Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/cWAaqz04zoH5kXpYtdkXt4wpB_0.roa
File:                     cWAaqz04zoH5kXpYtdkXt4wpB_0.roa (raw, json)
Hash identifier:          e1RB5w1Jw/9pBRESJsobgouNzF04Nz88dLzYUgQ2wdc=
Subject key identifier:   71:60:1A:AB:3D:38:CE:81:F9:91:7A:58:B5:D9:17:B7:8C:29:07:FD
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       07D3
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/cWAaqz04zoH5kXpYtdkXt4wpB_0.roa
Signing time:             Fri 16 Oct 2020 08:14:22 +0000
ROA not before:           Fri 16 Oct 2020 08:14:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17408
IP address blocks:        103.123.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2003 (0x7d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Oct 16 08:14:22 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=71601AAB3D38CE81F9917A58B5D917B78C2907FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:61:a5:c8:9d:24:9b:14:64:5e:9d:21:1a:6a:
                    46:74:7c:af:12:fb:b2:dc:b2:65:20:c8:6d:f3:67:
                    73:18:9f:13:00:32:a1:15:4d:85:2f:ff:dd:07:94:
                    4b:fd:b3:ab:ff:ba:9f:7b:41:ae:a0:b5:33:5b:12:
                    2f:d3:6b:69:5f:17:d8:24:fa:22:60:2d:28:d7:b8:
                    07:97:d8:fd:69:0d:73:9d:fe:e1:5e:6a:5e:60:5f:
                    55:a6:b5:e8:53:c2:54:08:4b:32:07:92:d4:00:b4:
                    1b:22:ed:c4:01:01:a6:6c:44:d6:4a:e0:41:bc:6d:
                    45:2c:7d:e7:cd:d1:ff:2b:79:91:20:bf:c4:60:88:
                    ba:05:c4:7f:64:09:09:66:22:7b:5c:2e:29:7b:07:
                    68:77:9c:94:79:56:b4:9d:ae:52:f2:c9:f4:e4:33:
                    8f:92:08:56:7c:3a:e3:78:9f:c8:d4:99:4d:b9:61:
                    db:04:a3:8c:4c:50:cc:95:af:9e:11:37:5f:79:e2:
                    c7:04:77:12:e9:36:ff:2d:2a:4c:b3:59:44:37:a0:
                    1a:2d:dc:ab:95:7b:db:d6:84:00:22:a2:fb:9d:1f:
                    19:34:94:ea:71:73:9a:95:39:4b:8c:de:ef:e7:fc:
                    53:dc:a9:85:4f:39:17:e2:2f:d4:b8:6d:6b:03:b0:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:60:1A:AB:3D:38:CE:81:F9:91:7A:58:B5:D9:17:B7:8C:29:07:FD
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/cWAaqz04zoH5kXpYtdkXt4wpB_0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:1e:38:02:0a:3c:16:58:02:46:f6:44:03:74:b7:ba:e9:b3:
         f9:69:f0:d5:de:ee:af:c6:18:84:7f:0c:b9:3a:0c:ab:39:ba:
         69:e5:9f:ed:a6:69:25:8f:e0:00:7f:0c:08:e6:7d:9f:65:05:
         75:1c:66:b1:94:8f:cd:5c:32:3b:59:c7:31:a6:af:83:2f:61:
         d0:13:49:2d:4a:81:df:13:67:bf:a9:e8:1b:a0:8c:df:23:14:
         0c:75:73:a9:6c:68:b0:24:1b:66:64:a4:29:ad:ca:04:d8:78:
         c7:73:ec:0e:ad:9f:eb:7f:b8:bd:92:00:2f:a5:39:1a:b5:61:
         65:64:bc:c8:a0:e8:7d:eb:cb:a3:26:8a:d7:29:16:0f:f4:7a:
         c1:5a:54:b5:b9:a9:a9:de:1f:be:89:b9:41:64:c2:50:fc:2a:
         c4:5c:b2:1f:a4:1d:93:26:03:e7:c8:b9:7a:f1:98:ac:c1:36:
         8e:b8:43:8c:43:ba:bd:0c:93:0e:4c:09:c8:d6:a7:5c:70:44:
         db:ff:42:77:f4:b1:e6:75:bb:48:89:6d:e9:36:2d:55:fb:16:
         54:e2:e7:b7:65:b6:b8:44:9b:a4:c1:19:bb:70:74:cd:ce:b5:
         20:0d:91:00:3f:39:eb:05:23:f7:a8:7d:d7:47:9f:99:1b:5e:
         35:b9:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org