Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/8E9WNL2FeWZsFbK2YmNV6ZKx71k.roa
File:                     8E9WNL2FeWZsFbK2YmNV6ZKx71k.roa (raw, json)
Hash identifier:          YETG1uCVFSR7ba1Q/2OBhY9XzcvH7Wd6VqyEtsJyHv0=
Subject key identifier:   F0:4F:56:34:BD:85:79:66:6C:15:B2:B6:62:63:55:E9:92:B1:EF:59
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0796
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/8E9WNL2FeWZsFbK2YmNV6ZKx71k.roa
Signing time:             Tue 29 Sep 2020 10:00:35 +0000
ROA not before:           Tue 29 Sep 2020 10:00:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        103.30.44.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1942 (0x796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F04F5634BD8579666C15B2B6626355E992B1EF59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:3d:87:2f:1f:ca:3a:04:b3:c5:3d:1b:f8:
                    05:62:91:d1:75:12:56:c0:9a:0b:75:5a:28:55:a8:
                    b1:0b:5a:d3:64:41:88:f0:f0:a8:d2:bb:68:ec:58:
                    28:ea:32:c9:0e:cf:56:fb:0d:0c:ff:30:e0:50:dc:
                    39:1e:81:db:d9:e0:87:86:2a:af:8a:3c:6c:19:ef:
                    16:b0:73:9f:85:5d:7f:ff:db:c1:a7:b5:65:bb:6d:
                    f7:b9:35:f7:74:b9:f9:ae:f0:ed:a6:40:44:d0:cc:
                    ea:65:7a:ed:27:c1:6f:8b:b4:74:61:11:c5:b3:72:
                    97:6a:91:b3:3b:c4:ed:fa:88:cd:c1:48:3c:9e:5b:
                    61:b5:79:2e:a2:49:f6:d6:eb:76:13:34:b1:fc:7e:
                    82:6f:f7:fd:ff:a1:df:e3:9d:8d:6c:d9:52:21:7e:
                    a5:62:48:41:4f:91:20:81:9f:e9:3e:5c:f6:98:c6:
                    0c:e8:c5:46:13:d5:fa:6d:fd:e6:e1:9a:39:88:8c:
                    3c:be:ae:8d:22:c7:b3:44:e9:6f:81:87:c2:38:6b:
                    2c:78:03:a1:3c:df:1e:c7:56:38:e4:be:53:cf:c0:
                    51:cf:17:12:03:95:1a:dc:c8:42:2d:db:ae:ce:a8:
                    04:63:98:43:62:86:63:b8:fe:18:68:f4:48:9b:f9:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:56:34:BD:85:79:66:6C:15:B2:B6:62:63:55:E9:92:B1:EF:59
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/8E9WNL2FeWZsFbK2YmNV6ZKx71k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:3b:6c:52:93:2b:92:54:94:de:dd:c5:5e:76:87:45:38:44:
         2e:73:53:cd:86:77:b9:11:96:62:82:ef:55:8a:37:90:59:84:
         d3:51:17:a0:00:bb:c4:31:03:e9:8b:03:d2:59:95:c4:bc:4f:
         58:cd:d9:a0:58:ad:8e:c6:6f:29:dd:fb:84:35:fd:23:59:0b:
         4d:09:d3:d0:22:5a:ce:d0:71:88:ef:c7:fb:bf:70:52:ff:92:
         c0:94:d9:95:63:b7:70:e2:c2:5b:30:64:8c:d2:03:e4:44:07:
         19:77:cd:8d:bf:1b:95:f5:f5:de:7c:47:a7:ba:50:ad:a4:2d:
         fd:c6:95:c5:82:37:cf:2a:49:7e:f4:db:9a:4c:43:86:05:96:
         40:8c:28:00:25:c7:16:fd:ea:ba:cd:37:9b:79:a5:dc:48:d5:
         9f:81:c2:6c:18:46:fd:53:e3:c7:bc:4f:d9:31:ef:5f:2a:22:
         a8:5d:29:ff:45:a6:15:66:0f:82:35:bd:f5:ea:74:d0:0b:5b:
         3a:61:1c:81:5a:21:d1:47:89:c5:cd:cb:d1:ce:23:b3:0c:34:
         54:fd:59:6e:b9:8b:d7:53:4f:0a:c3:f9:e0:0e:a7:5d:b0:e3:
         f7:8a:db:f4:c5:56:c0:ab:be:2a:3d:85:fb:36:87:f8:89:79:
         f2:02:cc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:42 2023 by rpki-client on console-ams.rpki-client.org