Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/2RLaLGnNceC5qyujfWtuf5m6qR8.roa
File:                     2RLaLGnNceC5qyujfWtuf5m6qR8.roa (raw, json)
Hash identifier:          uvFJH1HWPi9T/YoZvQYY3vzvGO4t+fOGpY0iZMrm4Qw=
Subject key identifier:   D9:12:DA:2C:69:CD:71:E0:B9:AB:2B:A3:7D:6B:6E:7F:99:BA:A9:1F
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       096A
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/2RLaLGnNceC5qyujfWtuf5m6qR8.roa
Signing time:             Wed 29 Sep 2021 02:40:25 +0000
ROA not before:           Wed 29 Sep 2021 02:40:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131619
IP address blocks:        103.116.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2410 (0x96a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Sep 29 02:40:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D912DA2C69CD71E0B9AB2BA37D6B6E7F99BAA91F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:9a:a7:40:1c:9e:ad:4f:7c:97:37:d6:c9:
                    33:75:1d:5d:03:18:2d:a9:a6:ce:72:47:d1:c2:d7:
                    35:cf:aa:8d:af:1b:9d:12:d9:7b:8b:1c:d8:14:78:
                    08:0d:07:6c:b6:97:bb:c0:9a:41:83:8d:57:ae:18:
                    55:a2:f8:ce:84:a3:d2:31:d5:4f:6a:60:a8:99:d0:
                    c8:9d:86:cf:e9:d4:e7:9c:8a:90:65:d9:1e:47:34:
                    ce:70:4c:0f:35:00:a9:d7:2b:23:57:d3:71:af:9c:
                    06:10:7f:15:dd:b0:67:18:14:08:43:a4:6d:38:19:
                    56:47:34:1d:65:10:b8:63:86:b3:5b:a4:c8:49:65:
                    ba:5c:e0:4c:dc:80:5c:e5:e6:ac:f4:eb:d3:21:c5:
                    21:fa:1a:14:bc:9b:2e:c6:68:94:c9:d9:a8:08:6c:
                    82:41:c4:dd:d4:f3:b1:b8:59:4f:7d:60:b5:2d:bc:
                    0d:a7:04:ff:c0:77:f5:9d:9b:bb:3c:43:4e:bb:df:
                    ca:be:ca:19:03:c3:9b:15:23:9e:31:12:2e:35:f8:
                    f7:06:6b:af:67:15:a6:f6:4f:09:84:e4:5e:e8:2f:
                    99:4b:4c:41:2f:ae:04:66:6a:46:ed:78:ad:3e:ce:
                    9d:74:6e:d7:0b:04:f0:8e:79:bc:6f:f8:48:7f:8b:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:12:DA:2C:69:CD:71:E0:B9:AB:2B:A3:7D:6B:6E:7F:99:BA:A9:1F
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/2RLaLGnNceC5qyujfWtuf5m6qR8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:20:1a:b8:45:46:8e:d0:6d:fc:bf:ff:6b:9a:04:ca:4b:dc:
         40:fd:b0:4e:0d:27:ed:b8:d8:2f:60:f7:48:02:36:7d:7b:2b:
         f8:82:34:62:99:8c:05:63:47:a0:0a:3d:f3:75:1d:ff:24:ba:
         bc:3b:32:ce:f8:a8:cd:7a:4e:07:cf:5e:17:01:12:ca:cf:49:
         0f:2c:62:49:f4:9c:7d:3a:0f:d9:5c:0c:57:2c:21:27:a5:5f:
         15:62:d1:65:9c:38:de:95:2b:ed:78:37:39:47:95:68:da:ad:
         0d:e4:67:a4:07:1f:52:53:2c:03:ea:ff:d9:97:88:9c:22:4b:
         54:d8:f3:ba:1c:f9:ed:22:0f:e2:bf:54:3f:5a:fe:94:b1:6b:
         8b:0d:e8:0e:aa:b2:9c:81:0b:f0:06:af:37:91:3c:8d:91:85:
         94:e3:d0:51:36:19:53:8f:34:fb:76:1f:c9:db:21:0a:1b:fa:
         57:b3:fe:19:61:04:4a:67:8c:ce:ed:cb:a7:61:e1:dc:72:15:
         b8:cc:24:37:ee:5a:38:be:c9:b1:e9:9f:6d:9e:ac:63:a7:65:
         37:9d:91:16:a4:35:7b:60:e3:75:3f:5b:95:17:41:d3:c8:47:
         d0:6f:b4:27:d3:aa:f3:c3:24:2d:37:73:80:04:a1:15:09:ff:
         6a:f0:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org