Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/AmPIDZCftqAfPlvxof6QdXaqc_U.roa
File:                     AmPIDZCftqAfPlvxof6QdXaqc_U.roa (raw, json)
Hash identifier:          CmuBMQvQK/PZR2BxwFwM+MCXy/yw2zXF4vl7fc5pGwQ=
Subject key identifier:   02:63:C8:0D:90:9F:B6:A0:1F:3E:5B:F1:A1:FE:90:75:76:AA:73:F5
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/AmPIDZCftqAfPlvxof6QdXaqc_U.roa
Signing time:             Thu 15 Sep 2022 02:50:32 +0000
ROA not before:           Thu 15 Sep 2022 02:50:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        121.50.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0263C80D909FB6A01F3E5BF1A1FE907576AA73F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:00:28:ac:f0:a9:4d:c0:0e:68:ba:c5:8e:
                    07:35:7c:e5:3a:e9:bc:6c:24:fe:52:0a:31:f4:85:
                    a1:88:3c:d6:02:0f:44:ac:65:65:48:68:9c:68:eb:
                    95:18:71:6e:9a:fd:5b:24:f0:87:2b:b0:be:58:40:
                    37:ef:1f:14:d2:66:64:65:d0:a5:e5:34:35:3f:51:
                    84:f2:3b:23:23:32:4e:d0:47:80:57:a5:43:d8:f1:
                    74:af:12:82:20:7b:29:d7:62:cc:ab:bc:a3:6c:cf:
                    7b:b4:78:18:91:61:a4:cb:56:0c:3a:1b:35:f3:92:
                    43:40:1b:a2:11:87:fb:1f:91:ca:48:c1:64:a9:fc:
                    77:1b:fd:1d:ca:98:10:aa:72:39:4e:c2:20:69:e8:
                    95:cb:10:61:c1:24:53:fc:6a:8e:f3:cd:08:2c:fd:
                    48:91:95:84:bd:da:69:75:aa:7a:81:b8:90:52:cf:
                    19:e9:fb:65:c4:d1:67:00:f2:ef:ac:42:ff:ad:30:
                    1c:95:2a:03:52:e0:3c:bd:65:ca:75:77:01:00:f7:
                    48:49:83:fa:b1:ea:f9:4e:42:a8:03:42:b5:6e:0c:
                    a4:de:16:d7:df:ea:34:2e:1f:a7:c8:10:7a:16:07:
                    ce:87:86:f1:82:ca:8f:95:d5:ae:55:af:cd:be:30:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:63:C8:0D:90:9F:B6:A0:1F:3E:5B:F1:A1:FE:90:75:76:AA:73:F5
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/AmPIDZCftqAfPlvxof6QdXaqc_U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a7:47:ca:b6:2c:bf:89:51:68:5f:a5:25:87:0b:f4:8c:77:
         33:66:96:2b:c1:10:24:82:c8:7d:23:63:fe:a4:21:36:b5:76:
         94:7a:a2:4b:16:2d:aa:4c:52:27:ff:39:c5:64:f6:d4:e9:66:
         07:54:44:4a:a9:1a:77:6f:75:19:c1:25:f6:ee:ed:3a:94:c7:
         97:ba:56:f3:65:cf:a4:a8:bc:79:38:bc:c4:3d:02:5e:6b:0f:
         46:31:56:c8:59:08:ed:a0:cb:68:1d:01:0e:86:5b:74:c7:47:
         e8:58:c0:ab:7a:1e:d4:cd:ef:dd:c7:ff:31:da:8d:b2:df:44:
         70:d3:15:94:1c:0b:9e:0f:67:92:71:da:3d:67:4a:21:eb:15:
         39:78:69:18:27:e7:55:13:bd:bb:0f:f7:d5:ae:28:3b:9a:d9:
         8e:f4:8c:3f:51:b9:87:cd:70:37:b7:70:fc:c4:52:e5:5f:c3:
         2c:ef:78:df:80:5d:4c:80:dc:41:51:95:cd:bc:3f:d5:d3:c0:
         52:07:ac:60:ff:a2:2a:54:a2:11:10:e9:b5:ee:f0:ef:2e:17:
         77:df:84:c5:46:d3:02:03:f1:53:f7:1f:c9:a2:b1:19:cf:4d:
         3c:6e:55:f7:5a:cb:14:96:ec:9f:05:3b:67:bb:28:f0:f5:42:
         41:80:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org