Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/6ljZ54m_IDhu_zgu-8OVPYpmn0M.roa
File:                     6ljZ54m_IDhu_zgu-8OVPYpmn0M.roa (raw, json)
Hash identifier:          fO0sCIwyh7xyx7M4zRN64FM9Fy/jdJPB5G2wp85aagk=
Subject key identifier:   EA:58:D9:E7:89:BF:20:38:6E:FF:38:2E:FB:C3:95:3D:8A:66:9F:43
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/6ljZ54m_IDhu_zgu-8OVPYpmn0M.roa
Signing time:             Thu 15 Sep 2022 02:50:32 +0000
ROA not before:           Thu 15 Sep 2022 02:50:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        103.30.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EA58D9E789BF20386EFF382EFBC3953D8A669F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:8b:d7:8b:46:b5:f1:dc:81:8a:d9:f5:c7:
                    fc:99:dd:1b:1b:6a:6c:90:63:cc:8e:f1:09:8b:cb:
                    e2:2b:3e:f5:9f:6c:83:e9:bc:0b:cb:1a:7f:bf:cf:
                    77:b9:8f:fd:fc:9d:25:85:df:5f:7f:26:12:1b:20:
                    cf:a2:8c:14:e6:6e:34:8c:5c:96:20:ba:f3:61:d9:
                    51:b3:29:2f:0d:4a:25:86:5f:1f:9a:cc:ee:6d:14:
                    9f:22:c0:45:a7:96:d5:1f:44:22:fd:95:df:98:b2:
                    88:e6:93:58:05:c1:a1:30:d5:af:78:3c:4c:b9:1a:
                    44:db:41:e1:91:63:95:31:dd:28:35:f7:7e:90:1d:
                    e2:b4:2b:ab:9a:b6:dd:01:88:20:1b:d9:ce:5d:0e:
                    20:0d:63:52:0c:87:2b:0f:0c:c9:fb:4f:b4:83:ab:
                    95:e7:55:62:5c:1c:f4:78:b6:a0:40:9a:23:10:f6:
                    6b:94:36:9d:f9:a1:ac:6b:56:bc:37:f2:c1:da:36:
                    be:8a:0c:44:d8:a8:0b:3c:ac:e9:7e:5e:b2:7b:02:
                    99:57:87:1a:ab:a8:aa:d7:01:9d:a0:90:79:2b:5f:
                    ac:bd:1c:2a:8f:ce:09:3f:01:4e:41:4e:5b:12:b8:
                    f5:3c:80:5f:aa:34:cc:7f:73:6a:2e:56:aa:53:bd:
                    66:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:58:D9:E7:89:BF:20:38:6E:FF:38:2E:FB:C3:95:3D:8A:66:9F:43
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/6ljZ54m_IDhu_zgu-8OVPYpmn0M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:92:d5:bd:d4:82:e0:3e:9e:4a:ab:90:30:89:01:8a:d8:d0:
         97:59:9b:b3:b3:62:15:00:5f:7f:b0:7a:5f:d6:eb:0b:4e:41:
         15:77:a8:1f:f4:77:8d:9d:4c:80:31:a3:4c:f8:22:46:7b:19:
         70:94:c0:4c:d2:40:cf:85:a9:18:9d:28:fb:6f:fc:60:01:2a:
         bb:7d:10:52:4e:10:c3:3c:33:32:af:20:50:1c:83:4c:07:67:
         3e:28:76:4a:13:fc:50:f5:88:7e:84:37:99:b5:01:06:16:8f:
         3c:a4:90:43:b0:8a:ae:23:4a:a0:57:e7:db:b8:79:9d:4e:57:
         ec:22:ca:d8:3f:a4:b8:a1:b0:60:46:f9:0b:36:f9:ff:57:6e:
         af:06:3c:9c:9d:3d:97:b8:ea:f1:ca:71:80:53:38:35:06:02:
         26:fc:de:26:20:87:1c:6c:23:37:f4:73:f3:97:80:c7:42:d2:
         e7:ea:4b:b7:7c:41:c2:f8:3f:34:2e:38:16:36:8f:27:f2:43:
         96:14:8b:d1:e5:6f:5d:44:06:e3:4d:2b:72:a8:ae:43:6c:fe:
         77:e5:9f:8c:aa:22:50:95:94:d5:45:70:f1:0f:f3:d1:f4:9f:
         cc:24:1a:20:6c:48:5e:d9:d5:ff:5a:ff:4b:ce:5f:c8:a6:b7:
         7a:bf:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org