Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/YzwEmAt8uSzxzYRdnUcPjjnmEXg.roa
File:                     YzwEmAt8uSzxzYRdnUcPjjnmEXg.roa (raw, json)
Hash identifier:          pWBKHaZIIApFkPvolbJtM8H3UHaeZYUkldlykbZPCGo=
Subject key identifier:   63:3C:04:98:0B:7C:B9:2C:F1:CD:84:5D:9D:47:0F:8E:39:E6:11:78
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       EC
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/YzwEmAt8uSzxzYRdnUcPjjnmEXg.roa
Signing time:             Thu 07 Jul 2022 02:46:47 +0000
ROA not before:           Thu 07 Jul 2022 02:46:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38852
IP address blocks:        103.169.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Jul  7 02:46:47 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=633C04980B7CB92CF1CD845D9D470F8E39E61178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:a6:be:32:01:33:13:20:f4:cd:d4:d9:e7:
                    a5:ba:f5:d4:c9:00:80:07:47:18:1c:96:19:51:62:
                    14:b2:bf:e2:c6:dd:d5:2a:17:a5:b6:cc:57:ac:80:
                    d9:74:02:ee:67:56:98:c9:c0:9a:4c:9c:ca:b3:1e:
                    8f:0f:7c:83:fa:cf:e5:5d:b3:39:d0:2c:c2:52:dc:
                    80:44:28:48:48:e1:f1:ba:ab:f8:2c:17:59:dd:5b:
                    b4:7d:92:a7:59:4b:9d:06:fd:f8:df:36:4d:80:9f:
                    b1:e9:0c:55:b6:99:29:d8:5b:84:f6:30:fc:dd:ea:
                    2f:ca:55:0e:7f:24:4f:31:bd:9d:1d:17:9a:4a:40:
                    b3:2a:c6:01:5e:19:45:1e:34:13:25:62:a1:77:db:
                    16:a6:69:e0:bd:09:8d:95:c8:52:50:e8:46:27:70:
                    de:26:62:47:bc:7b:f3:31:6f:0d:51:56:23:e8:0c:
                    49:7b:44:99:9d:c1:7a:0d:f6:de:e5:6a:73:62:63:
                    9a:66:3a:2a:2f:e9:7b:b3:de:ee:71:3f:f5:92:9d:
                    a4:09:b2:9a:19:73:ef:fa:34:65:21:e8:eb:5d:56:
                    43:b5:4a:61:d8:e2:86:45:1f:33:71:4f:c3:88:09:
                    a2:7a:34:18:2c:4a:6e:e4:81:1e:84:05:02:08:55:
                    0a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3C:04:98:0B:7C:B9:2C:F1:CD:84:5D:9D:47:0F:8E:39:E6:11:78
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/YzwEmAt8uSzxzYRdnUcPjjnmEXg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:45:e3:d4:9e:81:87:8e:cf:fc:3d:f4:79:37:19:18:0b:3c:
         e2:d7:34:17:17:4b:fb:3c:47:a9:98:bb:c3:22:fc:20:2f:be:
         4f:4c:47:05:5f:fd:de:75:70:d7:43:60:88:74:07:6f:4e:d9:
         52:1f:58:5c:a4:d8:66:14:81:13:6d:f1:dc:99:b8:7b:5b:b4:
         ba:bf:06:b4:32:f0:5c:c4:36:74:c5:27:6d:c1:b3:21:59:64:
         19:0e:1f:00:e4:c4:74:00:c6:57:e2:59:4d:82:fc:8a:40:cd:
         11:a0:16:85:f0:ca:17:6d:8d:0f:99:d6:d1:b7:d0:b7:c4:bd:
         76:8a:0d:4b:39:cd:b0:db:fa:32:33:0b:59:66:74:a0:9c:27:
         72:45:13:03:d0:1d:6d:68:93:43:e3:6d:6f:65:c8:45:ef:8f:
         af:56:f3:4d:28:1a:ef:32:6d:2e:0e:2b:76:a5:f1:c4:79:20:
         7b:1e:1b:8c:d0:af:82:7d:da:e9:e8:14:af:bd:d6:36:e1:c8:
         00:9f:ca:a0:1f:06:11:bd:29:49:a5:26:9b:84:eb:ce:c0:d0:
         94:92:41:2f:fe:c9:de:07:f1:ab:ea:91:61:41:48:ae:7a:44:
         b3:5a:66:01:29:1d:f1:29:78:2e:fa:f5:d3:e8:40:d6:99:8a:
         a7:45:cf:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org