Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/WwdRSmctQLcSvjiFUiAI-zUA178.roa
File:                     WwdRSmctQLcSvjiFUiAI-zUA178.roa (raw, json)
Hash identifier:          kJTcvpg6xzJTW7gHFDmiNitcX64PMjIwjzePjBVmzU0=
Subject key identifier:   5B:07:51:4A:67:2D:40:B7:12:BE:38:85:52:20:08:FB:35:00:D7:BF
Certificate issuer:       /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial:       0776
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/WwdRSmctQLcSvjiFUiAI-zUA178.roa
Signing time:             Tue 29 Sep 2020 09:59:01 +0000
ROA not before:           Tue 29 Sep 2020 09:59:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24167
IP address blocks:        2400:4500::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
        Validity
            Not Before: Sep 29 09:59:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5B07514A672D40B712BE3885522008FB3500D7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:3b:0d:29:96:ba:eb:19:d3:ca:1e:a6:0d:
                    1f:62:d5:de:4c:1a:24:51:c9:04:95:7e:3a:0f:7f:
                    fa:5a:9c:e6:c8:8d:ab:bf:d1:19:58:46:06:40:e9:
                    e2:ce:7f:89:dd:89:d3:a5:ae:9d:39:2b:f6:ac:25:
                    c5:50:74:eb:47:de:e5:ed:c8:d6:3f:19:c9:fb:a0:
                    df:50:65:c9:6d:ff:0b:8e:f5:c0:54:d7:4a:1d:6a:
                    33:78:27:8f:87:13:17:f7:58:2b:6c:bd:e2:d2:22:
                    38:7f:82:10:a7:9d:01:a2:b3:a3:a7:91:2b:48:08:
                    5d:fb:49:d1:6d:41:00:68:b4:26:5e:ae:df:f8:fe:
                    34:75:fd:8c:a5:f6:0d:db:cd:5f:76:6c:4f:68:c8:
                    0f:84:90:a0:31:91:f8:49:45:db:34:6c:3a:21:74:
                    90:1a:21:71:b5:24:10:8b:ae:c7:0c:ed:2b:81:12:
                    50:74:21:9c:cc:95:c4:52:2a:a1:7c:4a:95:a1:74:
                    31:0e:fe:57:d0:a3:dc:e4:1a:d4:a8:b8:1e:cd:81:
                    af:d4:2c:4e:9e:67:2d:7c:e6:9d:bc:b7:f2:27:92:
                    b6:07:c0:03:92:48:0d:ec:cd:47:72:1a:2f:cf:e4:
                    cc:fe:ca:6b:58:d6:be:d0:d7:c0:1f:d9:4a:88:12:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:07:51:4A:67:2D:40:B7:12:BE:38:85:52:20:08:FB:35:00:D7:BF
            X509v3 Authority Key Identifier:
                keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/WwdRSmctQLcSvjiFUiAI-zUA178.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4500::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:09:f5:7d:9f:60:56:af:c3:ea:15:85:d0:a2:f7:85:08:81:
         50:f2:cb:2b:1f:36:cb:a9:bf:21:45:39:88:68:ab:9d:59:27:
         91:d7:78:a5:1d:56:84:6a:07:db:f8:70:79:1d:c9:ab:ab:45:
         42:8a:a4:9f:8f:37:d6:52:6b:ca:01:bd:d2:0c:83:e0:63:5d:
         c1:93:cb:fd:77:cd:e2:f1:6c:64:fd:a0:65:39:f3:f0:71:e3:
         98:4f:bd:73:54:74:9d:94:90:b6:3f:10:92:44:cf:72:7e:e7:
         41:82:00:16:38:38:45:95:be:a3:37:2b:e3:33:1c:28:ff:c1:
         1e:d3:51:db:61:bd:ae:ea:33:ba:df:bc:06:1a:05:cc:ab:26:
         2d:83:8e:07:d1:8c:90:70:c2:03:d9:99:11:ac:a0:2d:76:03:
         ad:6e:63:25:20:6d:41:59:8c:05:e5:f6:b2:fc:e0:56:c7:3d:
         7c:e6:f0:ac:f5:39:35:01:44:f5:a2:71:4d:39:a8:63:7e:c6:
         18:4a:0c:5e:8b:48:6e:a3:f4:5d:f1:ad:79:06:7e:19:9a:17:
         95:45:42:9f:8e:9c:ab:66:63:ab:3a:61:18:c4:e6:a4:f1:6a:
         27:7d:e5:dd:d1:f2:47:41:6f:4e:1a:ad:c5:c7:27:0a:ea:c3:
         54:89:be:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:32 2024 by rpki-client on console-fra.rpki-client.org