Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/agyoKCr6WeH0kbjWBJgfrxLplb8.roa
File:                     agyoKCr6WeH0kbjWBJgfrxLplb8.roa (raw, json)
Hash identifier:          kySpVCDFaAaZ9hzpRA+3z/Q+xPNUzgPYDBQoo7Xy08Y=
Subject key identifier:   6A:0C:A8:28:2A:FA:59:E1:F4:91:B8:D6:04:98:1F:AF:12:E9:95:BF
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       0C6F
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/agyoKCr6WeH0kbjWBJgfrxLplb8.roa
Signing time:             Wed 29 Sep 2021 02:38:21 +0000
ROA not before:           Wed 29 Sep 2021 02:38:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     134823
IP address blocks:        103.134.80.0/22 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: Sep 29 02:38:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6A0CA8282AFA59E1F491B8D604981FAF12E995BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:bf:86:22:23:a8:53:bd:6e:db:7f:99:9e:
                    c4:16:6d:19:05:8a:98:1b:fc:8b:e5:a4:eb:2f:6b:
                    94:45:8d:a8:bf:28:73:61:5a:b3:4a:ac:4f:32:5c:
                    b4:71:9b:70:3a:77:2f:50:03:1e:3b:5b:88:2b:3e:
                    59:89:55:dc:0d:fc:98:f2:51:e4:c3:e6:5f:7c:84:
                    43:f7:53:ff:7c:d6:08:d2:37:ba:a7:10:16:53:06:
                    22:71:d8:98:23:7a:24:85:38:e4:1c:a8:e2:38:76:
                    e8:4e:c7:d1:82:64:c1:29:ad:89:0a:7f:b1:30:4c:
                    fc:80:dd:b4:95:d1:54:e4:33:0c:a6:6d:b4:df:1b:
                    df:7f:50:8c:b2:34:ad:42:98:54:a7:71:17:a3:e3:
                    f2:a0:ab:f2:52:79:4a:22:ab:ed:17:f2:d9:cc:29:
                    98:a6:40:46:ff:41:f1:32:de:3d:ac:48:c1:af:42:
                    8b:0f:8c:83:cf:6d:5a:80:41:f0:0c:05:f5:b5:f1:
                    80:cd:1d:35:72:f2:da:dc:d9:27:48:55:b3:8b:54:
                    21:1f:4c:b0:10:41:3e:d2:20:aa:d0:b8:22:e4:64:
                    42:ac:66:6c:b9:ca:ca:78:c0:f1:70:24:98:1a:de:
                    13:bb:8a:a7:d9:28:a8:68:d4:d6:bb:70:89:c2:e5:
                    67:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:A8:28:2A:FA:59:E1:F4:91:B8:D6:04:98:1F:AF:12:E9:95:BF
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/agyoKCr6WeH0kbjWBJgfrxLplb8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:51:8f:f0:9b:33:dc:96:dd:c3:4b:a4:a8:bd:c2:cd:86:e6:
         45:30:f9:38:2e:96:b5:d8:71:69:88:d6:ab:2c:bc:93:55:20:
         f5:16:55:8d:b1:42:3c:31:d9:3f:e0:a6:2a:db:47:5a:c0:06:
         a4:a5:74:41:4d:e6:c9:8c:c1:38:12:55:dc:2b:b3:df:2b:e1:
         e1:7a:67:0f:57:be:91:1f:07:c7:4a:8a:a4:c4:58:23:01:36:
         ae:a4:2b:31:6b:25:2f:1b:d6:66:4d:99:3d:1e:ee:b2:ca:9e:
         9c:79:b5:29:93:5c:cb:23:6e:ec:f4:0d:63:02:28:93:28:5c:
         3c:32:97:b9:bc:1a:cd:a8:bf:c5:14:a8:fb:42:35:78:3b:70:
         6e:2a:92:98:4e:e7:87:95:fa:1c:47:68:1e:8c:09:ef:79:bc:
         0d:2b:06:25:77:09:d2:0e:6b:ab:ff:04:01:82:cf:c1:9e:18:
         10:37:a2:d8:92:05:4a:9e:ae:35:2b:46:ae:b1:a2:ef:0c:07:
         81:04:c8:76:ca:76:cf:8c:15:bc:04:f7:48:99:26:d5:32:fe:
         62:dc:52:d9:13:c6:bc:9f:65:f7:1a:85:1a:27:e1:46:6b:d4:
         ae:4f:ab:7b:64:47:c0:a6:2b:04:3d:eb:55:e6:86:81:a4:fd:
         95:54:99:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org