Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/XGmOv42WyTsBNRqKO6mGtjtZD58.roa
File:                     XGmOv42WyTsBNRqKO6mGtjtZD58.roa (raw, json)
Hash identifier:          5GzOgVga5Ekahy+515WcnC2Z0ADXRZng9aJnEc2qwO4=
Subject key identifier:   5C:69:8E:BF:8D:96:C9:3B:01:35:1A:8A:3B:A9:86:B6:3B:59:0F:9F
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       011C
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/XGmOv42WyTsBNRqKO6mGtjtZD58.roa
Signing time:             Thu 15 Sep 2022 02:40:57 +0000
ROA not before:           Thu 15 Sep 2022 02:40:57 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38852
IP address blocks:        103.169.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Sep 15 02:40:57 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5C698EBF8D96C93B01351A8A3BA986B63B590F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5b:52:38:19:f5:3d:e8:a7:e6:fd:b5:a4:27:
                    c1:47:a5:c4:33:00:e2:9c:65:a0:9f:af:db:ed:9a:
                    8c:a3:b1:d2:5a:e0:ea:7a:13:b8:1f:aa:29:73:7a:
                    52:15:25:c6:5e:e0:8b:3c:86:67:8f:ad:a3:f3:1a:
                    b6:81:31:1a:da:34:b7:2e:6e:e6:b9:55:d1:33:4e:
                    b7:43:9c:65:0c:a7:3a:8f:aa:cc:b1:29:15:c0:9e:
                    43:e2:df:0b:bd:ba:76:43:36:b4:17:f5:86:bb:cf:
                    33:c6:15:c0:52:98:58:55:5e:de:0d:78:04:bb:f2:
                    9a:5b:46:db:f8:bc:e0:e9:80:74:6d:63:9d:7f:bc:
                    e5:81:7d:4b:a9:4b:ae:f5:a8:58:eb:91:24:fc:d9:
                    58:cd:38:5c:48:a2:de:17:ff:92:04:12:43:0c:12:
                    12:f5:31:54:ae:03:85:65:ba:e7:39:e0:28:c9:54:
                    f4:e8:b5:ef:da:57:7d:3e:62:85:a2:fa:00:50:ed:
                    2b:8c:57:cf:37:1a:af:48:cb:e7:27:b1:06:94:23:
                    3b:ec:3b:08:a7:f7:a7:d5:b2:d2:ff:7b:9c:67:ed:
                    c5:d8:a5:a9:11:9a:2b:0c:85:28:11:a5:12:ca:2a:
                    c2:3d:89:5b:a4:89:c4:6b:7a:35:72:25:91:46:ee:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:69:8E:BF:8D:96:C9:3B:01:35:1A:8A:3B:A9:86:B6:3B:59:0F:9F
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/XGmOv42WyTsBNRqKO6mGtjtZD58.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:00:c5:4b:89:ae:84:3b:5d:68:cb:29:b9:06:b3:70:3c:74:
         1a:46:7f:5d:65:9c:6c:ee:29:81:f4:1a:00:4f:20:2e:90:69:
         30:e0:a0:0a:43:c1:c9:c5:72:d1:d6:ce:79:11:2f:b0:ca:2c:
         67:74:46:37:20:62:68:8c:87:10:67:93:a6:4a:54:a2:9f:8c:
         ed:05:05:1f:9d:91:47:d9:c6:02:49:d9:f4:9c:e0:2f:f1:b9:
         f4:3b:a3:30:63:8b:ee:d1:65:22:e2:5d:e2:4f:79:4b:c2:89:
         d4:d1:4b:99:d4:e8:28:e3:bd:0f:4b:2a:27:e8:32:d0:97:28:
         dc:74:fc:5d:d2:6a:a4:f1:ea:fa:64:81:16:0b:d7:2c:b9:39:
         3d:59:b4:1a:5c:b2:fb:ea:03:ce:29:ec:0b:90:40:08:d5:d5:
         b2:d7:66:e6:5f:27:90:a1:58:64:07:a2:2e:ef:fe:79:1c:bf:
         2c:4d:04:2f:f3:4e:c2:a9:8d:72:41:2c:71:45:b1:f9:61:1d:
         a5:1e:20:29:0b:51:a6:4c:5b:6b:07:27:f4:81:34:f2:d2:dd:
         2e:07:2a:fc:04:d1:51:b3:1f:df:b6:fe:03:70:4b:7f:a7:c2:
         42:9c:90:53:c5:46:85:36:20:ba:d6:af:3a:07:a1:21:c2:bc:
         cc:46:25:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org