Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/E9IfVVAjme2Xi1WQXHW4uyPCfcM.roa
File:                     E9IfVVAjme2Xi1WQXHW4uyPCfcM.roa (raw, json)
Hash identifier:          5yTUeDkR2tZ+WVKE47yTLYK7rsrbL1kzdTeWb47D4fU=
Subject key identifier:   13:D2:1F:55:50:23:99:ED:97:8B:55:90:5C:75:B8:BB:23:C2:7D:C3
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0963
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/E9IfVVAjme2Xi1WQXHW4uyPCfcM.roa
Signing time:             Sun 07 Feb 2021 13:05:18 +0000
ROA not before:           Sun 07 Feb 2021 13:05:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        103.30.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2403 (0x963)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 13:05:18 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=13D21F55502399ED978B55905C75B8BB23C27DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:97:dc:e9:45:9c:bc:f9:c3:f1:d2:b2:d9:
                    d9:65:45:cf:de:fe:ad:85:b1:16:9c:b7:d7:3a:47:
                    a2:60:3e:94:a7:bd:2d:24:07:be:68:dc:ef:df:e0:
                    1c:a7:80:6e:71:16:96:ff:bd:9b:c1:2f:49:4d:65:
                    4a:34:99:a6:e7:f7:72:fb:43:48:39:28:63:f1:0e:
                    ca:d7:f9:09:21:32:66:9a:6f:52:5e:f1:03:3b:ff:
                    5b:17:73:5e:9b:27:8c:f8:29:53:23:d9:6f:ed:06:
                    f7:76:42:69:40:f5:7c:93:04:cc:ab:51:fd:b1:aa:
                    e1:87:b8:83:e0:7d:49:a0:57:d2:a7:6d:1b:a7:44:
                    f9:d3:46:b3:86:ba:17:bc:79:e0:e0:1d:2b:c5:f0:
                    5f:12:30:7a:6a:15:24:c5:2e:7b:13:d4:84:dc:e5:
                    21:d1:f5:e1:07:8a:50:d2:1d:55:30:ed:f7:d3:76:
                    82:8f:ed:d4:4f:4a:11:f7:8b:fe:6d:f7:c9:17:ba:
                    d1:0f:0e:6c:74:1e:11:1a:61:99:2f:e5:a8:45:58:
                    a4:58:3d:a8:eb:38:b8:cb:d3:70:f3:04:52:c9:f3:
                    ef:fe:3d:74:99:43:ea:54:ef:40:e1:ee:d0:04:fc:
                    bc:cd:95:0e:e8:f9:7a:3f:d5:23:7e:ba:54:dd:1c:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D2:1F:55:50:23:99:ED:97:8B:55:90:5C:75:B8:BB:23:C2:7D:C3
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/E9IfVVAjme2Xi1WQXHW4uyPCfcM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:73:68:6a:ea:ec:ff:ff:1a:05:8c:5b:f8:2c:34:78:b5:48:
         9f:46:c5:bc:47:ed:64:eb:3b:fa:07:93:1e:75:8e:13:92:df:
         f8:f5:8b:af:ba:57:c7:d8:65:5e:00:cd:ac:fa:7a:c5:e3:df:
         2d:df:00:a5:c9:4b:9f:78:46:16:49:92:b1:f2:09:a5:6f:50:
         48:bf:8d:d5:41:7c:16:ea:b3:fc:e6:53:6e:d7:28:47:5e:71:
         6a:56:6c:0a:12:e5:9a:c5:37:80:fd:38:18:91:e5:84:41:7a:
         8a:bd:aa:e6:f6:0f:ad:c2:22:79:ce:45:d0:1a:98:6a:0c:6b:
         77:07:db:d7:81:5e:37:20:90:dd:6f:b7:c9:0d:8c:3c:58:d3:
         00:b5:4c:7c:31:25:e4:9d:b1:65:c7:87:4c:a8:b2:d6:b3:aa:
         eb:81:81:89:7a:40:7f:1b:0b:78:82:25:8c:23:6b:e6:1f:b0:
         b5:f3:93:42:a2:13:f6:e7:88:e5:14:6a:64:e0:c7:9a:1e:f3:
         1b:8f:28:68:e6:7f:65:c7:22:37:09:9e:55:0b:a5:6a:b0:8e:
         a5:ae:01:5d:35:66:19:c1:f7:35:af:6a:f3:5d:7f:85:89:64:
         51:50:37:60:2c:d8:94:9a:ce:55:1e:02:e0:71:93:b0:47:01:
         aa:83:2e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org