Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3sVmF-0caYuH1NRzQ9nagMef0MI.roa
File:                     3sVmF-0caYuH1NRzQ9nagMef0MI.roa (raw, json)
Hash identifier:          37A2/1bSXsJbQVYUHDt7VakSLFIRnttHSzHEjw6ee+Y=
Subject key identifier:   DE:C5:66:17:ED:1C:69:8B:87:D4:D4:73:43:D9:DA:80:C7:9F:D0:C2
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       095F
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3sVmF-0caYuH1NRzQ9nagMef0MI.roa
Signing time:             Sun 07 Feb 2021 13:05:15 +0000
ROA not before:           Sun 07 Feb 2021 13:05:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        103.30.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399 (0x95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 13:05:15 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DEC56617ED1C698B87D4D47343D9DA80C79FD0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:7c:27:71:46:b8:ec:fc:77:15:d8:ee:86:
                    66:1e:f5:6e:5b:0b:a2:c8:1d:6f:83:bb:65:a4:65:
                    9b:95:2b:aa:61:21:a9:ae:b8:ba:73:3b:c5:38:0e:
                    6c:0e:0b:52:64:5b:a3:e1:ed:ea:0c:93:c0:a1:78:
                    74:83:11:9a:e4:fa:3c:8d:a2:68:f3:bf:d9:37:0d:
                    9d:f2:a2:07:0d:4c:48:1d:05:74:b8:5b:5e:3a:84:
                    23:29:c9:2f:63:c7:e1:3a:d9:07:fd:a1:70:60:6a:
                    f6:6f:73:2e:ad:71:32:63:44:a9:53:b7:6f:fa:e6:
                    6c:01:f7:62:48:7d:87:76:75:88:4c:71:c5:11:15:
                    b0:dc:7d:2b:05:80:55:d9:b9:5d:e5:18:76:a0:7c:
                    68:59:8c:77:4b:d8:0a:16:e1:d3:4e:3f:73:cc:ce:
                    9e:59:44:f5:51:1c:8f:33:ba:b8:41:71:ca:d9:52:
                    42:d0:6d:58:85:25:c4:cf:e5:36:1a:fc:05:cb:f0:
                    82:ec:57:ec:db:b9:13:fd:53:0f:21:83:5a:b2:38:
                    d5:bb:36:23:ad:7a:3e:48:27:59:f6:6a:33:cb:ca:
                    eb:2f:cf:1a:45:f3:76:48:62:7c:37:3f:86:ce:94:
                    e6:a9:13:d2:95:39:1c:94:a6:31:be:50:98:89:70:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C5:66:17:ED:1C:69:8B:87:D4:D4:73:43:D9:DA:80:C7:9F:D0:C2
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3sVmF-0caYuH1NRzQ9nagMef0MI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:dc:c1:0b:1e:14:20:94:22:17:10:6f:9f:4f:bc:22:4a:55:
         45:28:e5:68:e5:8e:11:0f:ce:15:0e:24:4c:17:86:ae:13:90:
         a3:74:59:39:e2:0e:f9:8f:32:25:a4:2a:f7:4f:b4:dc:53:22:
         f3:e7:d8:2d:e9:9a:85:9d:e9:44:33:3d:04:6b:06:80:8a:d3:
         c0:a2:5a:df:52:91:13:f8:6e:f1:01:02:88:40:c7:ba:ba:4b:
         fb:94:30:8a:d3:5f:29:fa:07:f7:08:80:6c:92:da:cc:a6:3e:
         20:ba:f3:ec:61:15:97:07:10:df:05:f3:ec:95:13:4f:7a:b8:
         86:4a:c6:8b:7a:86:2c:83:e5:42:41:c1:f6:8e:ee:d6:78:9b:
         25:8a:5a:05:5d:3e:e7:4e:4c:1d:0d:6a:b7:aa:ec:41:bb:c8:
         4e:ad:9b:2e:71:fb:41:84:76:95:44:1e:27:d6:7e:09:2d:de:
         f6:9f:0c:ea:e3:7b:38:45:66:6d:46:81:f2:36:21:be:36:18:
         b0:71:a2:93:48:0c:74:5d:06:bb:91:7f:c0:6d:43:5d:d9:d3:
         2a:26:41:6b:3e:be:80:7a:34:5f:42:1f:48:ad:3d:38:b5:3a:
         e2:a2:4e:1c:a3:2e:d4:97:a4:a7:ad:62:94:26:60:e5:98:0c:
         be:37:7d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org