Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/AWnExEanIk4kLndBmxOVczteYEE.roa
File:                     AWnExEanIk4kLndBmxOVczteYEE.roa (raw, json)
Hash identifier:          9Wi5cJb5B2bKYLXFkuhuRGT1z5JQtc7umOD2spkP5xY=
Subject key identifier:   01:69:C4:C4:46:A7:22:4E:24:2E:77:41:9B:13:95:73:3B:5E:60:41
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       0137
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/AWnExEanIk4kLndBmxOVczteYEE.roa
Signing time:             Thu 15 Sep 2022 02:40:44 +0000
ROA not before:           Thu 15 Sep 2022 02:40:44 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38846
IP address blocks:        103.169.126.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Sep 15 02:40:44 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0169C4C446A7224E242E77419B1395733B5E6041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:f2:1a:2e:97:b9:1e:25:28:23:5e:b1:03:
                    a2:9b:2f:92:f9:ab:c1:b3:91:8e:35:7c:26:32:22:
                    2e:11:41:5f:e0:9b:0f:ba:f9:89:1a:a7:a3:61:83:
                    72:92:6d:14:36:69:fd:3e:dd:d8:62:46:11:72:86:
                    0a:bb:98:b8:67:ca:6d:b8:e2:4a:1a:9c:b4:b7:37:
                    a3:42:b5:17:75:5f:5a:11:b9:7b:9c:7b:19:40:07:
                    ab:ed:b4:b3:c6:b8:50:03:70:aa:dc:a8:77:92:ac:
                    96:76:83:4d:f6:ec:20:f0:7b:9f:07:3b:79:bf:4f:
                    d7:c8:1a:80:ff:e7:3a:d5:f0:7b:aa:36:99:bb:35:
                    d2:3c:59:1c:b3:70:01:02:09:6b:86:b1:8f:b6:0c:
                    36:69:10:c4:3d:6a:17:67:66:b7:09:8b:80:1a:dc:
                    47:46:71:52:9c:3e:fe:cb:56:a2:4b:af:84:f5:54:
                    ad:aa:7b:6c:5b:ed:f0:21:66:b3:16:7c:40:fd:be:
                    e6:79:e1:82:4d:f4:51:b1:57:ec:c9:46:5e:d7:51:
                    1c:17:6d:f5:0e:6f:2c:c8:97:87:53:26:5b:2d:f9:
                    21:39:32:c4:3f:db:3c:eb:7a:e3:6d:f4:c9:ee:49:
                    a3:68:14:99:bb:cc:2a:8b:b8:88:c8:d1:4b:b8:c8:
                    38:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:69:C4:C4:46:A7:22:4E:24:2E:77:41:9B:13:95:73:3B:5E:60:41
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/AWnExEanIk4kLndBmxOVczteYEE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:5c:77:20:46:65:12:f9:43:a6:c7:b2:eb:bb:78:c2:5d:4f:
         6e:29:8f:21:b8:97:4b:d3:d4:06:ea:c9:c4:21:e3:fd:1f:86:
         87:99:7e:31:2e:69:86:7b:3a:ea:8d:54:2d:f3:89:d9:93:c7:
         df:ff:13:a3:f2:87:5a:c3:28:b1:e0:1d:97:5f:a7:0e:ac:b6:
         07:61:10:69:b5:dd:6c:80:0d:10:6d:99:79:0c:d3:9f:e6:1e:
         46:a3:d7:a7:84:3b:a6:7d:18:39:8f:ad:11:9d:87:97:e8:49:
         24:8a:96:46:ff:13:3b:69:cf:2a:50:b0:cb:1a:79:90:56:c6:
         98:a3:ac:b8:27:76:c5:9a:c0:36:2e:92:09:fb:66:02:c2:c2:
         c9:29:3b:f2:c8:03:1b:fe:be:24:de:75:da:69:fe:a7:0a:d2:
         63:e1:cc:ae:50:11:76:64:12:c2:97:cc:1b:a8:a3:29:a3:b2:
         c0:b5:e0:34:c6:28:90:01:7b:9e:af:87:eb:71:92:a9:0d:ce:
         80:b3:3d:be:5b:94:a6:bd:bb:14:6a:b2:97:86:20:bb:24:f6:
         19:bd:f8:61:eb:a6:4c:ca:27:d3:b9:e0:b7:ff:80:77:a5:df:
         fc:5e:d1:ad:f9:fa:19:5e:08:2d:5b:c9:f8:a0:29:d1:dc:16:
         1c:be:cc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org