Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/0_cocKIjiPBWlM-egoID-ZtfcCI.roa
File:                     0_cocKIjiPBWlM-egoID-ZtfcCI.roa (raw, json)
Hash identifier:          TjIiorbLkBxsX11ejFXyoBX9y9yQr4y9hJB9dSRwMMs=
Subject key identifier:   D3:F7:28:70:A2:23:88:F0:56:94:CF:9E:82:82:03:F9:9B:5F:70:22
Certificate issuer:       /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial:       0A41
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/0_cocKIjiPBWlM-egoID-ZtfcCI.roa
Signing time:             Wed 01 Feb 2023 03:24:13 +0000
ROA not before:           Wed 01 Feb 2023 03:24:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     209242
IP address blocks:        223.165.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
        Validity
            Not Before: Feb  1 03:24:13 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D3F72870A22388F05694CF9E828203F99B5F7022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:2c:7f:94:55:ee:09:31:7d:15:54:92:ad:
                    1a:f1:3e:18:c7:29:60:d4:c3:fb:82:2f:5a:9a:09:
                    c1:3c:b7:73:be:56:c7:ee:81:dc:61:36:df:23:56:
                    68:3f:db:aa:e8:fb:b8:49:77:c8:0a:21:e5:27:5e:
                    17:ec:e9:2d:78:0f:f3:37:ec:e2:3a:62:9e:b3:37:
                    90:5c:d8:0b:a2:32:f5:a8:ce:9e:bb:1e:ff:49:08:
                    ab:d0:8e:4a:93:78:a5:f9:4e:50:ad:82:0e:f7:ba:
                    43:d8:b6:a2:0b:b0:5f:3b:00:5e:61:3c:49:48:3a:
                    95:37:48:5b:a9:76:22:52:a8:0b:24:d9:7f:3f:68:
                    ce:6c:5a:76:59:ae:36:5f:2a:ce:55:20:70:67:09:
                    ef:b2:2a:c5:fa:1d:9f:36:b9:a0:2c:f5:b1:85:f2:
                    1f:5b:91:0c:64:04:06:a0:90:b5:d3:02:dc:24:6f:
                    63:24:7b:38:f0:27:1f:e2:98:b2:ea:16:a1:f7:e5:
                    38:8d:4c:5d:70:78:e9:d8:75:25:b1:25:41:32:09:
                    36:6f:ce:71:5a:c2:49:6f:4e:1b:c0:53:e2:47:39:
                    b5:44:a1:65:34:97:1d:ee:c6:d6:00:f6:d1:db:a5:
                    f1:7f:db:06:3e:ef:51:e8:bf:c9:d4:d1:7f:ba:2b:
                    39:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F7:28:70:A2:23:88:F0:56:94:CF:9E:82:82:03:F9:9B:5F:70:22
            X509v3 Authority Key Identifier:
                keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/0_cocKIjiPBWlM-egoID-ZtfcCI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:36:72:ff:39:79:d0:db:9f:fc:9d:94:ea:34:dd:0a:19:f3:
         8c:38:92:14:e7:a6:88:5f:80:00:fd:5b:24:df:da:09:de:4f:
         ad:74:81:c9:7d:9f:a9:07:73:bd:cb:24:eb:81:fc:1e:6f:29:
         82:63:2a:8f:40:63:a4:72:41:77:9e:a9:f8:ff:e0:8a:e5:8f:
         d2:e6:17:fc:dd:c6:34:bb:28:04:5e:35:5f:15:6a:9d:51:7a:
         f2:d2:18:66:ec:9d:e2:c3:e6:ce:1b:9f:a6:ca:a9:77:9b:ec:
         50:4b:dd:57:e1:45:8f:9d:74:ca:26:02:e3:d5:0b:a2:51:08:
         69:24:db:d4:7d:29:43:eb:ac:d5:67:c1:1b:c6:93:06:92:3e:
         12:1b:ac:d9:65:e5:1f:52:38:50:9f:2e:a0:f5:47:27:65:d5:
         e1:fe:a4:bf:3d:c1:2e:22:39:89:9c:ae:f5:5b:ec:00:fb:ba:
         32:18:d9:eb:70:77:ff:db:82:91:8d:a0:a7:db:52:a6:6a:17:
         de:d2:2a:c1:0f:3f:75:7a:4a:3f:02:96:f9:a8:28:91:51:34:
         ce:64:07:1d:06:22:dc:c5:b5:83:4c:7a:36:d6:5d:cf:60:cf:
         76:50:24:6e:84:91:30:4a:19:9a:d4:0b:70:e2:60:c6:ee:1a:
         de:4f:a0:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org