Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/A_kpFD5b-VEElgNgsLvSzUyR4MM.roa
File:                     A_kpFD5b-VEElgNgsLvSzUyR4MM.roa (raw, json)
Hash identifier:          ydX3O8+ttZJz2KVWKhKWRlUGp2hktD34NQ8mmhBrKd0=
Subject key identifier:   03:F9:29:14:3E:5B:F9:51:04:96:03:60:B0:BB:D2:CD:4C:91:E0:C3
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       08C0
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/A_kpFD5b-VEElgNgsLvSzUyR4MM.roa
Signing time:             Sun 07 Feb 2021 11:46:12 +0000
ROA not before:           Sun 07 Feb 2021 11:46:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131619
IP address blocks:        103.116.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Feb  7 11:46:12 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=03F929143E5BF95104960360B0BBD2CD4C91E0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9e:b6:69:51:93:fc:47:b4:fc:d2:35:b2:94:
                    1a:7c:89:19:7b:5b:18:15:3d:b8:f3:85:b4:81:05:
                    d2:c0:ad:00:53:63:94:d3:ae:ae:22:ec:63:dd:26:
                    c9:45:95:c9:83:c9:db:c9:2c:87:b5:29:0a:e7:2e:
                    7d:63:fd:ca:4c:fe:f4:8b:e7:a9:0f:a0:4a:22:6b:
                    fb:78:03:be:f0:0c:3a:9f:97:02:e6:73:6f:99:28:
                    1d:19:1c:97:11:8f:22:bc:64:09:51:55:45:38:8b:
                    7e:d4:95:24:dd:b7:27:cd:2d:b2:11:d0:1d:d6:73:
                    32:1d:5d:7e:e9:ee:1d:48:58:5a:63:2c:c7:fe:42:
                    bf:5f:55:da:6b:f8:ef:44:0c:fd:af:50:f1:40:76:
                    aa:c8:fe:cd:2d:7f:a9:5b:5b:60:e1:ce:ca:75:ff:
                    ad:66:9e:53:c5:24:2a:5d:8f:39:5d:f4:42:1f:23:
                    22:76:98:7e:71:40:ba:d4:64:9e:88:cf:63:9d:5e:
                    67:b3:69:68:66:de:61:74:f4:a0:5e:46:d9:9a:42:
                    e0:5c:02:c8:67:34:8b:fb:a5:d6:ad:df:a1:c8:1c:
                    9f:a6:5a:c0:35:7d:a2:86:1b:08:d8:49:6b:fb:43:
                    ce:10:ce:2c:c2:60:cd:50:39:e2:d7:36:bb:d0:30:
                    47:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F9:29:14:3E:5B:F9:51:04:96:03:60:B0:BB:D2:CD:4C:91:E0:C3
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/A_kpFD5b-VEElgNgsLvSzUyR4MM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:6f:d5:91:9e:ba:1c:d5:4c:ce:7a:a5:96:4c:54:f6:f2:24:
         91:c6:ba:62:28:63:dc:92:0a:ba:d0:6b:4f:f9:89:fe:fb:1e:
         24:ae:02:b8:6f:fb:78:3c:71:96:ff:66:ce:89:35:87:0b:bb:
         f3:d6:9a:2c:b6:38:a7:bf:57:5b:4b:b1:67:77:df:36:a4:9c:
         5c:51:48:ee:5d:0c:f6:f0:98:ab:21:be:59:5c:36:c7:75:9c:
         5f:cf:13:3e:cd:fa:a5:e6:f3:cc:d7:77:d3:1d:55:0a:70:0f:
         11:b4:4d:df:cb:0f:77:13:a4:24:11:a3:c1:b2:81:64:fd:a8:
         9e:56:cb:39:4d:cd:b5:40:7d:82:df:44:ea:5c:c5:6d:0e:21:
         da:e5:c2:d2:1a:85:40:53:b2:f6:d5:27:77:b8:c2:e6:43:41:
         60:7c:8e:ff:81:51:cf:4b:0f:b3:13:0b:2c:a0:bc:8b:76:f0:
         e3:51:2a:1e:85:fe:1e:4c:52:e2:0a:a1:4d:cd:7d:47:6f:52:
         c4:a4:8c:ed:3b:fb:9d:65:e8:f9:01:f7:56:9f:79:f1:c6:92:
         e7:9f:94:0f:5f:3f:7d:f3:21:01:2a:e6:06:17:13:a6:59:b0:
         5d:fc:8b:7c:9c:28:93:62:5f:72:56:08:75:51:53:33:d7:8c:
         9e:ad:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org