Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/wrUoAGE6qB-SI87x6wzm_YT4cUg.roa
File:                     wrUoAGE6qB-SI87x6wzm_YT4cUg.roa (raw, json)
Hash identifier:          8uD2ud5VmmhGoqfxI4LSISt+lMTAJX8jM4Isil/UVpo=
Subject key identifier:   C2:B5:28:00:61:3A:A8:1F:92:23:CE:F1:EB:0C:E6:FD:84:F8:71:48
Certificate issuer:       /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
Certificate serial:       08C4
Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/wrUoAGE6qB-SI87x6wzm_YT4cUg.roa
Signing time:             Sun 07 Feb 2021 11:46:15 +0000
ROA not before:           Sun 07 Feb 2021 11:46:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131619
IP address blocks:        103.116.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1
        Validity
            Not Before: Feb  7 11:46:15 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C2B52800613AA81F9223CEF1EB0CE6FD84F87148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0b:7b:a3:08:36:b6:15:93:fd:0e:67:18:e9:
                    91:9b:61:0e:b6:3f:cb:8c:d6:48:4b:8c:e5:75:49:
                    53:38:0b:66:a5:57:1c:d5:37:6d:ef:e9:8c:9c:c3:
                    0e:38:d9:dc:b2:1d:39:31:16:fe:2b:1c:a1:b8:52:
                    56:41:d9:67:61:3e:3d:60:61:18:da:e1:18:db:b7:
                    89:16:e5:e7:da:5b:66:89:a2:3f:64:9e:d3:a9:3b:
                    d8:35:06:8a:47:91:6f:4f:c6:23:5d:50:98:ff:57:
                    e2:b5:da:eb:04:e0:87:23:61:41:89:13:c7:8a:27:
                    96:48:22:86:1f:f5:e6:b6:bf:3d:a4:39:63:d8:78:
                    cc:ce:68:50:17:5e:56:a5:47:20:39:20:74:67:5d:
                    c8:85:bd:a6:4a:e4:7c:af:80:c0:85:37:eb:b1:60:
                    4a:d3:df:6a:54:97:94:20:aa:0d:19:32:e7:95:5b:
                    d8:12:cb:5e:3c:c0:1e:ed:86:ff:36:f7:98:79:84:
                    89:23:3d:56:8a:09:a2:d0:e7:ac:2d:8f:00:4c:79:
                    25:dd:a2:fa:e1:2b:db:65:12:35:39:67:64:95:b5:
                    a3:e0:f9:1c:fb:4e:6f:6a:90:6a:9f:74:f1:36:20:
                    8c:5a:f5:3a:fc:92:93:10:3a:9a:4f:f7:d2:1b:32:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B5:28:00:61:3A:A8:1F:92:23:CE:F1:EB:0C:E6:FD:84:F8:71:48
            X509v3 Authority Key Identifier:
                keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/wrUoAGE6qB-SI87x6wzm_YT4cUg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:dd:49:11:62:ef:46:d2:11:a1:a1:09:c0:de:04:32:1c:
         d6:48:18:4e:0b:41:7e:37:15:6d:ea:0f:50:26:ba:0c:97:4e:
         8e:80:0e:4c:5f:b9:75:61:a4:c1:92:82:47:73:2e:5d:d6:b9:
         42:f3:be:0d:f9:64:1f:13:98:b0:a6:d3:1b:0c:82:3e:90:10:
         4f:c6:b4:fe:3f:ae:b9:72:0a:53:27:4b:e9:e9:17:c4:38:74:
         7b:77:7b:29:01:c7:36:8a:cb:95:2e:ae:0e:76:97:8a:43:e2:
         2e:d9:13:84:e4:ee:0b:6f:5a:80:e3:4d:8b:67:82:1d:48:5d:
         3e:ad:1c:f3:f1:8e:72:a7:05:e6:9f:5b:25:e4:c0:17:b0:b0:
         fd:6a:fc:96:3d:cb:f0:76:39:ff:1d:fd:85:f2:5f:07:9e:cd:
         46:ac:d2:14:f2:a5:2e:4e:c5:a1:a7:60:e3:e7:aa:1d:5a:49:
         30:39:8d:78:88:b9:6e:a1:f7:92:8a:1e:39:69:9c:f0:d4:80:
         ce:3f:b8:e7:d3:aa:27:e7:50:af:5e:ea:5a:69:05:e6:c3:b3:
         16:f3:75:a7:e1:a0:fc:57:75:36:22:69:a3:e3:0f:71:b1:f9:
         54:bd:7e:36:a5:bb:aa:89:89:69:4d:16:49:69:fe:86:fe:e0:
         35:02:54:7c
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw
QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yMTAyMDcx
MTQ2MTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEMyQjUyODAwNjEzQUE4
MUY5MjIzQ0VGMUVCMENFNkZEODRGODcxNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfC3ujCDa2FZP9DmcY6ZGbYQ62P8uM1khLjOV1SVM4C2alVxzV
N23v6Yycww442dyyHTkxFv4rHKG4UlZB2WdhPj1gYRja4Rjbt4kW5efaW2aJoj9k
ntOpO9g1BopHkW9PxiNdUJj/V+K12usE4IcjYUGJE8eKJ5ZIIoYf9ea2vz2kOWPY
eMzOaFAXXlalRyA5IHRnXciFvaZK5HyvgMCFN+uxYErT32pUl5Qgqg0ZMueVW9gS
y148wB7thv8295h5hIkjPVaKCaLQ56wtjwBMeSXdovrhK9tlEjU5Z2SVtaPg+Rz7
Tm9qkGqfdPE2IIxa9Tr8kpMQOppP99IbMkidAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUwrUoAGE6qB+SI87x6wzm/YT4cUgwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K
NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U
RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy93clVvQUdFNnFCLVNJ
ODd4Nnd6bV9ZVDRjVWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ3RjMA0GCSqGSIb3DQEBCwUAA4IBAQAsYN1JEWLvRtIRoaEJwN4EMhzWSBhO
C0F+NxVt6g9QJroMl06OgA5MX7l1YaTBkoJHcy5d1rlC874N+WQfE5iwptMbDII+
kBBPxrT+P665cgpTJ0vp6RfEOHR7d3spAcc2isuVLq4OdpeKQ+Iu2ROE5O4Lb1qA
402LZ4IdSF0+rRzz8Y5ypwXmn1sl5MAXsLD9avyWPcvwdjn/Hf2F8l8Hns1GrNIU
8qUuTsWhp2Dj56odWkkwOY14iLluofeSih45aZzw1IDOP7jn06on51CvXupaaQXm
w7MW83Wn4aD8V3U2Immj4w9xsflUvX42pbuqiYlpTRZJaf6G/uA1AlR8
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org