Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/w79QYutHnFZ542pVfgcpEcEU7-8.roa
File:                     w79QYutHnFZ542pVfgcpEcEU7-8.roa (raw, json)
Hash identifier:          NmJmZHm4lRFAFreVRB832RDYgX1MuddqMnKnkYwJsg4=
Subject key identifier:   C3:BF:50:62:EB:47:9C:56:79:E3:6A:55:7E:07:29:11:C1:14:EF:EF
Certificate issuer:       /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial:       0A49
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/w79QYutHnFZ542pVfgcpEcEU7-8.roa
Signing time:             Wed 01 Feb 2023 04:05:02 +0000
ROA not before:           Wed 01 Feb 2023 04:05:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     209242
IP address blocks:        223.165.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2633 (0xa49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
        Validity
            Not Before: Feb  1 04:05:02 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C3BF5062EB479C5679E36A557E072911C114EFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:95:d4:fe:03:89:0b:e5:69:bb:36:50:c9:
                    6a:aa:c7:34:b2:29:73:9e:63:8c:83:3f:28:06:c4:
                    9a:ef:17:b1:a9:04:7d:46:2f:62:35:d4:b6:93:6a:
                    68:ab:db:2b:9a:fb:25:38:04:b9:ef:9a:a2:68:65:
                    57:ac:ed:77:ac:ae:86:f8:80:90:91:e8:dd:1f:1b:
                    25:6d:a8:b6:92:4a:71:7b:28:ea:49:8c:7b:ed:72:
                    4d:81:8c:c1:a2:d9:45:d1:dc:d1:56:d2:98:29:c7:
                    fd:c2:bd:37:42:74:23:8b:f6:44:12:18:75:02:fd:
                    db:bf:b1:25:d6:e0:59:d9:bf:f6:29:d7:71:0e:d9:
                    f5:e6:1c:e3:d3:36:75:82:cf:89:a7:cd:f3:3a:cc:
                    26:a5:56:1c:92:db:ff:18:ab:be:da:05:31:e7:51:
                    c6:05:9b:27:e6:c0:db:97:56:b9:e7:87:c8:e6:1a:
                    6e:88:00:90:ab:5c:87:c8:e1:49:58:d7:52:85:89:
                    9b:ec:84:1c:09:94:e2:a0:0c:8a:9e:bf:0c:c7:18:
                    14:83:b3:cb:90:b0:dd:94:bb:71:ca:84:c9:50:0a:
                    00:11:8a:e8:47:75:f4:1e:a5:c0:51:1f:b1:5f:53:
                    b8:7e:c7:1e:6e:22:38:4a:e3:90:d4:06:3d:f8:b1:
                    76:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BF:50:62:EB:47:9C:56:79:E3:6A:55:7E:07:29:11:C1:14:EF:EF
            X509v3 Authority Key Identifier:
                keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/w79QYutHnFZ542pVfgcpEcEU7-8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:37:c1:dd:32:a2:80:bc:c3:e9:05:ec:19:86:17:38:da:92:
         3d:ea:e6:b1:2b:78:6f:5e:bb:74:e0:b6:b1:29:7d:8b:25:34:
         41:d9:41:82:73:15:79:e4:dc:d7:d1:b8:84:eb:f4:ce:07:86:
         0e:d3:13:48:93:17:3c:0c:a8:f3:07:d1:7b:fc:f3:06:00:95:
         61:ec:8f:53:b7:3e:12:b9:f1:2c:28:29:9c:d7:ed:4a:3d:cf:
         10:f7:1f:f0:0e:40:72:24:f5:06:c1:dd:a3:8d:e5:69:64:9b:
         70:c2:1d:c5:1e:c1:19:81:8f:fc:d9:f1:a5:8c:a4:75:08:13:
         49:39:c7:ae:0e:99:fb:24:ec:6b:ca:0a:0c:51:0d:7c:0a:7b:
         5a:ed:e5:d9:d9:d9:8f:64:c0:b3:7a:1f:1e:92:84:64:98:9a:
         2c:8e:37:08:31:13:93:d2:24:d8:c8:b1:57:0d:f4:f7:ca:2e:
         5c:2c:87:c2:2c:5f:3d:7b:d6:4e:a8:28:ab:16:bc:ec:50:ce:
         03:f4:6e:bf:f3:28:ca:a3:3e:b3:a3:af:84:99:aa:0f:ab:db:
         cd:96:32:7f:b6:de:bb:1c:7e:7c:42:02:7c:cb:27:64:80:7e:
         db:c9:aa:61:71:bf:26:6d:02:96:7f:65:b7:6a:a7:72:56:a5:
         74:12:14:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org