Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/BH-_bpG2UFjgVaMCOhqyGdF1yhI.roa
File:                     BH-_bpG2UFjgVaMCOhqyGdF1yhI.roa (raw, json)
Hash identifier:          pJ8t5aR3ooVtGyu7gneT2W9Of/UaoEee3IZqEK4BD1A=
Subject key identifier:   04:7F:BF:6E:91:B6:50:58:E0:55:A3:02:3A:1A:B2:19:D1:75:CA:12
Certificate issuer:       /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F
Certificate serial:       105A
Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/BH-_bpG2UFjgVaMCOhqyGdF1yhI.roa
Signing time:             Thu 15 Sep 2022 02:49:40 +0000
ROA not before:           Thu 15 Sep 2022 02:49:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131663
IP address blocks:        103.130.100.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4186 (0x105a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F
        Validity
            Not Before: Sep 15 02:49:40 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=047FBF6E91B65058E055A3023A1AB219D175CA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:3a:c2:8a:1c:3c:df:6f:07:4b:51:d8:30:
                    7c:84:e9:a2:b6:40:df:3b:d8:c7:1c:0b:43:e1:11:
                    48:33:20:cd:2e:c8:1d:67:bc:50:1b:da:d4:3e:ef:
                    1c:dd:54:e9:43:15:2e:e4:16:49:3e:11:4d:b3:cc:
                    43:90:1f:f8:10:a8:be:5f:f5:74:b2:09:ea:29:ac:
                    b6:a5:c9:fe:1f:fb:26:27:c3:4d:68:ff:d0:84:52:
                    84:be:09:54:b2:7b:84:11:d7:ff:cb:37:d0:be:7b:
                    d8:7c:95:c3:a0:b5:ef:28:2a:eb:56:3a:a2:c9:7b:
                    66:79:5b:83:19:13:b9:e9:9a:85:c3:f3:9e:a1:93:
                    5d:47:bd:0f:eb:44:67:8c:45:24:06:61:62:b3:d6:
                    9d:4c:ab:66:52:f5:8f:93:c1:e0:b0:4a:43:9d:4a:
                    cf:38:40:ca:bb:45:7a:33:3b:50:6e:11:d1:77:94:
                    6b:e2:fe:93:51:0b:79:da:4f:0f:38:77:a7:38:26:
                    4f:5b:a0:2c:57:e6:39:dc:70:bc:ce:f7:90:31:c8:
                    ce:ad:78:3d:c2:91:a4:1b:5e:4c:01:9c:81:18:d5:
                    f5:94:52:1f:6f:7b:6e:12:7a:08:c9:c6:80:b6:97:
                    60:cb:3e:7d:36:74:bb:7b:95:04:7d:d5:02:85:11:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7F:BF:6E:91:B6:50:58:E0:55:A3:02:3A:1A:B2:19:D1:75:CA:12
            X509v3 Authority Key Identifier:
                keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/BH-_bpG2UFjgVaMCOhqyGdF1yhI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:3f:7d:88:fe:d8:64:2d:6f:da:a2:e3:ec:dc:ba:c8:2b:c1:
         7f:49:13:e8:64:9e:f4:d4:a2:f3:91:e6:93:be:87:9f:f0:f9:
         8c:bc:4f:70:ab:64:6e:bf:d6:d8:57:20:70:23:c1:cb:b6:02:
         6d:84:77:e9:1e:3c:7f:11:50:c8:f3:b9:f4:67:6f:ae:07:10:
         c6:04:f3:80:26:05:e6:51:7c:1d:09:64:75:5d:1f:69:ff:1a:
         13:9f:bb:10:63:6a:9b:fa:8e:d5:7b:ec:2e:c4:ab:8a:ec:63:
         5a:2a:d0:bd:63:1d:14:6f:f4:b4:f4:18:80:6b:bc:d2:36:d4:
         75:d2:e3:ef:d2:02:25:b6:95:53:7e:71:95:04:75:ed:65:d9:
         df:06:12:71:a7:53:ec:13:58:9e:66:73:40:f8:ab:75:4d:17:
         9c:1d:7a:08:25:db:69:af:a3:6d:31:65:76:78:fd:6f:42:82:
         a9:e4:4b:3a:05:ba:ca:2b:09:f7:43:cf:1a:b8:46:b3:70:02:
         13:8c:e9:ec:c9:ca:e4:5b:2c:73:f5:89:97:6c:c2:44:f9:dc:
         26:5f:ec:a2:de:46:7a:b8:d4:40:a9:60:d4:f4:5f:fa:27:ba:
         d8:19:e2:11:aa:5e:dd:85:ee:53:d3:07:f2:0d:e7:73:77:58:
         c7:55:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org