Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/F7xloExEEk1Ri_0WMHI8AbPDmK0.roa
File:                     F7xloExEEk1Ri_0WMHI8AbPDmK0.roa (raw, json)
Hash identifier:          i1ycFYwMjaA0REbFdktro9Ehji7Mo7P1D++LgLGyCZg=
Subject key identifier:   17:BC:65:A0:4C:44:12:4D:51:8B:FD:16:30:72:3C:01:B3:C3:98:AD
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0880
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/F7xloExEEk1Ri_0WMHI8AbPDmK0.roa
Signing time:             Wed 04 Nov 2020 09:05:37 +0000
ROA not before:           Wed 04 Nov 2020 09:05:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        103.30.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2176 (0x880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Nov  4 09:05:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=17BC65A04C44124D518BFD1630723C01B3C398AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:f4:c9:2a:2b:5b:9f:06:eb:1f:13:89:8e:
                    ae:87:de:b2:3d:b7:43:95:78:f8:be:90:56:87:86:
                    1f:80:97:99:96:5e:59:00:5c:31:1f:4f:58:b8:19:
                    b2:f8:17:43:de:d1:13:85:21:fa:54:61:08:d4:8e:
                    3e:9c:0a:17:1c:d3:10:fc:fe:d2:ef:7a:0a:cb:35:
                    b4:24:51:17:87:d3:24:78:8d:54:ba:26:2f:3f:e3:
                    11:b6:d4:4a:d4:bd:cd:cb:81:f8:f0:da:f9:af:ff:
                    e1:f3:38:c4:40:6b:da:23:af:17:d3:5d:51:e9:81:
                    dc:d3:7d:19:e5:f9:95:a0:da:16:40:4e:37:f2:08:
                    e6:95:9f:c3:4f:c2:50:67:4a:75:55:5d:4b:fa:86:
                    1d:c1:6f:45:24:70:88:99:9f:f4:78:90:ea:5f:7b:
                    26:ae:4a:33:ca:aa:59:04:3a:aa:49:4c:c5:3a:e1:
                    dc:cc:33:2e:b2:e8:3c:2c:25:da:78:7b:51:d6:04:
                    86:30:a3:eb:58:38:96:6d:7d:06:0d:79:6b:ac:b2:
                    a0:2a:9e:2e:94:8e:77:64:e4:dc:65:d7:60:92:e9:
                    6e:54:d3:81:17:36:33:61:9a:1b:03:2e:6e:59:fd:
                    41:0e:4c:5a:54:6e:93:27:1e:41:b7:a9:1a:6b:ec:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BC:65:A0:4C:44:12:4D:51:8B:FD:16:30:72:3C:01:B3:C3:98:AD
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/F7xloExEEk1Ri_0WMHI8AbPDmK0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:98:f7:5a:67:51:b1:d7:ba:ca:cd:c2:2a:34:22:21:f7:3c:
         c7:c7:da:a4:c0:7e:d9:28:46:be:4d:73:50:4e:cb:b8:e3:6f:
         f6:5e:90:1a:3f:4e:af:ae:64:ef:e3:30:75:bb:8e:ce:67:ff:
         41:a0:94:0a:78:ad:ed:76:78:f0:f8:04:3e:ca:a4:30:19:5c:
         e1:73:59:b0:76:cf:5f:b6:3b:44:73:8c:3f:d5:ca:76:ac:0c:
         04:ca:56:05:aa:d2:38:ef:ec:7b:17:e5:a9:e0:ec:56:5d:69:
         8d:7e:15:7a:0c:cd:79:73:a2:4b:84:fe:f3:d7:9c:61:46:b1:
         b0:71:cc:b9:a4:21:df:1f:dc:29:d9:e3:e7:4d:ac:d6:2e:e6:
         15:c2:b0:31:f4:44:8d:97:5b:65:8c:78:8b:80:70:71:06:84:
         a7:18:ed:63:92:f8:57:32:21:1b:fb:b7:75:e3:dd:f9:36:8b:
         fd:9f:55:27:a0:a4:a0:bf:3c:21:f1:34:53:4f:06:3e:2f:de:
         31:b3:d5:1d:6c:30:d4:91:3c:55:a6:31:3a:82:97:9d:c6:06:
         01:af:de:bc:a3:ec:1f:68:64:9f:65:5c:7c:3c:a8:ec:9e:9c:
         16:95:c7:bd:df:ea:3c:23:ed:f5:ad:83:75:d0:c2:4e:aa:29:
         f9:96:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org