Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/W-wsg-WDY76bc1aMwfR7Uj-k6mc.roa
File:                     W-wsg-WDY76bc1aMwfR7Uj-k6mc.roa (raw, json)
Hash identifier:          XynEvmkdP92oWyG9m7j0X8hptWnz6WBu+92B3a43yBI=
Subject key identifier:   5B:EC:2C:83:E5:83:63:BE:9B:73:56:8C:C1:F4:7B:52:3F:A4:EA:67
Certificate issuer:       /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial:       09FF
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/W-wsg-WDY76bc1aMwfR7Uj-k6mc.roa
Signing time:             Thu 07 Apr 2022 06:11:38 +0000
ROA not before:           Thu 07 Apr 2022 06:11:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131627
IP address blocks:        101.3.140.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2559 (0x9ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
        Validity
            Not Before: Apr  7 06:11:38 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5BEC2C83E58363BE9B73568CC1F47B523FA4EA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:b4:b1:31:cf:42:ce:ea:77:3f:70:e6:af:
                    f4:a5:0b:b5:20:42:93:b6:ff:84:63:bd:ed:62:73:
                    77:a8:37:81:a0:4b:2d:16:a0:fd:cd:e3:e7:f9:da:
                    97:ee:1e:67:ea:29:d3:16:4a:a5:95:32:cb:24:ea:
                    be:95:c8:fc:0f:34:d0:dc:1a:fa:65:78:bb:c4:87:
                    02:05:d5:bb:91:05:dd:a2:ce:6d:e8:d2:fd:3e:9c:
                    94:4a:a9:54:bf:e6:68:e9:7b:cc:73:69:02:c6:09:
                    d5:d0:95:5f:69:69:f0:f0:da:0e:d1:39:54:f0:15:
                    07:75:86:e3:db:7d:84:00:48:61:8a:ef:56:4e:67:
                    bc:e4:4f:e5:01:e2:2a:c5:52:f0:b4:77:8a:66:3d:
                    b1:7b:26:a9:0b:72:80:49:66:d6:99:5f:70:48:ed:
                    7b:49:d1:a4:98:48:42:a8:24:3a:79:bc:db:c2:b4:
                    a9:a8:5e:3b:80:bd:0c:3c:32:e9:18:98:65:dd:be:
                    6f:10:9c:ed:e1:d4:fe:ba:c4:14:bc:ab:64:be:f1:
                    1a:a0:c1:02:53:ea:32:b6:50:94:74:22:e6:a9:9d:
                    e3:4a:81:ec:77:0d:47:51:71:6d:b2:66:c2:7d:8a:
                    d4:b4:95:fd:19:c4:09:86:80:a8:89:ae:6b:e6:ba:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EC:2C:83:E5:83:63:BE:9B:73:56:8C:C1:F4:7B:52:3F:A4:EA:67
            X509v3 Authority Key Identifier:
                keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/W-wsg-WDY76bc1aMwfR7Uj-k6mc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.3.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:db:39:f9:5d:24:05:6d:17:ae:a3:d1:db:d8:ea:6f:d5:d7:
         b6:b5:a8:ef:d6:68:e7:14:2c:32:0e:c4:34:16:f9:73:a6:ba:
         53:52:96:34:e4:4c:b9:d5:43:5e:77:43:4e:5f:8e:d7:a3:46:
         cf:61:a8:da:0b:31:22:fc:8c:51:2d:6b:4c:e6:a9:ce:cf:bb:
         82:8a:45:da:04:a2:4d:cb:4b:0b:cd:53:a5:c9:33:3b:4d:be:
         7e:be:d1:a1:fa:d8:86:82:43:f1:bb:19:86:69:6c:6c:20:5c:
         ad:b1:b4:f6:07:6f:ca:3e:09:db:dd:a7:fb:f6:9e:e5:44:27:
         75:a5:04:4b:0e:60:e7:90:34:92:16:7c:a1:35:ec:ca:ac:64:
         3e:1a:bb:62:14:09:f2:4b:53:be:79:29:01:c4:32:24:1d:85:
         9f:d8:4d:70:98:a0:67:b5:cb:7d:16:93:19:2f:6d:ae:b3:4a:
         0f:d3:8b:97:a1:48:13:79:d7:b5:b2:59:0e:0d:f2:ac:28:17:
         19:cb:a5:52:50:94:02:76:e8:ce:27:ba:cf:cf:f1:bd:79:08:
         6f:19:39:bf:6b:d0:70:ab:63:a5:31:9f:7e:72:cd:46:39:f1:
         73:fa:2d:4d:74:4f:bf:e2:30:d1:1a:6e:07:d1:98:80:13:d8:
         72:84:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org