Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/u6xxRJ99YLZH-CxuaNKcxaYor1A.roa
File:                     u6xxRJ99YLZH-CxuaNKcxaYor1A.roa (raw, json)
Hash identifier:          9rdA9DApzVN/88Q+AQwmH6XX+1yZkrvYb1c304vjroU=
Subject key identifier:   BB:AC:71:44:9F:7D:60:B6:47:F8:2C:6E:68:D2:9C:C5:A6:28:AF:50
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       0A57
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/u6xxRJ99YLZH-CxuaNKcxaYor1A.roa
Signing time:             Thu 15 Sep 2022 02:40:42 +0000
ROA not before:           Thu 15 Sep 2022 02:40:42 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131619
IP address blocks:        103.116.96.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2647 (0xa57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Sep 15 02:40:42 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BBAC71449F7D60B647F82C6E68D29CC5A628AF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:d5:35:d3:9b:a1:f0:ba:f6:e8:db:d2:d6:
                    e4:c8:f3:12:c6:af:57:2e:ec:13:c9:79:83:0b:21:
                    3c:6b:58:85:92:a0:6d:9c:6b:58:62:1f:b8:3b:10:
                    cc:52:94:65:42:eb:84:35:de:b2:bf:cd:93:2b:ef:
                    19:08:1c:28:2e:77:ba:08:ab:1d:31:87:7d:74:87:
                    e0:3f:ed:d7:3f:a5:8d:79:b4:f6:7f:23:ab:12:38:
                    48:7c:6a:e5:17:a0:ff:9e:3f:b3:71:67:7f:3e:09:
                    23:53:03:c5:70:7d:27:1c:38:5c:bc:00:35:e5:1f:
                    c9:a4:6f:96:53:6a:ed:cf:36:31:3c:87:9d:93:a0:
                    93:0e:21:fb:17:19:e1:7d:0b:d4:57:eb:24:a0:d3:
                    38:53:12:cf:75:47:81:26:d2:5a:57:c7:20:70:37:
                    06:4f:9b:34:cd:4a:6c:81:76:43:17:4b:cd:5d:e9:
                    af:c2:c5:11:b5:b9:3f:aa:f7:ac:0d:bc:87:aa:21:
                    80:ce:fb:e7:b2:ca:65:a1:7a:ed:da:19:51:32:8a:
                    30:e3:7b:55:ea:69:77:e1:1a:a5:42:7b:50:1d:7b:
                    23:26:70:43:20:06:13:54:bd:8c:0d:eb:9d:3b:f1:
                    7b:6c:88:96:15:cd:3b:5e:09:e6:b1:fd:3a:81:ae:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AC:71:44:9F:7D:60:B6:47:F8:2C:6E:68:D2:9C:C5:A6:28:AF:50
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/u6xxRJ99YLZH-CxuaNKcxaYor1A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:27:16:01:8a:12:17:7a:67:5e:b8:2d:8f:87:f1:fb:81:c5:
         af:72:ed:5f:35:9b:25:61:d0:c7:f5:fb:74:09:b2:86:87:14:
         82:c5:41:b9:2c:1f:53:be:36:00:bc:4c:6c:b2:1a:34:2f:59:
         de:03:e8:8d:31:ff:ab:76:6c:9c:b6:80:04:fc:c2:fc:d4:41:
         df:52:2d:7a:b7:da:96:a1:34:c3:87:e5:2e:b9:3c:f3:3f:b1:
         b1:10:44:94:1d:2b:a9:99:10:6c:05:93:60:49:c7:51:a0:48:
         d3:aa:a4:15:85:80:2c:54:08:91:c5:98:ff:95:1a:e3:49:2e:
         58:d5:91:e8:09:51:d5:f0:6c:f7:08:30:2e:4e:9d:f8:a1:c1:
         98:0d:b4:25:db:3c:ba:21:6f:9c:9f:cc:1e:70:aa:35:f3:ce:
         aa:de:68:4c:78:2e:90:59:f4:92:d0:48:5f:6b:bc:1b:6e:be:
         9c:a7:2a:d9:63:9a:b3:e0:75:e7:90:c3:af:5c:4b:cd:b1:d4:
         2f:38:ff:75:40:c8:42:bd:27:d8:a0:2d:f0:ba:15:ae:32:b3:
         00:70:c6:5b:2c:19:4a:48:2a:9c:19:e5:fd:dd:56:02:52:63:
         81:b9:9f:cb:14:e7:28:bb:3f:d5:bc:c4:4c:e7:c9:3b:50:26:
         06:03:4a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:08 2025 by rpki-client