Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/dzdrwNf0UdWOv_Nke7pY6ghe7yA.roa
File:                     dzdrwNf0UdWOv_Nke7pY6ghe7yA.roa (raw, json)
Hash identifier:          WYmhyYf5EHYEPKbcLGYYZ/FL8D6sRO1Amv+oIMwtFwc=
Subject key identifier:   77:37:6B:C0:D7:F4:51:D5:8E:BF:F3:64:7B:BA:58:EA:08:5E:EF:20
Certificate issuer:       /CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
Certificate serial:       0BD1
Authority key identifier: 67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/dzdrwNf0UdWOv_Nke7pY6ghe7yA.roa
Signing time:             Sun 07 Feb 2021 13:04:59 +0000
ROA not before:           Sun 07 Feb 2021 13:04:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     134823
IP address blocks:        103.134.80.0/22 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025 (0xbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6762E00A4FEFCDD7F05273E4150218C3A9FE12E9
        Validity
            Not Before: Feb  7 13:04:59 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=77376BC0D7F451D58EBFF3647BBA58EA085EEF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:2c:5e:44:07:35:ef:e5:4c:31:2f:a3:ba:
                    52:45:05:3e:f4:cb:de:d9:85:72:e2:77:5f:71:7d:
                    f5:a5:e1:56:90:1a:49:c4:2c:24:90:91:a7:7b:9d:
                    69:2a:10:65:40:ef:80:e6:c2:24:b7:e6:ab:95:a0:
                    14:a1:00:56:4d:a1:f5:b8:5f:53:d8:b3:d7:54:15:
                    5e:7d:56:9c:19:e5:58:80:1a:09:ee:87:1e:61:98:
                    4c:c7:42:d7:4b:ac:e6:e6:bd:f6:ea:4a:ce:82:2e:
                    97:d9:a7:a4:d8:fc:81:1e:c7:90:9a:a6:ee:99:84:
                    bf:63:ac:08:7c:ee:1d:a5:27:00:94:9d:c7:fa:1b:
                    e3:a8:80:92:fa:a9:5b:2f:8f:8d:b2:a5:b9:1c:73:
                    0b:8a:e8:e0:a8:ea:91:40:1b:1a:47:0b:45:92:df:
                    ea:db:01:d0:25:69:b6:98:23:88:a7:21:6e:3e:34:
                    93:1f:49:88:0a:f9:1b:d0:c8:86:3d:dc:f9:93:19:
                    43:a1:d8:89:50:34:2e:42:68:25:cf:62:2e:c7:f2:
                    8e:88:9d:5e:cc:c0:4b:e7:2d:d0:1e:78:cb:07:ec:
                    fc:e6:3c:3e:ab:d4:4b:87:5c:50:17:c0:16:a2:76:
                    08:06:4a:69:11:66:72:d0:34:62:9e:73:61:dd:5a:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:6B:C0:D7:F4:51:D5:8E:BF:F3:64:7B:BA:58:EA:08:5E:EF:20
            X509v3 Authority Key Identifier:
                keyid:67:62:E0:0A:4F:EF:CD:D7:F0:52:73:E4:15:02:18:C3:A9:FE:12:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Z2LgCk_vzdfwUnPkFQIYw6n-Euk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YIMINGINFO/dzdrwNf0UdWOv_Nke7pY6ghe7yA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:42:0e:f0:4d:58:3f:71:90:a1:d4:c4:c8:e7:7d:59:23:60:
         36:34:fe:f4:4e:c2:ab:03:d8:72:b9:a6:8f:2c:be:a1:62:15:
         f4:eb:54:b5:96:37:8b:96:06:3e:d2:f3:18:9a:9a:06:b2:e1:
         d4:c4:5e:d9:37:65:e5:ac:27:26:56:22:df:62:bb:9a:74:d6:
         c6:64:4a:40:09:1c:04:92:89:78:99:fb:60:7a:58:14:11:5f:
         3a:a0:df:05:d4:f5:2b:52:38:87:8a:87:b9:c5:00:24:55:69:
         e2:b0:6b:8b:89:e9:43:5b:f9:3b:4f:d7:b7:fe:e7:73:7d:92:
         43:54:e4:1e:a0:6a:17:77:e6:7d:15:a1:00:82:9f:4b:a5:f2:
         f7:f3:2d:c6:9f:8f:d2:2d:05:6c:3f:8e:aa:14:b8:3c:e3:c6:
         47:c1:17:b3:4a:0f:17:cd:ae:d2:61:27:e3:5e:44:d8:55:6e:
         25:16:51:eb:6a:a8:50:bf:92:92:60:87:ac:08:6a:e5:e9:60:
         c2:6d:da:e6:e6:d8:2f:aa:1b:d5:97:d3:30:ce:60:a0:cc:ac:
         f4:19:5a:c0:8e:b9:c4:d9:99:4f:89:ee:04:07:ae:fe:36:7f:
         e5:4f:df:68:d3:b2:ae:23:f6:f3:01:d3:5f:07:c2:f2:98:cb:
         bf:b2:45:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org