Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/cFLz49QH7jkl-3GNz_0hFozka80.roa
File:                     cFLz49QH7jkl-3GNz_0hFozka80.roa (raw, json)
Hash identifier:          /egOOo9ON9TPXQ288yt8qoZeLCErecR6bKRWvx+XX/I=
Subject key identifier:   70:52:F3:E3:D4:07:EE:39:25:FB:71:8D:CF:FD:21:16:8C:E4:6B:CD
Certificate issuer:       /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial:       09E2
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/cFLz49QH7jkl-3GNz_0hFozka80.roa
Signing time:             Thu 15 Sep 2022 02:50:11 +0000
ROA not before:           Thu 15 Sep 2022 02:50:11 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     133955
IP address blocks:        223.165.9.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
        Validity
            Not Before: Sep 15 02:50:11 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7052F3E3D407EE3925FB718DCFFD21168CE46BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:04:40:e8:5e:8d:2e:ad:dd:17:28:a0:05:
                    1e:7d:29:57:b0:77:6e:79:28:20:6c:67:dc:a5:86:
                    ea:2b:66:e3:c9:0f:a5:19:01:5d:c1:27:d8:1c:a5:
                    8b:8b:b1:04:be:60:aa:92:71:d8:ff:5e:66:4f:e4:
                    11:69:74:ea:6b:43:40:c2:59:0e:9b:e0:6e:4d:e8:
                    04:5c:98:fe:51:b7:eb:3c:f3:f5:e3:0b:bf:38:98:
                    a6:08:76:e9:41:22:73:3f:a1:df:ad:87:56:8a:4a:
                    6b:27:fc:05:a9:f1:cb:a6:d7:da:42:d8:2c:cf:64:
                    24:65:ce:70:44:1f:bf:ec:55:e2:b9:e8:72:95:21:
                    50:0e:ed:b2:21:c1:38:50:d6:e2:51:61:a1:20:47:
                    54:bb:74:07:12:d8:f3:1d:b4:c3:30:d0:e1:0a:f5:
                    6c:01:19:57:26:29:2a:e5:e3:6f:eb:45:8d:42:58:
                    50:a9:58:85:80:7b:9a:47:08:22:cb:24:69:e1:c8:
                    e5:da:9d:a2:e7:46:ae:9b:cc:86:8c:26:d4:f3:2b:
                    58:69:d5:96:ba:53:f6:c5:b1:21:3b:bb:4f:c0:a0:
                    68:d6:d5:09:1b:4a:f2:1a:5f:0e:3f:85:4a:f7:56:
                    e3:42:a2:2d:3b:ba:73:38:93:88:0c:dd:20:c0:ec:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:52:F3:E3:D4:07:EE:39:25:FB:71:8D:CF:FD:21:16:8C:E4:6B:CD
            X509v3 Authority Key Identifier:
                keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/cFLz49QH7jkl-3GNz_0hFozka80.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:b2:4b:ba:1d:1e:af:e8:2d:82:e3:c3:32:0a:7b:3a:c8:
         06:c7:77:b6:d0:cd:a5:c0:1e:62:58:0d:f4:a4:d8:b8:a8:14:
         b5:dd:bb:3c:57:c9:2e:75:e9:f6:23:2f:d6:a5:e0:54:77:9a:
         34:3a:8e:4f:dc:11:46:a8:95:4f:78:28:f1:27:e2:f3:6c:df:
         68:04:41:d5:aa:26:b7:a3:40:96:b1:04:f0:b6:5b:37:c9:a7:
         de:57:2d:13:38:bc:4e:b4:26:fe:53:af:c9:d3:be:68:3a:3c:
         92:26:1c:38:b3:6e:c9:fe:0d:58:0f:1a:a8:23:f3:05:03:a0:
         c7:b3:6f:e1:05:4b:25:59:de:25:e6:44:37:3e:c2:06:8e:0b:
         0d:dd:62:4a:19:49:78:2c:db:d5:c3:ca:46:c3:00:3e:ae:16:
         1c:c7:7c:35:85:08:f6:85:e5:72:ba:ae:58:75:25:e4:15:bb:
         a6:41:2f:5d:a7:be:73:82:e2:f2:28:68:fa:d3:51:a3:8a:b7:
         29:8f:a4:2f:c2:2c:a8:f1:8b:cf:6c:94:99:ca:d8:3a:90:4e:
         3b:03:ed:d0:df:ec:11:5b:93:3a:b1:06:a9:8a:58:12:4a:7a:
         bd:c6:7e:3a:0b:29:37:c9:56:8a:40:9f:fa:7a:ed:f1:1e:5a:
         50:67:e0:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org