Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/VsHs4AEtp9teTcUDmlGMpo2kA8k.roa
File:                     VsHs4AEtp9teTcUDmlGMpo2kA8k.roa (raw, json)
Hash identifier:          eXi/tyOXeyCpH2RZxMcI4DuuGvYRS6/KTtl0VqscQbM=
Subject key identifier:   56:C1:EC:E0:01:2D:A7:DB:5E:4D:C5:03:9A:51:8C:A6:8D:A4:03:C9
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       EC
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/VsHs4AEtp9teTcUDmlGMpo2kA8k.roa
Signing time:             Thu 07 Jul 2022 02:46:48 +0000
ROA not before:           Thu 07 Jul 2022 02:46:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     20473
IP address blocks:        103.169.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Jul  7 02:46:48 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=56C1ECE0012DA7DB5E4DC5039A518CA68DA403C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:7a:b4:9f:79:62:7e:28:8d:1a:ba:4c:33:
                    99:9f:fe:7c:a7:f5:14:bd:39:f8:27:26:a7:ca:2d:
                    07:4e:b8:b4:cb:78:35:0d:43:87:38:08:fd:02:16:
                    83:85:62:62:8a:27:3d:1b:fc:cf:a8:63:44:58:ed:
                    cd:75:dc:a1:37:e3:7e:7d:7e:34:63:7d:9f:70:fe:
                    8c:88:1c:11:4d:d6:35:0d:ed:49:dd:b5:eb:d2:e7:
                    2a:74:6d:09:25:4b:af:66:d9:ad:35:b6:8b:45:b1:
                    91:4f:c6:a9:7d:72:de:1c:54:23:f9:6a:8c:da:0d:
                    6e:f4:4c:e9:a8:84:1d:e6:67:c9:fb:03:7d:2d:a3:
                    11:82:91:4b:d0:7c:bc:10:1d:5e:e7:7d:c2:da:6b:
                    34:00:68:74:de:c9:8d:37:d6:50:ef:c0:1e:ff:1f:
                    7e:1a:e3:da:3c:4d:59:d0:45:5c:ef:24:13:ed:25:
                    fd:93:ee:c0:6b:e4:26:85:0e:12:5d:a2:21:de:c9:
                    9a:26:19:9e:da:ab:0d:52:dc:e8:a6:ac:38:5b:34:
                    41:eb:a1:88:6b:09:1b:46:31:d3:a0:ff:c4:a9:d3:
                    b3:34:b7:27:eb:90:82:f8:8b:d0:67:17:41:e1:f8:
                    fc:15:a2:d5:a7:f0:7a:08:69:1b:d7:19:09:2d:c5:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C1:EC:E0:01:2D:A7:DB:5E:4D:C5:03:9A:51:8C:A6:8D:A4:03:C9
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/VsHs4AEtp9teTcUDmlGMpo2kA8k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:8b:31:9a:c0:b6:11:c0:1b:ed:8b:be:87:a2:71:7a:b1:
         25:07:ba:83:c5:c5:67:db:e7:07:80:b8:e1:b6:5a:f2:24:ca:
         3d:11:18:5e:45:f9:63:ea:a3:68:2f:e3:e7:2f:f1:0b:1d:e2:
         c4:28:ff:4a:4d:79:39:76:77:83:bc:a4:ea:ab:e8:1d:4c:79:
         9b:bc:d1:ae:b3:b5:0a:23:da:e2:51:2e:77:3d:e7:a4:06:3e:
         bb:cc:19:62:f8:0b:a4:4e:71:91:8c:ab:83:22:6a:94:e7:24:
         6c:0a:9c:d5:91:59:3b:04:f6:96:9c:0f:4e:de:25:c6:b0:45:
         db:26:62:37:e0:03:47:46:47:45:5b:b9:6c:5f:0a:c5:51:a8:
         b8:88:64:b4:84:9f:e3:d1:9e:b2:b0:e5:39:ed:96:ca:e4:c2:
         13:bb:5e:a5:1b:f2:f4:d2:dd:3e:eb:e8:36:c9:fc:ca:59:36:
         42:b3:35:eb:eb:2d:70:51:a7:ab:f8:80:8c:ca:bc:78:8f:83:
         6f:d4:14:25:59:9d:67:62:4a:06:32:f7:8d:ff:0d:36:28:81:
         ee:3a:a5:f1:e6:d7:b9:f2:3d:98:d0:76:01:3c:0f:05:ec:6e:
         bb:49:b9:dc:8d:2e:b2:ca:a9:cd:2e:a9:05:03:cc:a0:b7:9b:
         df:69:1d:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org