Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/-BTnKmS8vwjcA_vNSC3quMIIW1M.roa
File:                     -BTnKmS8vwjcA_vNSC3quMIIW1M.roa (raw, json)
Hash identifier:          Z3uleERweMKBC9PoYOknW++s7hiVDmD0v3Xrm9K5vZk=
Subject key identifier:   F8:14:E7:2A:64:BC:BF:08:DC:03:FB:CD:48:2D:EA:B8:C2:08:5B:53
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       0779
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/-BTnKmS8vwjcA_vNSC3quMIIW1M.roa
Signing time:             Tue 29 Sep 2020 10:04:23 +0000
ROA not before:           Tue 29 Sep 2020 10:04:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     26415
IP address blocks:        103.116.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Sep 29 10:04:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F814E72A64BCBF08DC03FBCD482DEAB8C2085B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:a2:a8:8c:f3:fb:db:a4:63:bb:32:bd:26:
                    c4:da:af:72:73:ae:1c:fc:10:58:6f:03:be:19:61:
                    13:80:df:a7:d4:e7:88:80:f1:eb:78:86:f0:3f:ac:
                    eb:5e:bb:06:c7:f1:2a:a2:74:e5:65:b7:5e:93:28:
                    e8:96:7e:f2:ac:8f:c8:74:a1:e7:cd:95:6d:81:2d:
                    ee:c1:a8:27:0a:0b:4a:7e:d4:0e:31:8a:70:72:27:
                    f0:8e:3e:8a:fb:dc:93:3f:dc:fd:7a:04:69:73:e5:
                    39:05:17:fb:d9:d0:26:b4:ec:d6:43:4c:d6:a9:48:
                    95:c3:6e:c7:91:8d:81:94:5c:1b:70:b8:d8:2d:da:
                    5f:e1:f0:3e:97:7a:70:06:69:d7:a9:20:4d:28:a0:
                    ba:f4:5f:84:b6:73:ec:a9:a4:4b:ff:c7:0a:b8:64:
                    c6:5f:a3:0f:d5:64:5f:d5:57:ac:e2:ff:37:0f:a7:
                    ea:fd:8b:9e:db:58:83:0a:38:47:42:15:aa:8c:e7:
                    c6:f4:8d:60:ff:0d:b3:8d:ce:7d:c0:96:03:f1:97:
                    28:06:c2:a5:06:29:c4:90:fb:be:a3:0d:d8:8a:5a:
                    3f:55:2d:54:ca:ae:e2:c9:c1:56:3a:3f:6f:47:fb:
                    18:de:c1:9f:15:aa:c9:d0:a5:76:47:2c:17:f1:af:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:14:E7:2A:64:BC:BF:08:DC:03:FB:CD:48:2D:EA:B8:C2:08:5B:53
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/-BTnKmS8vwjcA_vNSC3quMIIW1M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:e6:50:c5:18:4b:a6:96:e0:94:a9:2f:7f:cb:1b:da:bd:85:
         5c:cd:6e:dd:8a:61:f2:b7:4d:a9:98:31:60:3b:b1:54:0d:54:
         5b:f7:ca:98:e7:b3:5b:e1:2a:52:26:43:15:85:e1:5f:b1:01:
         1c:ad:71:00:3a:9d:8a:48:40:31:82:c5:51:4a:85:be:be:a6:
         4e:4e:f0:95:8b:1c:89:1e:61:87:72:ab:a7:87:91:54:9a:93:
         84:55:77:c3:c2:3b:68:6a:b5:e3:8f:5f:de:9f:47:48:4e:fd:
         37:c5:90:38:05:75:a0:eb:44:35:ef:c5:da:1b:14:db:d0:19:
         c8:09:8e:89:cb:af:50:a7:82:79:0a:f4:7c:32:7e:ad:1b:83:
         e4:f1:af:4e:29:bd:ce:b0:6f:c7:ea:92:9d:5c:7c:87:db:c3:
         10:f5:01:d1:7e:04:8f:37:6f:d6:53:de:5d:c5:e8:ff:63:5d:
         2c:e8:23:b4:77:fc:45:a5:c9:2f:a0:0a:e5:72:53:3c:99:a4:
         51:22:15:f1:ff:40:39:c3:5b:be:64:33:eb:a8:f3:23:ae:70:
         94:d8:ad:f0:91:24:7e:92:3e:57:3c:b3:d3:40:59:5a:61:89:
         2d:94:8d:d5:92:dc:43:b9:73:21:86:37:68:c5:80:67:07:8c:
         45:5b:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org