Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/_xe6kPqjHBX_1EOyr6NLA65Mk0k.roa
File:                     _xe6kPqjHBX_1EOyr6NLA65Mk0k.roa (raw, json)
Hash identifier:          LoWiuRLZ3nQhuxnXLYP2vfyhPYd96zl1BSs9e8vY8Zw=
Subject key identifier:   FF:17:BA:90:FA:A3:1C:15:FF:D4:43:B2:AF:A3:4B:03:AE:4C:93:49
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       0967
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/_xe6kPqjHBX_1EOyr6NLA65Mk0k.roa
Signing time:             Wed 29 Sep 2021 02:40:24 +0000
ROA not before:           Wed 29 Sep 2021 02:40:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     26415
IP address blocks:        103.116.96.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Sep 29 02:40:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FF17BA90FAA31C15FFD443B2AFA34B03AE4C9349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:86:35:21:15:34:90:3d:1c:23:ca:b0:4d:
                    ec:b0:53:65:da:5b:3e:30:fe:7d:05:bf:36:55:19:
                    de:02:61:10:8f:bd:1f:d7:02:11:c5:27:91:64:6f:
                    3b:89:7a:a2:68:6c:25:70:ff:05:6a:e8:8c:f0:9f:
                    bf:a7:71:47:85:c0:53:e6:fd:5d:1c:81:ad:57:11:
                    66:13:98:bb:fd:75:0e:8f:b8:92:2e:97:d9:48:56:
                    c4:54:92:54:a8:8b:dd:32:98:ee:e8:54:36:98:87:
                    28:a7:71:28:6e:ec:a2:28:8d:c1:95:b6:c0:a3:6c:
                    3d:4f:c5:cd:19:a9:eb:07:e6:44:a1:00:75:c5:63:
                    5e:e2:fd:2f:ea:1d:18:e1:18:b2:dd:3a:3d:c1:f5:
                    fa:b0:fe:ce:3a:d6:9a:b1:4b:90:3f:50:96:1d:4d:
                    38:57:bf:71:ec:ad:08:a4:77:9e:d6:fe:35:f2:2c:
                    4d:f8:ac:55:56:6c:8e:32:b8:ce:83:16:3c:7d:5b:
                    81:52:6c:28:e5:15:fd:43:d4:58:39:58:d8:80:a0:
                    0b:cf:a1:8d:47:11:db:d5:e3:5c:d9:63:05:c2:90:
                    c2:5f:1e:59:f0:5a:b3:75:3d:66:62:90:e3:ac:34:
                    73:e5:27:d1:89:90:91:ef:ae:22:49:11:95:c3:8d:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:17:BA:90:FA:A3:1C:15:FF:D4:43:B2:AF:A3:4B:03:AE:4C:93:49
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/_xe6kPqjHBX_1EOyr6NLA65Mk0k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d3:4e:6b:85:83:63:20:43:7d:f2:92:e9:08:d5:19:38:9a:
         80:58:bf:1c:ba:5a:9b:df:48:61:2c:94:b0:da:16:4c:02:69:
         ca:6f:3e:ca:02:ff:0b:d0:84:9c:0c:0c:5e:37:28:d8:6a:5c:
         25:8e:77:31:6a:20:bc:07:ce:82:8b:de:d8:4b:2c:25:80:fd:
         c6:73:af:12:4b:65:c9:21:19:45:a2:53:c6:41:03:ac:f9:a4:
         ff:50:fc:0d:e3:69:41:b9:f9:0c:a6:c1:68:6a:44:12:75:45:
         b1:ce:1e:c5:ef:0c:40:82:59:1c:b4:9c:0f:47:76:ba:89:d2:
         ba:88:17:44:69:35:ca:e0:ed:30:c3:0f:b3:1f:08:1f:46:9f:
         59:48:44:e1:d0:9b:cc:7f:a6:de:1a:85:1f:a8:2f:fd:2b:02:
         c6:1d:37:4d:78:7a:4a:e3:88:a0:88:bc:71:fd:9b:3d:9b:8a:
         53:72:48:2c:ba:29:d2:75:5b:1d:57:3f:a6:d6:38:78:c5:52:
         8d:2d:2e:f9:43:95:91:36:6b:4f:cc:a9:11:3b:79:a0:ff:c5:
         b6:61:2f:4c:1a:40:51:c6:48:23:ee:2a:0c:80:2f:19:c4:0e:
         d9:14:ca:d1:a5:3e:e6:8c:0b:8b:28:1d:a7:8e:e2:8a:a8:2e:
         6e:00:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:27 2025 by rpki-client