Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/FeaxPOggnd2ngHGeSD39gxoPz_Y.roa
File:                     FeaxPOggnd2ngHGeSD39gxoPz_Y.roa (raw, json)
Hash identifier:          4WeaCFtnfEI+lwdrR5gIn9sDGxy6xAinqXV60zlrwVo=
Subject key identifier:   15:E6:B1:3C:E8:20:9D:DD:A7:80:71:9E:48:3D:FD:83:1A:0F:CF:F6
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       08C8
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/FeaxPOggnd2ngHGeSD39gxoPz_Y.roa
Signing time:             Sun 07 Feb 2021 11:46:17 +0000
ROA not before:           Sun 07 Feb 2021 11:46:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     26415
IP address blocks:        103.116.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Feb  7 11:46:17 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=15E6B13CE8209DDDA780719E483DFD831A0FCFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:22:87:a6:d7:8d:97:9a:c3:d5:59:c6:a8:ef:
                    eb:0b:13:4c:b3:4f:a5:0a:4e:47:4a:9e:5c:8c:57:
                    d1:5a:6c:af:82:07:fd:9e:08:80:79:48:07:37:cc:
                    31:16:4a:a7:02:24:fd:78:92:e9:50:c2:06:16:58:
                    cc:26:19:fa:df:de:e2:85:a1:c9:40:39:a9:ab:32:
                    3f:62:21:b9:45:a4:43:bc:a5:ed:03:2c:55:d8:f5:
                    60:e4:01:39:73:a7:9c:f4:d9:60:21:6a:a0:30:83:
                    2f:91:0f:23:50:d3:48:f1:08:39:b4:71:45:6d:83:
                    4f:64:b2:dc:bf:cb:e0:3c:89:ca:88:db:3b:8d:cc:
                    fc:bd:bb:21:30:3b:2e:cb:54:2c:ef:5f:66:7a:e7:
                    7a:88:42:31:48:42:a6:e9:a7:a0:7b:9a:42:6f:3e:
                    54:e1:62:c1:a2:49:f6:29:e7:bc:b9:ea:ce:b9:21:
                    1f:db:aa:58:c0:4e:7d:0c:2d:f2:b6:63:e1:63:ee:
                    eb:97:54:97:68:ee:d5:01:2f:4b:26:00:30:29:e7:
                    d9:05:95:af:95:c3:49:cb:e1:06:70:20:76:42:11:
                    63:ef:eb:b7:e7:58:a3:eb:fb:9b:87:a0:31:e2:21:
                    23:ac:0e:4d:40:97:cb:9d:8a:14:de:92:d9:7a:0d:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:B1:3C:E8:20:9D:DD:A7:80:71:9E:48:3D:FD:83:1A:0F:CF:F6
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/FeaxPOggnd2ngHGeSD39gxoPz_Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:f6:80:3e:4c:63:d3:58:4e:c4:f2:59:1a:30:8b:7d:77:
         1a:6c:01:63:4b:15:63:35:03:6a:9c:a1:eb:23:d9:6d:cc:fb:
         37:65:dc:3e:38:cd:3c:47:58:96:36:77:49:15:7f:59:ee:e9:
         20:0b:4e:d5:ae:3a:77:51:9c:87:ca:f8:e7:8a:2c:78:f1:5b:
         5a:a0:8c:9c:5b:b0:50:2d:71:40:d3:99:70:e8:19:95:e5:72:
         09:a4:f7:ee:c5:d4:c0:09:97:ee:1c:2d:e0:bb:bd:df:4e:29:
         5d:c4:f4:c9:4e:77:15:4c:22:dd:b8:89:48:e8:88:76:78:58:
         1f:a3:86:2d:60:cf:71:84:0e:56:09:d9:39:a2:f1:e5:a5:57:
         db:48:0d:47:0d:a8:5f:e0:b7:e8:12:43:da:10:06:46:16:5d:
         45:f8:88:53:e9:3c:76:a7:3e:c2:bf:6c:ef:1a:61:9d:c4:3e:
         c0:91:54:e9:fc:26:f2:69:00:c7:38:29:71:be:05:af:18:48:
         41:ae:27:a6:fa:ed:d8:28:12:c1:4e:4b:83:f4:e1:c3:32:03:
         35:92:3f:3c:d2:10:6e:79:f9:7a:0d:66:9c:52:1f:8b:ae:1e:
         87:ea:f6:22:08:c2:cb:32:60:e3:12:be:13:54:a9:b3:39:83:
         9d:58:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:07 2023 by rpki-client on console-fra.rpki-client.org