Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/VXXJ5hs9mLoI6FElsdCN6XdRp5Q.roa
File:                     VXXJ5hs9mLoI6FElsdCN6XdRp5Q.roa (raw, json)
Hash identifier:          Xn3fCZWr/WdKGA1SEsMnMZFg69opTm9hPNQ6LTHOc1g=
Subject key identifier:   55:75:C9:E6:1B:3D:98:BA:08:E8:51:25:B1:D0:8D:E9:77:51:A7:94
Certificate issuer:       /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial:       09E2
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/VXXJ5hs9mLoI6FElsdCN6XdRp5Q.roa
Signing time:             Thu 15 Sep 2022 02:50:12 +0000
ROA not before:           Thu 15 Sep 2022 02:50:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     133955
IP address blocks:        223.165.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
        Validity
            Not Before: Sep 15 02:50:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5575C9E61B3D98BA08E85125B1D08DE97751A794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:03:fe:bd:9d:27:6d:0c:98:48:d7:9c:6d:68:
                    50:d2:1c:69:19:51:88:1d:3c:7e:7c:b9:c5:5e:71:
                    1d:7d:ba:6d:b5:20:31:bd:f4:4d:61:4c:67:ff:f5:
                    95:26:4a:11:9c:ee:6e:99:e0:83:86:9f:99:1e:31:
                    35:f3:92:5f:1e:77:87:d6:76:d4:b6:4a:e3:98:76:
                    7a:50:fa:e8:e6:42:14:b6:80:ea:78:db:3e:6b:92:
                    8e:6a:b5:e8:8a:2e:14:b2:17:e4:5c:12:0b:a7:9f:
                    e2:5f:9f:8d:d8:c8:50:db:52:d4:e6:25:df:97:ce:
                    a5:76:18:a8:de:fa:87:6c:74:5b:10:1b:5a:8c:ff:
                    83:7d:ce:71:86:12:ca:62:c9:97:4e:be:91:d3:45:
                    0d:e1:0b:fa:09:75:34:2d:7a:1e:e7:aa:73:6f:1a:
                    f2:33:3d:8b:86:f4:6e:5a:7d:39:11:ea:d3:16:69:
                    f8:03:3f:6c:f3:9a:25:15:9f:98:5e:11:47:d5:43:
                    3c:80:81:e4:41:7f:b0:ab:45:6a:e2:75:0f:04:5e:
                    fc:aa:8e:b9:df:40:83:c3:63:5a:a2:00:28:5f:4f:
                    1c:51:55:a8:72:a3:0a:f2:5b:86:d6:a5:06:e5:55:
                    8c:6d:33:61:18:c6:be:a0:bb:aa:68:29:c9:dc:6d:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:75:C9:E6:1B:3D:98:BA:08:E8:51:25:B1:D0:8D:E9:77:51:A7:94
            X509v3 Authority Key Identifier:
                keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/VXXJ5hs9mLoI6FElsdCN6XdRp5Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:e2:70:71:c1:3f:02:80:97:a1:54:e6:6c:e6:dd:e2:8c:
         b6:f3:66:62:c9:c3:d1:82:a6:87:42:f7:c9:51:3d:2d:b9:71:
         b9:73:ee:35:0f:d2:d5:0f:6f:6e:23:0c:0c:41:ab:43:39:07:
         b4:12:43:eb:40:33:9a:a6:cd:2c:a6:89:09:20:4a:a6:54:98:
         9b:d7:d3:90:a4:e1:1e:a1:8f:f1:34:c6:83:e2:15:7a:40:2c:
         d6:f7:2d:e7:dc:3c:69:8f:b5:10:84:2e:83:4e:57:c5:6b:5f:
         f6:8b:46:b6:97:3c:bb:35:60:5a:a1:d2:11:8a:d6:cc:f2:3c:
         87:b6:25:5b:68:76:49:39:af:8e:95:96:9c:d0:62:d1:b1:ed:
         25:09:d5:6f:14:b2:d8:ab:66:bc:be:2a:8e:98:8d:c9:9a:eb:
         41:04:6f:cd:ce:6f:b0:25:79:be:5f:87:96:27:59:fa:f0:3e:
         59:42:37:b2:fc:32:82:6a:28:e1:86:a3:a7:1d:fe:85:ae:3e:
         72:6e:f9:2f:70:ce:3f:28:c7:26:c3:31:e0:90:f8:58:99:90:
         b0:a9:e2:f9:e0:67:1a:da:5e:7f:be:19:e7:a1:05:fe:aa:3f:
         6b:28:cb:a7:7f:43:c2:0a:13:34:60:2a:18:6e:4a:e7:88:34:
         db:23:8a:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org