Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/wijCzU-Dv6xhG1teeKMNSC8Zo7I.roa
File:                     wijCzU-Dv6xhG1teeKMNSC8Zo7I.roa (raw, json)
Hash identifier:          0itXnRireO1tFS5XUUlRg/YE/Pi0+FmFE7+oqu089MQ=
Subject key identifier:   C2:28:C2:CD:4F:83:BF:AC:61:1B:5B:5E:78:A3:0D:48:2F:19:A3:B2
Certificate issuer:       /CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
Certificate serial:       0A44
Authority key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/wijCzU-Dv6xhG1teeKMNSC8Zo7I.roa
Signing time:             Thu 15 Sep 2022 02:34:52 +0000
ROA not before:           Thu 15 Sep 2022 02:34:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131618
IP address blocks:        103.122.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2628 (0xa44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
        Validity
            Not Before: Sep 15 02:34:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C228C2CD4F83BFAC611B5B5E78A30D482F19A3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:a3:7a:19:fa:31:c9:cb:d6:aa:33:57:ce:
                    99:56:34:ba:40:85:01:3c:d1:ca:f3:2f:bb:ea:4b:
                    e8:1c:45:46:15:cd:b6:1f:88:3e:bc:91:c9:d5:1c:
                    5c:6a:e7:f1:92:3e:18:40:67:6d:d0:f6:d4:dc:be:
                    c9:92:4f:76:03:36:37:5b:62:ae:87:97:b9:05:d1:
                    62:2e:fd:f6:cd:45:e5:0e:bd:66:52:c6:2d:f6:21:
                    04:af:e8:84:9e:a8:25:be:e7:bb:a9:2f:b2:26:e5:
                    ce:4b:07:6e:aa:62:12:0c:83:b4:47:39:02:34:ca:
                    28:bb:10:b5:bd:07:87:35:f1:90:98:8d:62:cb:ce:
                    09:e5:91:16:a5:cc:c0:66:57:45:2d:38:48:0c:2d:
                    ce:34:8d:e5:4b:47:d7:8d:38:f7:26:7d:ca:94:8c:
                    6d:9c:73:aa:9c:25:34:98:fb:8e:cb:bc:04:4d:e0:
                    f2:42:81:9e:cd:65:f7:d1:7c:19:6b:3f:4c:76:7c:
                    37:d1:f3:d0:49:e1:c6:35:9b:8e:28:16:5d:04:cf:
                    35:ad:81:94:5b:b0:bb:a2:f3:84:86:45:29:fc:76:
                    cf:c6:5f:95:7d:94:57:6c:bc:47:88:90:b5:b6:bf:
                    ae:af:e5:65:a3:c3:f4:e3:3e:cc:c7:bb:e9:9e:46:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:28:C2:CD:4F:83:BF:AC:61:1B:5B:5E:78:A3:0D:48:2F:19:A3:B2
            X509v3 Authority Key Identifier:
                keyid:63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/wijCzU-Dv6xhG1teeKMNSC8Zo7I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f2:76:1d:04:dd:90:78:b4:b7:06:19:f4:89:26:1a:e0:4a:
         a8:4a:7d:5c:0b:6d:d3:1d:2e:6f:86:b1:34:1a:2b:c8:02:28:
         43:16:c7:a7:de:3f:0b:48:7d:3b:a7:46:79:9b:a6:75:f7:5a:
         0e:e2:4e:97:b5:ba:36:3d:c6:7d:da:a2:a8:70:07:d5:7e:a2:
         ef:1d:3a:e7:1b:90:b5:92:79:5d:17:05:33:58:ac:7c:4c:76:
         13:bc:0e:f4:a7:32:f3:71:f5:6d:f1:bd:5d:6f:32:cb:0d:49:
         34:d4:17:53:fb:34:e8:38:a9:87:27:63:10:13:40:b7:c3:56:
         a2:7d:70:73:e8:5e:e8:f6:b2:f4:cb:83:c2:6b:51:5f:a4:61:
         b5:4e:03:1f:2b:38:61:5b:ba:63:2b:72:46:91:ee:a1:5c:42:
         18:cc:bd:ed:45:9d:b3:b7:51:a7:c4:a9:17:1c:7c:c9:d1:35:
         8d:cc:32:c4:4a:ac:7b:12:af:1f:cd:46:1c:23:26:48:bd:63:
         3f:c8:89:ff:e0:a9:10:43:40:2c:a9:b3:44:88:b0:e2:53:33:
         74:78:01:8c:79:a7:d1:d9:e8:e5:8e:ae:df:34:61:f7:fb:4a:
         f8:dd:bd:d8:59:ef:79:5e:a8:0d:2d:a1:ce:e7:7a:2c:a0:60:
         9d:ea:fc:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org