:6a:3c:a9:5f:e6:40:e7:a7:85:f9:d5:b4:
                    09:0c:be:b0:64:42:40:c6:cc:24:37:48:0d:3e:2e:
                    12:3d:22:73:a7:95:ff:d3:dd:ad:8c:8d:09:53:76:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:15:09:FA:45:D3:90:53:70:82:1D:E1:D3:4E:6E:37:83:C1:93:E5
            X509v3 Authority Key Identifier:
                keyid:1E:79:C6:C0:33:BB:9D:46:9E:0C:E8:16:45:38:DF:39:E9:F1:C3:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/HnnGwDO7nUaeDOgWRTjfOenxw7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HnnGwDO7nUaeDOgWRTjfOenxw7w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WALKSCLOUD/FBUJ-kXTkFNwgh3h005uN4PBk-U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d040::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:60:16:6a:91:ae:ce:b6:64:ea:dc:83:30:93:56:6d:d3:
         6a:cf:17:74:2e:bb:19:69:35:93:37:be:10:ae:c0:e0:09:cf:
         21:8a:56:23:89:aa:c6:d4:1e:45:9d:09:f0:db:96:a7:b4:ff:
         a8:3e:4d:57:da:d4:1e:8d:82:b0:7a:fd:4a:be:12:1c:b8:1f:
         d2:15:e6:bb:fa:f9:7b:eb:eb:15:a8:ac:3c:64:98:c2:74:74:
         76:34:f4:7d:fa:29:b5:8e:b9:25:01:2f:d9:3f:96:09:8f:aa:
         26:b0:5d:04:5b:d4:6d:63:61:5e:f4:8f:f9:45:92:18:f6:c4:
         15:4d:6d:57:94:da:80:19:64:98:b9:0a:34:6e:e9:70:35:c3:
         1b:89:e4:bf:d4:d3:60:dd:f3:80:13:91:d1:32:72:43:27:df:
         dc:0f:54:39:6f:2c:8c:53:c7:af:f5:25:34:5d:41:46:b8:b5:
         c8:c0:9e:b6:c6:05:55:51:61:cd:88:43:2a:f9:06:d2:ad:4a:
         0b:27:7f:1d:1c:bf:8b:fb:b0:21:37:25:5b:1d:2a:18:2d:69:
         72:68:a5:6d:56:1d:5f:80:e5:da:29:c0:a2:de:ec:a5:10:88:
         61:a4:44:58:c3:03:e1:51:3a:07:85:2a:fb:b4:d5:e6:68:ad:
         da:68:aa:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org