Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/BxxVhT20N5ugcuW9HFTDYuEky84.roa
File:                     BxxVhT20N5ugcuW9HFTDYuEky84.roa (raw, json)
Hash identifier:          8EjNZOs67cUVkHZKSwJaGmM0SNu3wZYus/9qP/geZXI=
Subject key identifier:   07:1C:55:85:3D:B4:37:9B:A0:72:E5:BD:1C:54:C3:62:E1:24:CB:CE
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       084E
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/BxxVhT20N5ugcuW9HFTDYuEky84.roa
Signing time:             Wed 04 Nov 2020 08:30:03 +0000
ROA not before:           Wed 04 Nov 2020 08:30:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        103.30.44.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2126 (0x84e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Nov  4 08:30:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=071C55853DB4379BA072E5BD1C54C362E124CBCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:e0:7e:f2:e9:19:34:30:0c:b0:2b:9f:30:
                    4b:71:7e:8d:d5:21:91:bb:04:c0:22:9a:71:dc:6b:
                    02:4a:a2:0b:23:8f:6c:aa:3f:45:ba:27:94:e4:d8:
                    85:f8:90:2a:51:e8:ec:ab:6a:35:2b:ea:5a:cb:7c:
                    12:a8:30:4d:2c:e2:71:a3:d4:10:1c:5d:c6:41:6c:
                    fc:89:a3:1b:a1:46:8d:ec:5c:29:d5:cf:8f:09:1d:
                    e7:24:b5:14:0b:d8:29:0f:21:30:43:e7:2f:1a:79:
                    ba:29:e7:32:4e:70:01:cf:93:dd:17:84:29:b9:8c:
                    76:41:ad:34:f0:9d:4c:03:52:c2:ee:11:28:bb:5d:
                    4a:c7:ae:4d:ea:3d:4d:46:dc:02:9e:02:b8:ac:78:
                    46:70:d6:96:0e:5b:66:3f:bc:2b:dc:f5:78:f6:75:
                    95:f1:ed:e5:99:65:12:30:4e:5e:d5:fd:30:d1:cc:
                    fc:01:bc:53:5c:00:4f:f6:c6:ac:8a:9c:70:02:1d:
                    05:4d:b4:e8:a5:2e:d3:6e:9e:47:fb:f3:3b:6e:dd:
                    91:43:6f:00:50:7f:a6:5f:99:45:7a:14:12:e1:20:
                    a0:ce:99:cb:63:7c:69:d4:a5:7d:75:c3:53:18:0f:
                    73:10:38:8a:f0:82:d0:21:12:9a:1f:20:f1:28:8c:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1C:55:85:3D:B4:37:9B:A0:72:E5:BD:1C:54:C3:62:E1:24:CB:CE
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/BxxVhT20N5ugcuW9HFTDYuEky84.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:9a:8c:bf:09:25:d9:d0:ae:c1:7a:11:65:fc:d9:c6:9d:8d:
         fc:48:e0:ca:e3:ca:5a:60:cb:d9:54:52:be:f1:ec:09:e6:9c:
         f0:e2:a4:41:f5:9f:58:b3:22:0f:c2:f2:dc:81:82:c2:90:51:
         38:b1:04:e3:38:1d:b8:1c:ee:8c:56:b7:0c:0d:86:83:d7:25:
         2d:95:2f:b8:ca:0b:10:9a:29:2e:ab:a7:c8:de:63:e6:4c:04:
         ad:b9:74:38:de:50:73:37:cd:b8:f5:69:21:31:b6:b3:c2:58:
         8c:d5:aa:d8:55:40:97:63:c6:cd:5f:a4:ac:31:fa:b1:be:96:
         6a:6b:a6:bc:73:3b:84:89:0c:90:e7:d7:ad:3b:c4:be:fe:ad:
         d8:d9:e9:81:53:29:0d:bc:08:4e:7a:52:10:40:06:f0:29:1a:
         44:e3:ef:73:0f:20:54:d9:03:70:b6:1b:35:7f:36:93:ff:1f:
         88:28:ee:84:48:a8:43:be:a0:f3:e0:79:e9:e3:88:2a:86:70:
         bb:10:f3:be:fd:af:88:77:94:1f:04:d8:b6:00:6c:91:0e:ea:
         d7:37:31:10:3c:ec:96:1f:25:8b:06:e2:a3:ce:c5:2a:ea:83:
         70:53:af:f3:85:b2:55:7b:bd:a9:d0:be:35:3f:7c:a4:9f:94:
         4a:38:87:8b
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMDExMDQw
ODMwMDNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA3MUM1NTg1M0RCNDM3
OUJBMDcyRTVCRDFDNTRDMzYyRTEyNENCQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTgOB+8ukZNDAMsCufMEtxfo3VIZG7BMAimnHcawJKogsjj2yq
P0W6J5Tk2IX4kCpR6OyrajUr6lrLfBKoME0s4nGj1BAcXcZBbPyJoxuhRo3sXCnV
z48JHecktRQL2CkPITBD5y8aebop5zJOcAHPk90XhCm5jHZBrTTwnUwDUsLuESi7
XUrHrk3qPU1G3AKeAriseEZw1pYOW2Y/vCvc9Xj2dZXx7eWZZRIwTl7V/TDRzPwB
vFNcAE/2xqyKnHACHQVNtOilLtNunkf78ztu3ZFDbwBQf6ZfmUV6FBLhIKDOmctj
fGnUpX11w1MYD3MQOIrwgtAhEpofIPEojPbvAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUBxxVhT20N5ugcuW9HFTDYuEky84wHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL0J4eFZoVDIwTjV1
Z2N1VzlIRlREWXVFa3k4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnHiwwDQYJKoZIhvcNAQELBQADggEBALWajL8JJdnQrsF6EWX82cadjfxI
4Mrjylpgy9lUUr7x7AnmnPDipEH1n1izIg/C8tyBgsKQUTixBOM4Hbgc7oxWtwwN
hoPXJS2VL7jKCxCaKS6rp8jeY+ZMBK25dDjeUHM3zbj1aSExtrPCWIzVqthVQJdj
xs1fpKwx+rG+lmprprxzO4SJDJDn1607xL7+rdjZ6YFTKQ28CE56UhBABvApGkTj
73MPIFTZA3C2GzV/NpP/H4go7oRIqEO+oPPgeenjiCqGcLsQ8779r4h3lB8E2LYA
bJEO6tc3MRA87JYfJYsG4qPOxSrqg3BTr/OFslV7vanQvjU/fKSflEo4h4s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org