Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/MMbSe76BdcbGsKdUoe_iV4J7MLo.roa
File:                     MMbSe76BdcbGsKdUoe_iV4J7MLo.roa (raw, json)
Hash identifier:          /3W9frx1OTWVCA0nDJ6u4gtfEASzkhE5BpMXkQor1p4=
Subject key identifier:   30:C6:D2:7B:BE:81:75:C6:C6:B0:A7:54:A1:EF:E2:57:82:7B:30:BA
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       0190
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/MMbSe76BdcbGsKdUoe_iV4J7MLo.roa
Signing time:             Mon 09 Jan 2023 01:11:31 +0000
ROA not before:           Mon 09 Jan 2023 01:11:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     138997
IP address blocks:        2407:a0c0:10::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Jan  9 01:11:31 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=30C6D27BBE8175C6C6B0A754A1EFE257827B30BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:c8:f6:77:a5:54:cc:53:61:d4:b0:4a:fc:
                    91:19:dc:15:1f:75:3d:70:7a:90:ca:5e:c4:44:de:
                    25:71:1b:f9:4f:fe:83:5f:88:c2:b0:02:69:9a:42:
                    c1:cc:80:32:84:28:49:26:bc:37:dd:fd:53:74:3a:
                    4a:93:1f:9f:91:49:bc:55:3b:bc:9c:3b:b8:8f:c8:
                    4b:d1:5f:a5:ad:cd:fd:fe:dd:38:fe:5a:83:83:fb:
                    e4:7f:eb:6e:42:28:fb:f3:4b:55:b1:e0:a2:91:9e:
                    9b:bc:d7:b4:26:25:b3:b5:22:b8:26:c8:f2:7b:e0:
                    43:1f:8e:69:36:7b:d4:48:64:1f:fb:bb:14:c2:bd:
                    e5:2c:d7:51:f7:9e:09:25:b8:34:76:74:61:7f:ab:
                    e0:58:fa:a1:fd:62:ea:38:7e:9f:ec:ad:23:a5:23:
                    b8:c5:1a:86:71:0e:e3:64:35:91:c2:fc:02:78:14:
                    64:93:52:bc:06:1e:6a:bf:12:9b:df:d6:c3:e7:95:
                    6e:78:4c:fd:23:e4:6f:f8:71:74:45:89:ea:e3:c1:
                    64:bb:85:a0:2f:1e:a9:ac:ac:db:99:bd:b2:03:43:
                    b8:37:58:b1:65:1e:e4:29:a5:37:af:bd:d4:05:dc:
                    94:9f:e1:bf:79:b4:ed:26:45:e7:be:10:98:be:80:
                    a0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C6:D2:7B:BE:81:75:C6:C6:B0:A7:54:A1:EF:E2:57:82:7B:30:BA
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/MMbSe76BdcbGsKdUoe_iV4J7MLo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a0c0:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:38:72:7b:09:83:48:63:3f:0a:73:08:2b:12:5e:23:49:dd:
         dd:8b:eb:75:93:aa:59:cc:88:e5:ae:aa:9f:36:0c:42:8c:8b:
         a0:de:a7:32:a4:31:da:bf:25:32:2b:51:e9:47:25:3a:3a:af:
         ff:ac:5c:51:93:c3:65:f3:b0:25:09:7e:6e:a4:57:42:18:92:
         e6:56:65:8f:c1:d9:f5:72:9a:3c:25:0c:48:5e:a8:10:00:0c:
         6a:6a:3c:34:b0:64:ca:37:62:a8:60:ae:f2:80:93:fd:50:63:
         33:37:f4:6d:21:db:04:db:c6:fd:34:65:fb:67:d4:2f:9d:a0:
         95:cf:ef:cd:c0:68:23:0d:3a:af:a6:5b:82:84:df:23:06:0e:
         09:20:2d:9a:c6:4c:2b:eb:ed:2b:78:db:2b:8a:4b:5d:1b:7b:
         bc:87:b6:6f:b5:30:79:ef:9a:c5:af:70:89:6f:b7:29:9a:b0:
         b9:a5:66:4c:b2:7c:a1:cc:8b:75:60:3a:6e:4b:fb:e2:80:3d:
         a4:33:ee:1f:05:8c:93:43:6a:6e:12:63:f8:67:27:a5:73:2c:
         da:a0:3e:3d:9c:7f:ad:f3:ba:95:cc:73:ef:f1:78:8e:95:c4:
         ec:c3:b9:f0:87:5a:7d:c9:84:a0:ea:d8:54:96:89:30:a3:04:
         e0:e3:1e:6e
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzNG
QzExNkEzQ0NCMTA1QUI1MERBNDE3Njc5QjFGOUM3MEE0QkQ5NzAeFw0yMzAxMDkw
MTExMzFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMwQzZEMjdCQkU4MTc1
QzZDNkIwQTc1NEExRUZFMjU3ODI3QjMwQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6K8j2d6VUzFNh1LBK/JEZ3BUfdT1wepDKXsRE3iVxG/lP/oNf
iMKwAmmaQsHMgDKEKEkmvDfd/VN0OkqTH5+RSbxVO7ycO7iPyEvRX6Wtzf3+3Tj+
WoOD++R/625CKPvzS1Wx4KKRnpu817QmJbO1IrgmyPJ74EMfjmk2e9RIZB/7uxTC
veUs11H3ngkluDR2dGF/q+BY+qH9Yuo4fp/srSOlI7jFGoZxDuNkNZHC/AJ4FGST
UrwGHmq/Epvf1sPnlW54TP0j5G/4cXRFierjwWS7haAvHqmsrNuZvbIDQ7g3WLFl
HuQppTevvdQF3JSf4b95tO0mRee+EJi+gKCpAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUMMbSe76BdcbGsKdUoe/iV4J7MLowHwYDVR0jBBgwFoAUw/wRajzLEFq1DaQX
Z5sfnHCkvZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV09MRk5F
VC93X3dSYWp6TEVGcTFEYVFYWjVzZm5IQ2t2WmMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3dfd1JhanpMRUZxMURhUVhaNXNmbkhDa3ZaYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1dPTEZORVQvTU1iU2U3NkJkY2JHc0tk
VW9lX2lWNEo3TUxvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BCQHoMAAEDANBgkqhkiG9w0BAQsFAAOCAQEAajhyewmDSGM/CnMIKxJeI0nd3Yvr
dZOqWcyI5a6qnzYMQoyLoN6nMqQx2r8lMitR6UclOjqv/6xcUZPDZfOwJQl+bqRX
QhiS5lZlj8HZ9XKaPCUMSF6oEAAMamo8NLBkyjdiqGCu8oCT/VBjMzf0bSHbBNvG
/TRl+2fUL52glc/vzcBoIw06r6ZbgoTfIwYOCSAtmsZMK+vtK3jbK4pLXRt7vIe2
b7Uwee+axa9wiW+3KZqwuaVmTLJ8ocyLdWA6bkv74oA9pDPuHwWMk0NqbhJj+Gcn
pXMs2qA+PZx/rfO6lcxz7/F4jpXE7MO58IdafcmEoOrYVJaJMKME4OMebg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org