Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/wiqODqRFaGmnG0QTfJ9SH5xx9EM.roa
File:                     wiqODqRFaGmnG0QTfJ9SH5xx9EM.roa (raw, json)
Hash identifier:          nsWNPEGMSOXFGJUevuYNwxG8GpaV7lQGS1ReoZV1FGk=
Subject key identifier:   C2:2A:8E:0E:A4:45:68:69:A7:1B:44:13:7C:9F:52:1F:9C:71:F4:43
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       0777
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/wiqODqRFaGmnG0QTfJ9SH5xx9EM.roa
Signing time:             Tue 29 Sep 2020 10:04:23 +0000
ROA not before:           Tue 29 Sep 2020 10:04:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131619
IP address blocks:        103.116.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Sep 29 10:04:23 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C22A8E0EA4456869A71B44137C9F521F9C71F443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:77:ff:c1:f9:e0:cc:a0:78:a7:67:f1:2d:
                    68:61:c0:1d:45:44:67:36:d5:4c:bf:1c:6c:66:6b:
                    ee:24:c4:1d:2e:8c:de:69:44:3f:09:94:66:48:f2:
                    ce:5e:47:89:03:9a:c2:28:a3:4c:32:be:ad:48:f8:
                    88:04:cf:95:17:24:39:4f:22:c9:b8:f3:50:4c:36:
                    e5:ef:25:f4:7e:59:9b:0e:1c:d3:90:c8:3c:81:4d:
                    27:f3:59:58:ce:f6:cb:4d:c8:ce:d2:28:f5:e8:07:
                    45:41:68:46:8a:ce:8f:6d:2f:25:f2:5f:ef:38:68:
                    5a:27:63:b8:b5:db:bd:1f:7b:55:c5:fa:36:33:fe:
                    ac:54:93:c7:36:bc:2f:75:b1:5a:c8:a9:e3:1d:68:
                    99:2a:77:26:a1:4c:42:69:ff:11:54:19:fe:32:b4:
                    c7:4f:4a:a8:af:71:e5:2e:56:19:89:c0:03:86:52:
                    7a:03:03:72:90:52:63:f7:cd:93:a7:c8:99:5e:06:
                    61:a8:8e:ae:e7:04:49:dc:28:c9:81:f2:6c:d4:2e:
                    0f:f1:fc:c4:2a:86:d9:22:d6:0c:bd:3d:38:ff:d3:
                    4b:80:29:c4:40:ad:76:7d:79:56:4f:29:49:5e:3e:
                    20:b3:ba:7c:5b:78:41:b0:79:07:55:75:51:9a:be:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2A:8E:0E:A4:45:68:69:A7:1B:44:13:7C:9F:52:1F:9C:71:F4:43
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/wiqODqRFaGmnG0QTfJ9SH5xx9EM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:f6:18:37:d0:49:09:e4:bf:dd:e1:ad:b2:65:05:25:e9:
         5b:3c:fd:08:93:4c:6c:f3:ee:93:ee:f9:e5:ad:07:d3:f5:83:
         2c:29:4d:c8:1d:d0:13:17:cd:aa:7f:32:6d:7f:36:82:a9:cc:
         7a:c1:b7:a0:9d:72:02:a4:10:a0:19:e3:d5:0f:ee:05:0f:f4:
         92:44:f8:c4:4b:48:ef:17:8d:bb:36:91:7c:cd:15:7c:26:8b:
         de:25:6a:59:47:a7:35:7e:6a:70:80:ab:b8:c3:5d:61:66:af:
         2a:e9:86:af:67:50:81:2c:e5:37:a9:d9:2d:a6:2f:f0:d4:da:
         c8:b3:68:14:6a:7d:a4:e7:3b:51:e6:72:af:60:b6:b6:f8:16:
         4e:fb:35:f4:5d:42:ee:c8:d4:5b:36:60:ea:0b:2a:15:bc:11:
         07:9f:4f:6b:b9:a6:3f:2b:85:b2:d6:38:98:bb:10:92:50:f3:
         1a:85:0e:e4:3c:00:30:0f:72:45:22:ca:ea:b6:e3:0e:a7:84:
         90:e3:0d:72:a3:4e:39:13:ea:e9:23:d1:97:5d:18:8c:d4:e2:
         f5:1b:61:68:2e:34:57:e7:42:2c:d7:17:b2:3b:18:25:82:e2:
         e5:79:25:cc:9c:ee:d8:30:a7:a1:90:62:15:64:e8:11:52:54:
         50:32:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org