Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/lWBc3ddeIYBCf_Feiyvn3rWRg4c.roa
File:                     lWBc3ddeIYBCf_Feiyvn3rWRg4c.roa (raw, json)
Hash identifier:          0GGh2LhMDv1AJa5magDBk52ifK1brEsRo4PHSVXCNw0=
Subject key identifier:   95:60:5C:DD:D7:5E:21:80:42:7F:F1:5E:8B:2B:E7:DE:B5:91:83:87
Certificate issuer:       /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial:       093E
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/lWBc3ddeIYBCf_Feiyvn3rWRg4c.roa
Signing time:             Thu 13 Jan 2022 17:23:09 +0000
ROA not before:           Thu 13 Jan 2022 17:23:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     133955
IP address blocks:        223.165.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
        Validity
            Not Before: Jan 13 17:23:09 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=95605CDDD75E2180427FF15E8B2BE7DEB5918387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:97:51:b5:39:e5:b2:ec:79:ea:0f:80:1f:
                    bb:56:8e:85:09:d0:b2:2f:84:ce:4c:e6:0c:66:be:
                    b1:25:35:e5:5f:cd:ae:5b:b6:75:38:26:47:b8:81:
                    11:f0:48:6d:6b:c3:9c:f7:9b:ee:e8:ea:e1:1d:3c:
                    ee:ca:8c:fc:4b:b6:fe:d0:a5:b5:cd:8f:fb:cc:31:
                    5c:0e:0f:f0:92:41:47:11:57:a0:60:e4:65:1b:ac:
                    8d:c5:99:99:df:2a:b3:4a:95:e4:a3:8a:9f:68:91:
                    dd:7d:9b:5a:ad:73:fe:37:c5:50:f7:5b:35:f8:fe:
                    f1:69:d7:c8:55:cd:ce:63:4e:4c:42:26:b4:9e:73:
                    f9:7a:85:61:00:e2:06:ee:ec:1d:58:02:36:39:4d:
                    f4:02:9e:16:87:e2:a2:f2:d0:b1:56:04:7e:fe:50:
                    ec:4c:e3:c5:21:17:b4:f7:86:a0:68:7a:46:a7:6d:
                    f8:67:3b:78:19:f4:f8:ed:47:93:eb:04:88:48:84:
                    32:8a:81:ac:fc:21:b5:c4:4d:d1:d6:5f:5b:67:72:
                    45:12:17:d2:b5:85:34:ce:ba:79:06:32:fb:1d:74:
                    fd:f9:a6:4d:46:be:b0:49:29:a3:cb:10:96:e2:4c:
                    9a:d3:52:33:82:d9:af:e2:fc:5e:b4:b8:13:55:91:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:60:5C:DD:D7:5E:21:80:42:7F:F1:5E:8B:2B:E7:DE:B5:91:83:87
            X509v3 Authority Key Identifier:
                keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/lWBc3ddeIYBCf_Feiyvn3rWRg4c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:31:3b:85:e2:59:5f:66:42:3b:4a:51:d8:4b:99:6f:4f:f3:
         17:92:e7:e3:3a:93:d7:67:39:ee:1d:33:2a:13:98:70:c7:57:
         6a:cf:02:be:23:20:ce:b6:3f:ad:4c:36:de:a2:31:1d:10:0b:
         c5:89:6d:fc:5a:e2:eb:a5:41:83:81:e2:98:66:ac:c0:d3:cd:
         4f:f5:1d:2e:96:b9:58:b6:fd:de:be:94:40:29:f6:63:a9:2e:
         19:d1:4c:9c:97:22:9e:14:ef:df:72:c0:36:ef:f0:75:6a:95:
         13:04:be:2a:6b:6e:09:51:ec:e2:ae:8f:32:3a:be:cc:80:ff:
         60:96:82:bb:a1:fc:90:f8:3a:a9:28:43:cb:3b:58:c7:79:2d:
         21:ca:fe:d0:ec:03:93:b4:4d:c5:c8:43:e5:0b:f1:21:de:b6:
         00:c4:83:01:c6:b4:07:8d:62:f7:57:8c:87:de:de:11:34:a1:
         87:a3:98:88:c5:05:c0:ab:c9:96:ba:d5:1a:cc:d7:be:c5:82:
         46:ac:8b:5f:dd:7b:44:b8:16:20:6d:c0:82:e5:51:7a:81:03:
         3b:ef:22:a4:d1:38:a8:cf:f9:e8:4b:b1:eb:02:0c:87:df:88:
         ab:32:af:87:a1:0b:8a:2d:bf:12:ac:c4:5d:1a:ef:96:a8:4b:
         ca:0f:38:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org