Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3Ie0e8H4igXR7zK3gih_0NGReHs.roa
File:                     3Ie0e8H4igXR7zK3gih_0NGReHs.roa (raw, json)
Hash identifier:          flhBSwbom1UDwHfl6QAVBnNKtA34xqhiTy2AxsXpRcM=
Subject key identifier:   DC:87:B4:7B:C1:F8:8A:05:D1:EF:32:B7:82:28:7F:D0:D1:91:78:7B
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0852
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3Ie0e8H4igXR7zK3gih_0NGReHs.roa
Signing time:             Wed 04 Nov 2020 08:30:31 +0000
ROA not before:           Wed 04 Nov 2020 08:30:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        103.30.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Nov  4 08:30:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DC87B47BC1F88A05D1EF32B782287FD0D191787B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:48:27:59:b8:71:08:29:3f:d0:35:6a:5c:
                    ae:35:96:1c:30:df:09:67:e7:b8:bc:12:87:c4:25:
                    bf:b6:a5:f8:5c:2d:d7:ef:d3:ef:84:5f:c6:65:ff:
                    4f:79:c0:35:4b:f6:d5:cd:b3:90:db:43:34:08:7e:
                    96:a8:30:7d:38:12:84:d6:0c:e5:19:9b:88:d8:52:
                    f2:38:f3:62:e2:4f:00:5f:ee:6c:0a:ff:44:c9:5e:
                    8e:ec:89:a6:2d:6c:4d:ac:f7:eb:01:c7:c0:e1:cb:
                    cd:1f:76:02:6c:d8:bd:46:09:fa:56:e5:56:f0:1c:
                    2d:07:bf:9f:fd:21:5b:3d:fa:2e:e5:ca:cd:36:db:
                    60:2a:c6:f1:02:8d:e6:13:0b:4a:d7:67:bc:e3:74:
                    63:19:3d:1e:e8:fb:ea:82:17:e4:2e:2c:31:c0:32:
                    88:a2:0f:72:68:ab:8f:7a:30:81:68:75:8f:6a:3b:
                    26:f4:e5:5d:71:b1:52:a3:dc:2a:e2:30:ec:58:5d:
                    8e:94:81:e5:df:a9:ee:3a:fb:fb:bc:a7:8b:fb:7d:
                    d8:b6:ee:26:9e:1b:e8:24:57:85:3a:83:ab:3e:bc:
                    93:b3:57:5c:5d:74:8b:9c:69:72:0e:81:69:48:95:
                    fc:09:46:33:59:57:a9:0f:5a:b6:cd:44:6e:98:18:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:87:B4:7B:C1:F8:8A:05:D1:EF:32:B7:82:28:7F:D0:D1:91:78:7B
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3Ie0e8H4igXR7zK3gih_0NGReHs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:a1:3c:9e:af:89:72:4d:81:e4:f7:04:ba:18:b7:0d:d5:
         3e:95:6d:d7:7f:39:d6:a6:bf:c8:39:62:ee:ab:bf:7d:8f:b2:
         68:48:72:51:d5:b2:62:30:ad:7f:3a:30:7f:95:17:eb:4a:6a:
         15:54:f6:da:3c:78:37:7b:1c:20:ee:87:81:f1:e0:ea:f3:fa:
         1f:8c:f9:5c:31:41:4e:04:ec:45:00:0d:09:67:1e:0e:41:b6:
         d6:98:bf:a2:4f:e7:b9:78:fd:84:c9:11:2c:a8:66:ea:11:4a:
         f3:b6:d8:98:68:cd:68:ab:4f:24:5b:9e:24:a9:98:5c:06:17:
         c1:48:8c:d3:ab:60:82:43:b2:40:e9:1a:09:49:0b:bb:3c:c5:
         0b:61:ad:cb:e5:d8:4a:91:6a:77:e3:ab:87:8d:2f:72:f6:79:
         40:fd:32:3b:3a:9a:ad:a4:9e:7b:74:cf:88:c8:2d:4e:e5:01:
         71:6c:dc:dc:09:e9:45:b7:71:e0:77:fd:03:18:78:b3:58:71:
         4e:66:2a:9b:d9:ed:a5:a9:37:69:73:48:be:d1:be:98:7e:74:
         7b:91:c8:42:0e:38:6d:b8:02:b5:9c:5e:a6:3b:83:93:4a:dd:
         cf:1c:2d:ab:6b:c5:31:74:bf:b3:c6:b8:3f:4b:23:a7:6a:0f:
         95:08:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:42 2023 by rpki-client on console-ams.rpki-client.org