Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/WABQAxTZYFyPMMA2vPMW-QzEZRU.roa
File:                     WABQAxTZYFyPMMA2vPMW-QzEZRU.roa (raw, json)
Hash identifier:          x2lHPGWc1K4K1wH4UyF+WKTz2YuRhcU0RXPz+Djtrow=
Subject key identifier:   58:00:50:03:14:D9:60:5C:8F:30:C0:36:BC:F3:16:F9:0C:C4:65:15
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/WABQAxTZYFyPMMA2vPMW-QzEZRU.roa
Signing time:             Thu 15 Sep 2022 02:51:03 +0000
ROA not before:           Thu 15 Sep 2022 02:51:03 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18049
IP address blocks:        103.180.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711 (0xa97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 15 02:51:03 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5800500314D9605C8F30C036BCF316F90CC46515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:a4:82:53:82:67:cb:e9:65:eb:3c:e7:a9:
                    86:67:31:b2:f0:15:9b:c8:73:2c:af:6a:15:f3:9b:
                    3f:64:a7:a1:b8:27:14:c0:e2:ec:df:06:3f:d0:08:
                    58:7d:d1:66:2e:33:8c:f0:f0:34:18:fe:19:bc:2a:
                    22:c6:00:33:51:75:72:1c:8f:d0:ad:1d:2b:8a:25:
                    9a:16:c4:8a:d8:aa:27:ac:55:85:2a:4b:3f:f4:34:
                    95:a8:76:3f:d4:08:b9:99:15:94:6a:cc:d6:b6:4c:
                    e2:58:37:3a:50:f6:b9:62:08:87:ce:36:a4:aa:12:
                    2f:eb:ef:a9:99:88:51:f3:32:62:97:dc:39:08:e0:
                    2f:1d:43:65:e7:52:a8:4a:45:29:3a:7d:ab:34:04:
                    c3:ff:41:ee:ff:2f:48:82:48:da:f3:1f:47:85:63:
                    fe:fe:93:28:d5:1c:e8:3f:1e:09:48:4b:60:02:38:
                    bd:79:7e:8d:8c:d6:e3:33:46:3e:81:60:c8:4f:a8:
                    38:93:ef:52:c6:7b:af:a9:5f:4f:79:d7:64:b5:e8:
                    74:cc:c3:98:14:c3:b8:be:b0:37:ef:30:f9:9e:fa:
                    e7:0b:36:ee:c2:c2:7a:53:4a:94:db:2d:b1:eb:d2:
                    b3:76:2f:84:8d:4f:37:4e:c2:0c:c8:af:9a:cb:d6:
                    9f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:50:03:14:D9:60:5C:8F:30:C0:36:BC:F3:16:F9:0C:C4:65:15
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/WABQAxTZYFyPMMA2vPMW-QzEZRU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:23:8a:73:db:3f:29:76:84:44:e3:1c:12:5a:b1:57:6a:e7:
         33:bb:e5:2c:20:59:9c:ac:c4:7c:04:a4:e3:54:6a:90:fc:47:
         6f:68:db:d4:b3:dc:ed:0d:86:c2:92:c3:fc:28:49:fd:ee:73:
         64:1c:2e:bd:05:7b:f7:ee:19:81:7b:5e:44:dd:ee:0d:70:9e:
         0f:dc:28:9e:65:5a:2b:ee:4a:22:aa:98:a7:81:5e:26:32:fc:
         3e:4e:f2:36:bc:f8:52:47:94:73:bf:dd:3c:c0:37:70:1b:fd:
         56:a4:98:78:66:64:e2:aa:28:8c:7f:66:cf:1e:f4:2e:68:23:
         1d:0e:d5:86:80:b1:4b:9f:49:ba:b5:e9:81:22:f8:22:68:21:
         f5:bf:cf:41:8f:16:f8:07:f0:c5:94:1e:a1:eb:ed:3f:b4:61:
         6e:57:c5:f2:31:2e:41:1f:73:7b:69:3c:16:f1:09:3e:ec:83:
         9e:65:2b:75:05:d3:54:4f:00:75:fc:45:61:49:d9:ba:6a:f3:
         2d:0f:5e:12:64:dd:ba:02:32:3b:5f:2c:59:fc:0f:fe:bf:88:
         9c:b6:b7:74:20:23:c9:56:83:fd:11:ed:06:66:db:9f:e0:d7:
         50:0b:0b:36:72:0e:8b:b6:23:70:51:c7:ae:6b:86:c4:e3:a1:
         97:04:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org