Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/uPr_D-20yYiexGT5zL7KzR8M-Ng.roa
File:                     uPr_D-20yYiexGT5zL7KzR8M-Ng.roa (raw, json)
Hash identifier:          7UXoCX4EtRh+Cl79CvskDa6bgWRd764oziWRz7e2TzI=
Subject key identifier:   B8:FA:FF:0F:ED:B4:C9:88:9E:C4:64:F9:CC:BE:CA:CD:1F:0C:F8:D8
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       08C6
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/uPr_D-20yYiexGT5zL7KzR8M-Ng.roa
Signing time:             Sun 07 Feb 2021 11:46:16 +0000
ROA not before:           Sun 07 Feb 2021 11:46:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     26415
IP address blocks:        103.116.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246 (0x8c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Feb  7 11:46:16 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B8FAFF0FEDB4C9889EC464F9CCBECACD1F0CF8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:c0:30:9e:65:62:3c:68:50:a9:87:5b:d6:
                    b1:74:0e:35:10:4f:fa:2c:c9:0b:1d:dd:c1:45:77:
                    df:de:70:58:c2:9a:3d:80:9d:26:e5:8a:a3:91:75:
                    db:a1:82:0e:d4:9a:3c:4c:8c:ea:ac:85:b9:ba:6a:
                    37:95:16:e3:1f:b9:69:3d:71:ed:71:6d:dd:63:a4:
                    67:62:90:8c:b6:bf:95:8c:bf:60:3a:94:2e:4a:a4:
                    b4:f7:90:4e:80:89:9b:9d:ca:b4:37:c0:34:8e:d4:
                    a5:09:fb:b4:d7:1a:16:94:21:91:b5:38:dd:8e:df:
                    32:c3:70:f8:9b:7f:79:44:09:45:5d:58:66:c9:a6:
                    85:94:af:91:b9:82:0f:73:63:38:14:cc:09:14:be:
                    ab:24:20:dc:90:b1:1d:e2:95:e9:42:1f:27:0a:81:
                    e3:6f:64:b3:eb:7e:ad:2e:16:91:ef:dd:5a:2c:a3:
                    f6:dc:ef:8a:45:af:d2:58:f4:3b:05:89:c3:d2:34:
                    77:c1:64:cb:ce:89:22:47:2b:a8:c8:b6:36:27:df:
                    81:46:4e:64:2f:e5:6f:d0:cd:4c:0b:d6:e1:ed:da:
                    c3:b5:91:c4:b5:fa:18:18:eb:a7:d9:ed:ca:8d:5d:
                    ca:3f:8a:9f:c2:10:db:9e:45:bd:df:d8:1b:9a:d8:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FA:FF:0F:ED:B4:C9:88:9E:C4:64:F9:CC:BE:CA:CD:1F:0C:F8:D8
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/uPr_D-20yYiexGT5zL7KzR8M-Ng.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d3:51:e0:f7:ce:e8:36:39:fa:1f:da:5d:b3:68:5b:35:0f:
         25:af:a4:ca:c2:b9:fe:c5:30:39:07:e6:f1:58:88:3d:5f:f6:
         fa:a4:91:8d:78:0d:2a:09:84:24:e2:b4:9f:f0:8c:31:70:b7:
         a7:f6:a5:06:df:10:5c:fe:2f:ca:7a:02:77:be:91:34:2e:3f:
         9e:71:2f:9b:1f:47:0f:23:3f:70:c2:99:37:43:33:7e:35:2f:
         54:dc:08:63:26:cd:71:91:e5:2d:15:dc:79:42:92:5a:b6:ff:
         6d:03:64:58:d0:8e:4f:cf:21:5f:23:b0:f7:47:cc:41:86:b0:
         4d:1d:57:2a:0e:d6:bf:27:18:96:72:20:a9:4a:86:4a:97:2d:
         7f:f0:e2:01:7a:b5:b7:dd:51:55:12:3c:a3:ad:66:e9:a5:a0:
         ab:1b:3d:f7:79:da:eb:e2:0a:64:16:b8:ef:0e:02:2f:62:21:
         48:41:a1:a7:55:f0:dc:a9:c2:18:c2:1a:eb:2b:04:2e:26:78:
         65:99:e3:3f:70:48:aa:cc:3d:b8:0d:ba:ad:5f:d3:76:3a:55:
         00:23:74:69:1e:fb:c4:61:2f:58:59:39:95:88:a8:86:ea:98:
         06:ec:51:91:04:19:99:c5:72:09:3b:f9:32:dc:18:61:6c:9a:
         b5:e7:22:fa
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw
QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yMTAyMDcx
MTQ2MTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI4RkFGRjBGRURCNEM5
ODg5RUM0NjRGOUNDQkVDQUNEMUYwQ0Y4RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoH8AwnmViPGhQqYdb1rF0DjUQT/osyQsd3cFFd9/ecFjCmj2A
nSbliqORdduhgg7UmjxMjOqshbm6ajeVFuMfuWk9ce1xbd1jpGdikIy2v5WMv2A6
lC5KpLT3kE6AiZudyrQ3wDSO1KUJ+7TXGhaUIZG1ON2O3zLDcPibf3lECUVdWGbJ
poWUr5G5gg9zYzgUzAkUvqskINyQsR3ilelCHycKgeNvZLPrfq0uFpHv3Voso/bc
74pFr9JY9DsFicPSNHfBZMvOiSJHK6jItjYn34FGTmQv5W/QzUwL1uHt2sO1kcS1
+hgY66fZ7cqNXco/ip/CENueRb3f2Bua2KlzAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUuPr/D+20yYiexGT5zL7KzR8M+NgwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K
NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U
RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy91UHJfRC0yMHlZaWV4
R1Q1ekw3S3pSOE0tTmcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ3RgMA0GCSqGSIb3DQEBCwUAA4IBAQCt01Hg987oNjn6H9pds2hbNQ8lr6TK
wrn+xTA5B+bxWIg9X/b6pJGNeA0qCYQk4rSf8IwxcLen9qUG3xBc/i/KegJ3vpE0
Lj+ecS+bH0cPIz9wwpk3QzN+NS9U3AhjJs1xkeUtFdx5QpJatv9tA2RY0I5PzyFf
I7D3R8xBhrBNHVcqDta/JxiWciCpSoZKly1/8OIBerW33VFVEjyjrWbppaCrGz33
edrr4gpkFrjvDgIvYiFIQaGnVfDcqcIYwhrrKwQuJnhlmeM/cEiqzD24DbqtX9N2
OlUAI3RpHvvEYS9YWTmViKiG6pgG7FGRBBmZxXIJO/ky3BhhbJq15yL6
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:10 2024 by rpki-client on console-ams.rpki-client.org