Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_8BZVDFIuNeOdd221ELkvfVFFBI.roa
File:                     _8BZVDFIuNeOdd221ELkvfVFFBI.roa (raw, json)
Hash identifier:          bYpajJNMItgOs6WgeNu+YuWPAF6upC9oCuz2a+G/BMo=
Subject key identifier:   FF:C0:59:54:31:48:B8:D7:8E:75:DD:B6:D4:42:E4:BD:F5:45:14:12
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0866
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_8BZVDFIuNeOdd221ELkvfVFFBI.roa
Signing time:             Tue 29 Sep 2020 10:02:25 +0000
ROA not before:           Tue 29 Sep 2020 10:02:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     138915
IP address blocks:        150.116.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150 (0x866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 29 10:02:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FFC059543148B8D78E75DDB6D442E4BDF5451412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:ea:11:2f:26:cc:96:80:8f:31:66:4d:cc:
                    76:56:73:c6:ce:de:41:f8:be:e2:31:1b:62:d8:ed:
                    45:f1:d1:80:d1:e6:ca:23:57:1f:c5:6d:ed:01:8c:
                    c5:b1:a2:54:73:4f:08:b5:6e:32:6d:02:85:2f:69:
                    58:ec:0b:11:96:fd:bd:ed:32:ba:79:55:e4:3b:ec:
                    5c:64:ed:3c:35:cf:b0:25:0f:53:77:17:b3:00:39:
                    a6:15:cb:ce:20:5b:7d:b9:00:93:a7:6f:59:7f:d4:
                    96:e0:e9:fd:b3:14:1a:70:69:0b:f8:5c:85:3d:6d:
                    be:f5:65:83:ad:dd:0e:b4:40:d4:bb:52:0e:5d:26:
                    27:77:23:fa:57:7f:b2:ca:c9:8f:25:c3:9e:d8:90:
                    1b:61:8a:cb:76:b1:e1:62:2e:7c:4f:46:f1:d2:4b:
                    53:4e:26:c3:4b:1a:37:21:e4:5b:55:f7:ab:0e:62:
                    f7:a4:89:e7:23:30:cb:29:93:e5:4a:9e:db:f5:19:
                    2d:42:2c:46:9a:34:6f:e3:fa:01:2d:49:6b:fc:dd:
                    07:36:64:a8:4c:0d:f1:59:35:ae:6b:99:ac:fb:88:
                    2d:bd:bb:01:11:93:84:a4:c6:1b:4f:1a:c8:3e:3f:
                    c2:c1:79:b6:97:0e:41:5a:82:0e:1c:76:d2:ba:aa:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C0:59:54:31:48:B8:D7:8E:75:DD:B6:D4:42:E4:BD:F5:45:14:12
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_8BZVDFIuNeOdd221ELkvfVFFBI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:53:63:44:30:cf:2a:63:38:a9:b4:ed:96:56:60:a5:2d:e9:
         b9:c7:2f:ef:7b:a7:44:d4:d2:27:4b:36:95:ab:98:f0:43:27:
         da:67:51:cb:0a:b8:dd:58:15:2b:5b:1f:35:a2:e4:cf:63:bb:
         65:77:3b:2f:21:8b:ec:8d:95:2b:1c:9f:61:b9:ee:cf:b7:ec:
         a7:32:e1:d3:ff:34:ff:a3:21:c0:39:7f:01:8d:25:0b:e4:d6:
         6a:b5:03:92:4c:9c:d0:55:d4:14:48:6b:0e:a3:6d:8e:58:9a:
         69:7d:9b:f8:4e:ba:ef:8a:c1:e3:b6:48:13:02:86:35:d7:2b:
         17:ba:9b:c4:23:f1:2d:34:48:b2:d4:ab:fd:77:c6:af:0e:c5:
         f4:60:30:bc:a0:59:36:9f:53:20:95:ad:cb:37:cb:78:83:bf:
         8f:f1:07:2b:b3:eb:a1:f9:82:35:af:7f:50:e3:03:eb:a2:cb:
         63:19:d8:5a:0f:d5:cd:f8:76:80:92:9a:6c:84:25:60:c8:ac:
         51:39:90:0d:c7:96:72:a9:43:dd:e5:86:90:8f:62:00:55:39:
         d2:34:c3:ef:f0:b7:b9:9d:c8:a8:3f:9c:eb:cf:71:28:2f:51:
         5d:e6:d5:d7:87:38:aa:b6:74:fb:26:6b:c3:23:86:0f:20:e7:
         73:50:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org