Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/65yOAjIvtLB-BnkNFvQEZSqWtT8.roa
File:                     65yOAjIvtLB-BnkNFvQEZSqWtT8.roa (raw, json)
Hash identifier:          kRJ1xMYGPSoZtRYbdaHET69iCfY1bR9zCyi+/sd8LTg=
Subject key identifier:   EB:9C:8E:02:32:2F:B4:B0:7E:06:79:0D:16:F4:04:65:2A:96:B5:3F
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       077B
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/65yOAjIvtLB-BnkNFvQEZSqWtT8.roa
Signing time:             Tue 29 Sep 2020 10:04:24 +0000
ROA not before:           Tue 29 Sep 2020 10:04:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131619
IP address blocks:        103.116.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Sep 29 10:04:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EB9C8E02322FB4B07E06790D16F404652A96B53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:00:4f:6d:c9:5f:53:9e:9d:f0:31:fa:3c:
                    69:a8:fb:e4:f3:ec:7f:21:27:3c:5d:27:fd:c4:3f:
                    5f:08:fc:85:48:bb:41:fc:46:5f:15:b6:75:2a:17:
                    fd:f3:d3:24:35:e7:1e:fc:e2:3a:4e:d3:ba:05:ec:
                    96:a8:45:ea:65:c7:87:bb:92:e4:a4:45:b8:b5:93:
                    44:3e:aa:84:40:41:6d:52:e4:26:b5:54:cb:14:fe:
                    54:53:0f:26:18:54:80:58:f9:36:dc:b2:c6:9d:d6:
                    5f:f2:2d:2c:b4:d5:fb:ba:1b:bf:f1:f8:dd:c0:ac:
                    5c:21:02:d1:74:06:3d:83:46:07:ae:2e:b1:eb:f9:
                    e2:35:23:ae:56:d9:99:ea:2a:74:22:c3:8e:f6:df:
                    93:fa:65:6c:89:7a:5a:20:b8:c8:ef:b7:76:16:06:
                    c8:32:c1:29:b3:18:ff:62:98:38:c2:ba:42:9b:f4:
                    f4:47:ba:71:79:be:eb:bc:86:21:fd:6e:5f:9d:fc:
                    30:cd:ac:a3:ce:8a:ae:5a:3d:c4:e9:b8:14:b8:de:
                    8c:3b:ca:f7:33:58:7f:0e:08:8f:b5:3e:86:42:21:
                    0e:89:0f:35:2b:16:ef:6d:49:23:fd:fd:6a:34:39:
                    d7:8e:1c:1d:bf:9e:d0:19:80:09:5f:3c:a2:e9:f9:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9C:8E:02:32:2F:B4:B0:7E:06:79:0D:16:F4:04:65:2A:96:B5:3F
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/65yOAjIvtLB-BnkNFvQEZSqWtT8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:b7:06:d5:ca:28:c0:69:0f:47:35:70:5a:e4:05:99:e8:02:
         1e:54:e5:08:46:54:c7:4d:8c:1c:b7:d9:67:f1:e3:7e:04:f9:
         70:53:36:5f:71:0e:1d:e1:b4:01:0e:9b:88:d8:2d:41:f5:17:
         25:72:39:17:2e:a1:1e:11:0b:70:96:c9:75:2c:dc:9d:48:03:
         92:3c:56:43:e4:c6:04:2a:e4:cf:e6:6e:60:73:4e:5c:38:2a:
         bc:dd:2d:9e:c6:62:a4:1a:9f:2c:54:aa:27:c0:00:0b:fd:9e:
         93:12:af:b2:af:6f:d6:3a:75:7f:e8:02:3f:37:c6:f2:10:23:
         f4:f1:fd:d9:e1:7c:2a:4a:00:03:8f:51:5d:f7:8e:bd:77:4b:
         4c:44:42:4f:93:73:7f:64:6f:11:55:18:c2:82:b6:f2:3e:c3:
         a0:5e:3c:62:61:b9:ee:94:a1:e7:d2:01:27:f8:b8:5f:4a:19:
         d6:a6:52:26:fa:b3:8e:1a:ab:28:14:db:95:af:9d:38:4c:4e:
         c5:8a:62:77:38:33:62:9a:21:6c:e0:3f:25:54:f4:17:58:f4:
         72:cb:95:d4:ba:c7:8b:94:93:a2:36:60:0e:f9:83:43:73:d6:
         f1:8c:c9:49:90:e4:53:53:e9:a5:d3:54:f5:ce:87:12:37:cd:
         ab:ff:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org