Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/2ofZn56S930MVxnl1YpWlMy0TzI.roa
File:                     2ofZn56S930MVxnl1YpWlMy0TzI.roa (raw, json)
Hash identifier:          6UkhKWGvNa5UMsdjjGoh7gZfhr2CDt0mBqbfVm/7kx4=
Subject key identifier:   DA:87:D9:9F:9E:92:F7:7D:0C:57:19:E5:D5:8A:56:94:CC:B4:4F:32
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       096B
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/2ofZn56S930MVxnl1YpWlMy0TzI.roa
Signing time:             Wed 29 Sep 2021 02:40:25 +0000
ROA not before:           Wed 29 Sep 2021 02:40:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131619
IP address blocks:        103.116.96.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2411 (0x96b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Sep 29 02:40:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DA87D99F9E92F77D0C5719E5D58A5694CCB44F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:3a:f9:71:1c:2d:18:e0:c9:1a:35:10:56:80:
                    b3:8e:0a:fa:9f:23:61:90:7a:28:99:0c:cd:96:f2:
                    76:66:3d:72:f2:ed:ce:65:62:15:ac:db:ea:be:bf:
                    33:cb:40:97:cd:59:c4:e8:59:73:bf:96:2b:21:06:
                    ec:8a:aa:6c:00:68:5e:91:5a:3b:cf:71:17:19:20:
                    1c:cb:fc:db:6c:d5:ff:b2:a0:a7:53:8d:75:4c:15:
                    6f:2d:31:ed:66:35:f9:ee:c2:01:14:d4:97:07:a4:
                    df:a8:6d:ce:e3:21:d1:87:9c:b7:16:23:93:53:9c:
                    a9:4d:d2:9e:a0:73:d3:d5:c0:69:58:4b:fe:2a:9a:
                    24:f9:d9:06:4c:70:3f:ef:fb:3a:67:67:b9:cb:2d:
                    14:c4:74:80:6f:3b:1f:f6:37:b7:1f:cf:0b:3d:be:
                    12:af:44:41:78:ca:78:ec:7c:96:0b:26:0f:8f:54:
                    b1:e1:c4:6b:bb:9e:b5:6a:39:4b:70:fc:98:fd:6f:
                    fe:ce:9e:8b:b0:77:b2:d4:43:a1:7d:13:fa:70:fa:
                    59:27:68:c7:b4:56:20:95:1f:3c:ca:96:a4:fd:4b:
                    3a:77:ee:3b:79:0d:e0:9a:cb:82:1a:b4:84:a5:5f:
                    be:64:50:05:25:75:bc:93:81:55:92:97:98:ff:ca:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:87:D9:9F:9E:92:F7:7D:0C:57:19:E5:D5:8A:56:94:CC:B4:4F:32
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/2ofZn56S930MVxnl1YpWlMy0TzI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:32:b5:9c:30:dc:02:f0:b3:93:a7:89:52:ca:c8:fd:19:cd:
         4a:7b:67:db:2d:07:d8:c5:43:23:3d:b0:79:9c:90:40:af:46:
         ff:ea:d8:9f:f7:d3:77:9b:b4:6d:7e:58:cd:2b:98:08:12:55:
         ae:cd:38:2c:33:d4:ef:12:ac:b3:5a:bc:83:79:97:26:c2:8c:
         fd:3d:33:31:3a:4a:6c:1a:83:73:68:a9:ee:bd:c4:9f:8f:f2:
         7a:0c:01:8d:d2:0a:fd:c8:38:81:f5:c7:f4:92:6c:06:15:bc:
         be:31:fd:b1:b9:34:c6:6a:5b:70:52:89:3f:5b:45:ab:e7:d7:
         49:9e:0a:ce:18:5d:ea:5a:6b:10:19:57:5d:e4:e2:52:ee:ca:
         d8:45:ce:eb:06:be:45:7c:56:47:55:e9:15:88:44:d4:80:e8:
         15:e2:af:61:2d:d1:0b:85:de:86:46:76:6b:38:97:12:56:af:
         39:21:ed:31:26:c5:32:cf:67:23:59:2d:c8:5c:cc:47:47:a2:
         81:07:ab:d6:65:fb:51:e4:04:c2:11:18:68:c1:2c:7c:ce:3d:
         3e:81:ad:af:af:28:48:cd:52:50:64:61:7e:a1:9e:67:83:4e:
         06:6b:44:1c:36:13:cc:e8:c0:7d:21:09:73:17:24:c2:db:00:
         05:ab:91:03
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCWswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw
QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yMTA5Mjkw
MjQwMjVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKERBODdEOTlGOUU5MkY3
N0QwQzU3MTlFNUQ1OEE1Njk0Q0NCNDRGMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD6OvlxHC0Y4MkaNRBWgLOOCvqfI2GQeiiZDM2W8nZmPXLy7c5l
YhWs2+q+vzPLQJfNWcToWXO/lishBuyKqmwAaF6RWjvPcRcZIBzL/Nts1f+yoKdT
jXVMFW8tMe1mNfnuwgEU1JcHpN+obc7jIdGHnLcWI5NTnKlN0p6gc9PVwGlYS/4q
miT52QZMcD/v+zpnZ7nLLRTEdIBvOx/2N7cfzws9vhKvREF4ynjsfJYLJg+PVLHh
xGu7nrVqOUtw/Jj9b/7Onouwd7LUQ6F9E/pw+lknaMe0ViCVHzzKlqT9Szp37jt5
DeCay4IatISlX75kUAUldbyTgVWSl5j/ysyrAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU2ofZn56S930MVxnl1YpWlMy0TzIwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K
NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U
RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy8yb2ZabjU2UzkzME1W
eG5sMVlwV2xNeTBUekkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ3RgMA0GCSqGSIb3DQEBCwUAA4IBAQAIMrWcMNwC8LOTp4lSysj9Gc1Ke2fb
LQfYxUMjPbB5nJBAr0b/6tif99N3m7RtfljNK5gIElWuzTgsM9TvEqyzWryDeZcm
woz9PTMxOkpsGoNzaKnuvcSfj/J6DAGN0gr9yDiB9cf0kmwGFby+Mf2xuTTGaltw
Uok/W0Wr59dJngrOGF3qWmsQGVdd5OJS7srYRc7rBr5FfFZHVekViETUgOgV4q9h
LdELhd6GRnZrOJcSVq85Ie0xJsUyz2cjWS3IXMxHR6KBB6vWZftR5ATCERhowSx8
zj0+ga2vryhIzVJQZGF+oZ5ng04Ga0QcNhPM6MB9IQlzFyTC2wAFq5ED
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:49 2025 by rpki-client