Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/giRsJvoZsOOI-JRI2D7OJ8rI7Ck.roa
File:                     giRsJvoZsOOI-JRI2D7OJ8rI7Ck.roa (raw, json)
Hash identifier:          fRrhP/GF9mcWGsRjV7wXsWiyE1UEC0iO2J+kNblCLRY=
Subject key identifier:   82:24:6C:26:FA:19:B0:E3:88:F8:94:48:D8:3E:CE:27:CA:C8:EC:29
Certificate issuer:       /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial:       0E7E
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/giRsJvoZsOOI-JRI2D7OJ8rI7Ck.roa
Signing time:             Sun 07 Feb 2021 13:07:35 +0000
ROA not before:           Sun 07 Feb 2021 13:07:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     63199
IP address blocks:        103.124.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3710 (0xe7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
        Validity
            Not Before: Feb  7 13:07:35 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=82246C26FA19B0E388F89448D83ECE27CAC8EC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:19:15:7d:e6:e5:f2:bd:85:c4:b6:c8:8e:
                    3d:1d:c6:b0:6e:10:b9:22:29:9a:37:8c:25:a3:56:
                    c8:40:44:d2:fc:90:3a:9d:1b:d4:36:30:a7:45:52:
                    9d:38:48:cb:47:00:b9:25:52:bb:b1:60:bf:92:08:
                    dd:f2:0a:2e:d0:39:63:1a:d8:7d:f5:ba:2f:1a:de:
                    08:ef:c3:7e:1c:84:33:49:94:48:b1:80:07:b5:af:
                    ff:dd:e7:da:6e:ae:31:eb:02:a0:7c:ca:a0:d6:1f:
                    d5:da:f0:93:7b:21:40:d8:e6:21:b8:a4:58:68:ed:
                    55:7e:06:df:b7:66:99:03:fc:8e:8b:05:ef:8d:d3:
                    be:e9:e1:e9:42:75:08:3e:12:ee:fe:e5:1d:1a:50:
                    88:4b:c4:7f:78:a5:c9:42:8f:d5:9b:3b:5a:c1:46:
                    2b:4a:41:4a:a6:b4:af:66:c9:a5:02:8f:2e:66:94:
                    0e:66:9e:b2:eb:d6:d1:a3:6e:e8:e8:d2:3b:e7:fa:
                    29:1d:4f:30:2e:fc:10:1c:89:7a:18:c4:a9:64:b6:
                    12:d2:ae:02:80:10:7c:29:0a:de:a6:89:47:73:b3:
                    c7:90:7c:c7:26:70:84:d1:5a:b1:93:3b:70:5a:6e:
                    84:65:dc:db:b2:f7:a6:c8:ba:c8:2e:82:17:05:b3:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:24:6C:26:FA:19:B0:E3:88:F8:94:48:D8:3E:CE:27:CA:C8:EC:29
            X509v3 Authority Key Identifier:
                keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/giRsJvoZsOOI-JRI2D7OJ8rI7Ck.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:40:98:b1:3a:d0:d9:3a:10:72:f8:1f:82:98:19:b4:41:24:
         b2:8d:35:77:a7:59:2f:c9:37:6b:bf:7d:69:15:87:3e:b3:78:
         fe:a8:c1:b7:b7:31:ae:24:ac:02:af:d2:1f:c8:40:5f:44:12:
         3b:e8:c4:f2:44:a1:aa:43:67:5e:9a:69:82:59:83:d1:2f:75:
         30:37:7a:14:f7:6a:12:3b:fa:72:57:9d:a7:64:96:df:24:b7:
         fe:22:00:50:66:ad:0f:f4:aa:fa:07:cf:cd:fb:01:99:f6:8d:
         8a:48:c9:75:1d:5e:13:a2:09:b0:36:73:2e:e6:b9:23:52:91:
         b1:10:da:66:1c:d2:a3:c0:0a:36:6a:27:5b:60:64:2d:f6:8f:
         18:9c:00:33:b1:40:9b:9e:90:cb:9d:58:b6:99:46:25:47:dd:
         cc:3b:73:2a:bd:46:46:00:89:5d:c3:f3:66:34:73:24:74:33:
         76:9e:b8:3d:45:d1:7d:db:31:35:24:a9:b4:33:b8:f2:01:07:
         37:d3:0a:1f:0b:44:15:a6:0a:f5:50:50:18:d4:95:5c:53:60:
         5b:10:59:21:e9:a8:4f:13:e5:ea:dd:3e:29:46:43:2a:e9:f1:
         a2:9a:4b:14:85:27:61:5e:3f:ae:f2:5c:02:e4:6f:c6:02:7a:
         43:8e:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org