Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/AsVTktHOT6uSemFT5Z6kV9iPwW8.roa
File:                     AsVTktHOT6uSemFT5Z6kV9iPwW8.roa (raw, json)
Hash identifier:          oiBhjBvkDOBwEoE4Ze16xaXMe9HwvCvWlIr0I7SQwlY=
Subject key identifier:   02:C5:53:92:D1:CE:4F:AB:92:7A:61:53:E5:9E:A4:57:D8:8F:C1:6F
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       093F
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/AsVTktHOT6uSemFT5Z6kV9iPwW8.roa
Signing time:             Sun 07 Feb 2021 11:53:06 +0000
ROA not before:           Sun 07 Feb 2021 11:53:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367 (0x93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 11:53:06 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=02C55392D1CE4FAB927A6153E59EA457D88FC16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:66:22:f7:be:a5:02:f4:52:a8:35:6d:22:
                    c2:f2:46:c3:94:b7:4d:8d:3a:e4:65:9e:15:ab:f6:
                    97:61:f1:25:8f:71:9c:fd:0d:9f:b7:ad:55:73:c7:
                    38:a9:f7:d7:6a:ad:fe:9c:bf:80:fc:f8:7f:41:b7:
                    d0:7e:ae:be:00:fa:ed:15:b0:29:bc:55:cb:ed:e6:
                    e8:a6:81:bc:97:49:1f:2c:02:b3:5a:3e:62:0f:3f:
                    73:c8:2e:70:80:d4:2d:7c:d8:71:4b:9a:a8:08:8e:
                    06:7e:13:48:a8:5d:f0:2d:d2:40:5c:ce:08:c9:55:
                    a7:08:0d:03:f8:df:7a:d5:2e:aa:91:e9:e5:9a:99:
                    dd:6b:d2:b3:54:88:01:45:7d:6b:b4:38:e8:33:27:
                    2e:48:f0:a0:84:6b:ee:ca:91:28:79:8e:9b:ab:33:
                    1f:6b:32:8e:2d:5e:04:62:74:f0:9a:27:f6:98:2c:
                    c1:d6:b8:0b:f6:fb:0e:e2:be:d3:6b:9e:b7:b0:52:
                    06:38:7b:dd:6c:2f:63:2e:6d:1b:2c:5b:89:d3:d7:
                    43:28:f6:0a:cc:33:76:c6:2a:6e:cc:be:09:b7:d7:
                    af:24:25:52:af:15:a6:74:9d:80:ff:ed:4a:d2:26:
                    a4:1f:fa:c1:01:b0:15:a6:4a:46:0a:b5:f8:4a:6e:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C5:53:92:D1:CE:4F:AB:92:7A:61:53:E5:9E:A4:57:D8:8F:C1:6F
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/AsVTktHOT6uSemFT5Z6kV9iPwW8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f3:13:3f:3c:1a:ea:d0:62:c9:57:02:4e:4b:f2:3e:38:0a:
         4a:27:32:55:24:42:bf:30:7d:3d:6c:2e:fc:c9:fe:81:83:e2:
         8c:9d:4c:da:b8:58:19:78:66:a4:3a:b5:0f:aa:89:e7:58:5f:
         81:7b:e1:c7:c1:3b:17:30:9f:dc:58:25:24:cb:d7:58:84:0c:
         2c:d5:56:1b:4a:58:ff:68:88:a0:2a:6f:eb:19:1e:5d:f6:37:
         f6:33:f3:53:4f:a8:36:a6:de:56:13:d7:a8:5c:d2:3d:b7:17:
         40:dd:43:8c:28:a8:31:21:ab:3c:8e:b5:9b:d9:8d:e6:f6:3a:
         b6:6d:36:bd:af:33:0a:8c:fe:ee:fe:17:ef:2e:90:a2:7d:23:
         c8:d8:ba:ce:c4:28:55:7c:19:7d:c7:24:c8:e9:45:08:0f:7e:
         4c:4a:29:c6:8b:ee:9d:b0:03:1b:de:ae:38:0e:1f:c8:c5:bd:
         e4:23:40:40:42:fc:8b:40:8f:6c:36:8f:e9:4b:9c:e8:31:d7:
         2d:fe:75:74:f5:92:01:7f:51:e1:60:09:93:24:2d:d2:27:4f:
         c1:84:85:1d:6e:17:0d:92:ea:b9:f4:f1:24:e2:91:5b:c8:1c:
         f2:84:c1:e3:92:e3:50:66:27:d1:19:00:76:ca:d2:31:fb:66:
         08:35:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org