Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/kmUWuy9qrGPYOY8Oe-DxqQmjNM4.roa
File:                     kmUWuy9qrGPYOY8Oe-DxqQmjNM4.roa (raw, json)
Hash identifier:          MopAkual8mojpiZLFPK1KWx/8+JuQHCONJzCQG3F58o=
Subject key identifier:   92:65:16:BB:2F:6A:AC:63:D8:39:8F:0E:7B:E0:F1:A9:09:A3:34:CE
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       077C
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/kmUWuy9qrGPYOY8Oe-DxqQmjNM4.roa
Signing time:             Tue 29 Sep 2020 10:04:24 +0000
ROA not before:           Tue 29 Sep 2020 10:04:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131619
IP address blocks:        103.116.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Sep 29 10:04:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=926516BB2F6AAC63D8398F0E7BE0F1A909A334CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:83:dc:e6:9d:71:56:30:da:9e:bc:8a:19:
                    c0:2d:84:bd:04:52:d6:fc:1a:e7:95:58:95:2a:f8:
                    a6:19:5b:1e:62:f8:b9:14:de:16:03:9c:1c:0e:7d:
                    f9:a9:5a:bb:22:f6:2c:b6:15:30:16:32:f8:93:c6:
                    be:b2:cb:19:4e:db:96:b9:8a:f6:e0:1a:08:9e:b7:
                    6f:47:ed:76:99:06:a6:a8:11:f2:43:b0:31:cf:68:
                    5b:ea:35:76:39:e5:e4:44:0e:c1:e1:9b:52:63:bb:
                    14:6d:c7:e5:03:66:7c:e1:da:da:af:45:27:e0:bd:
                    aa:28:1d:02:68:92:e1:9c:18:50:ea:91:c8:a0:97:
                    be:02:ce:ab:a2:ef:dd:93:47:9c:f6:2b:85:74:36:
                    9a:aa:cf:5f:70:c4:84:c2:d7:6f:6a:8f:11:ea:c2:
                    3d:49:f7:c7:08:04:10:ae:0f:5c:29:ea:8f:69:7b:
                    f5:01:76:95:77:33:0c:0a:8f:fb:5d:49:80:e5:1e:
                    b5:27:e8:0d:94:9d:e0:9e:80:72:6a:eb:02:40:d6:
                    e1:2f:e2:1f:71:89:a4:87:f1:28:62:9d:fa:5d:91:
                    6d:4a:70:ff:b2:24:55:19:38:0f:70:2b:ea:13:18:
                    a5:27:b1:ef:2d:0a:e3:0d:be:44:76:fd:64:78:d7:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:65:16:BB:2F:6A:AC:63:D8:39:8F:0E:7B:E0:F1:A9:09:A3:34:CE
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/kmUWuy9qrGPYOY8Oe-DxqQmjNM4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:3e:40:df:28:a4:be:6e:d2:a5:e1:3d:43:2f:c3:d7:4b:a6:
         fc:cc:76:1c:52:24:6e:e4:79:1b:64:57:b0:87:df:c6:b1:36:
         64:2c:58:95:d4:5f:ac:5b:70:99:a4:b8:5f:ef:6a:c6:95:03:
         fe:4e:95:a4:7e:bc:70:46:24:70:b4:9d:34:54:b8:db:27:93:
         07:76:4d:de:03:dc:78:f2:d0:c7:4c:e5:48:ce:f5:7e:aa:56:
         39:d3:7d:7a:a6:76:ca:67:17:b9:72:f2:cd:df:35:7f:cb:ee:
         3e:3e:9d:87:8d:4a:52:6e:32:25:52:a8:c4:4c:99:90:02:22:
         e7:b8:c3:8d:7f:47:d4:64:cf:cf:55:4b:96:5f:ae:fa:e8:49:
         44:9e:48:d0:4e:53:be:91:78:a0:65:ab:23:23:8c:31:f7:0c:
         63:61:50:7a:52:84:f5:64:1c:18:7f:b3:d2:09:aa:e0:75:5b:
         4e:5e:2f:22:97:7b:62:ce:c3:ff:3d:f5:ae:34:8e:71:79:99:
         13:a9:57:24:1e:c7:bc:27:7e:dc:77:4e:73:6a:93:03:10:dc:
         8e:13:68:03:5d:37:98:fb:64:4d:fb:86:02:06:30:f2:a2:e3:
         8d:2f:99:ec:48:b1:72:b8:1a:ac:62:9f:55:59:86:db:57:a8:
         e2:4e:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org