Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/EUWmLmgfS7HgfEdOBaQAyrWlxY4.roa
File:                     EUWmLmgfS7HgfEdOBaQAyrWlxY4.roa (raw, json)
Hash identifier:          r9lbDUR+NO3g7WrEu0TrClR4V9stbsLJj2strUlQbiA=
Subject key identifier:   11:45:A6:2E:68:1F:4B:B1:E0:7C:47:4E:05:A4:00:CA:B5:A5:C5:8E
Certificate issuer:       /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial:       09E2
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/EUWmLmgfS7HgfEdOBaQAyrWlxY4.roa
Signing time:             Thu 15 Sep 2022 02:50:13 +0000
ROA not before:           Thu 15 Sep 2022 02:50:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     133955
IP address blocks:        223.165.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
        Validity
            Not Before: Sep 15 02:50:13 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1145A62E681F4BB1E07C474E05A400CAB5A5C58E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:c0:a9:17:bf:00:56:8c:c2:78:04:b8:4a:
                    47:67:aa:5d:fd:4e:06:5c:80:36:c4:d7:0d:f3:fe:
                    4e:eb:ae:9a:6c:f8:49:f4:ef:12:10:ab:f3:da:0b:
                    a3:49:65:94:2d:46:bb:e5:02:ea:0a:2d:a4:a1:2f:
                    2a:39:91:28:6b:6e:b8:2f:1e:0b:b6:1f:c5:f1:48:
                    97:eb:63:e4:7d:0d:3f:ff:90:19:2f:21:57:c6:86:
                    83:08:c7:29:99:a0:c3:bf:19:04:4d:31:2e:33:b5:
                    03:2e:d7:8e:fa:5c:5f:8f:4b:55:9e:98:9d:09:51:
                    48:06:54:c0:32:51:ac:6a:55:b0:9c:24:ac:e5:ce:
                    79:1e:e1:02:96:5c:88:61:3e:fb:d2:b2:d1:23:b0:
                    c1:92:d0:f6:b4:b7:4d:83:03:1f:7d:56:55:0a:b6:
                    8c:1e:20:66:ff:0e:ce:db:dd:eb:17:19:51:37:22:
                    16:bd:24:8a:93:bc:43:0d:bf:c4:18:29:bc:d6:05:
                    75:5c:c3:35:68:41:80:b5:7d:11:99:53:df:01:a2:
                    7b:37:16:88:e3:53:e0:a7:16:4d:f7:ac:36:41:26:
                    dc:4f:44:59:25:36:ed:8c:c0:32:92:7e:f1:13:18:
                    cc:85:1f:86:ba:f8:33:21:9f:ae:97:56:3c:3f:a0:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:A6:2E:68:1F:4B:B1:E0:7C:47:4E:05:A4:00:CA:B5:A5:C5:8E
            X509v3 Authority Key Identifier:
                keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/EUWmLmgfS7HgfEdOBaQAyrWlxY4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:af:d1:d0:7f:df:33:71:ce:6a:65:de:d6:f1:f6:82:60:21:
         b4:3e:ce:48:5e:bc:af:e1:b7:b7:96:63:c5:1a:61:79:da:56:
         46:d2:c0:28:9d:56:38:de:b3:bf:c0:27:8f:15:f6:39:ff:16:
         ed:18:03:a7:7c:ac:36:99:7f:1d:06:6d:8a:c8:b4:55:63:a3:
         8c:2e:d7:4d:ef:8d:d4:2e:16:c1:6e:15:7f:6d:63:f3:6e:21:
         0f:49:db:86:3c:67:1a:d0:63:db:4b:6b:d9:33:92:73:27:19:
         18:61:72:13:e9:c9:2d:9f:7b:9c:2e:34:cb:ca:54:b9:0f:ae:
         ae:3d:22:3e:02:0e:7f:59:7a:84:9f:d7:8a:6f:b3:58:7c:fb:
         22:f0:49:77:92:73:d0:80:95:68:e6:69:3b:26:a7:5c:1c:53:
         71:66:8c:54:70:35:05:f6:98:3b:2e:71:16:ad:25:eb:07:b5:
         6f:55:5d:72:aa:16:c3:85:4c:bc:3c:ff:18:16:d6:95:8d:c8:
         20:f4:00:f6:1b:43:0c:ff:3e:7a:9c:6f:87:f5:62:b3:77:37:
         f8:d2:cf:96:26:59:9c:fd:ce:4d:54:c0:99:77:78:1d:29:1f:
         2d:40:d1:66:28:9e:86:69:19:51:53:a5:0e:26:f4:1a:3e:7b:
         59:c5:44:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org