Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/IgFtzy6ThI9KRagUgfXS5kbQd4c.roa
File:                     IgFtzy6ThI9KRagUgfXS5kbQd4c.roa (raw, json)
Hash identifier:          fkN/1EQSIK/2MKstn4g6vsTSQrl6iwwwtZ1sUXC2DNQ=
Subject key identifier:   22:01:6D:CF:2E:93:84:8F:4A:45:A8:14:81:F5:D2:E6:46:D0:77:87
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/IgFtzy6ThI9KRagUgfXS5kbQd4c.roa
Signing time:             Thu 15 Sep 2022 02:50:30 +0000
ROA not before:           Thu 15 Sep 2022 02:50:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        121.50.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=22016DCF2E93848F4A45A81481F5D2E646D07787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:49:e1:cf:ce:b5:a9:48:7f:d5:af:92:cd:69:
                    3c:28:d4:88:d5:01:30:2b:bc:70:5d:78:32:3f:49:
                    0f:be:d0:42:0a:3e:b9:5f:4b:0e:52:6c:a2:c8:4f:
                    f3:14:a1:01:0d:9b:f2:ca:47:e2:ea:5b:20:c1:21:
                    5f:d6:96:7d:f5:9a:ab:f4:fd:63:98:e9:83:47:0a:
                    a6:69:6b:3b:ea:60:af:e9:38:e7:93:d5:9f:5f:7f:
                    b4:ef:bb:1a:ca:e2:e0:f1:6e:f8:e0:10:bc:c2:a3:
                    28:6e:98:9f:d0:6c:73:b0:b8:39:96:8d:8d:f8:41:
                    6f:bf:f9:bf:8a:43:b2:f4:90:f2:81:ee:4c:b3:e5:
                    40:c9:95:2f:55:b0:14:16:e9:2a:00:e0:ef:07:37:
                    26:84:79:f3:54:d9:89:26:d2:25:fb:f3:5b:2a:1d:
                    d2:62:e1:22:01:ba:e3:7b:a8:69:e0:f3:c6:ca:10:
                    63:72:7d:45:20:25:78:af:04:31:0d:bd:c8:9b:aa:
                    ca:1c:63:e5:5b:47:0f:bd:79:4c:a3:52:82:da:cb:
                    44:9e:72:74:6b:68:b5:dc:60:6c:ea:8c:7d:bc:95:
                    37:ea:66:81:ea:d6:71:8e:43:f6:29:61:f0:25:30:
                    1f:38:f6:e4:eb:91:fe:c8:70:65:ac:b4:5b:4e:10:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:01:6D:CF:2E:93:84:8F:4A:45:A8:14:81:F5:D2:E6:46:D0:77:87
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/IgFtzy6ThI9KRagUgfXS5kbQd4c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b1:0a:32:9a:d2:70:13:cd:39:fe:3e:45:cb:9f:a8:38:c6:
         fd:24:ae:a8:dd:3f:5e:01:37:b3:08:f7:6d:30:84:18:65:e3:
         4b:b8:e4:0f:82:ef:ce:ac:29:96:3d:be:a4:ed:c4:60:a4:b8:
         7c:2b:7d:d7:34:62:48:e4:ca:41:3e:be:c4:7f:a1:7a:aa:30:
         ba:54:b0:19:09:bf:c3:1f:3c:10:4d:e6:61:cd:04:d9:f5:33:
         b2:57:1e:f5:ac:d8:78:be:fd:e0:04:b8:b5:7e:17:01:1e:26:
         83:e7:6f:ab:83:41:74:db:be:f3:82:f8:dd:96:02:dd:a8:34:
         97:7c:84:df:d6:98:ab:8c:e1:c4:b1:d6:70:4d:3b:fa:75:47:
         6a:a1:6c:ef:02:a2:c2:29:fe:27:f8:a8:f2:7f:bb:13:1c:11:
         83:7c:b2:e2:f1:16:8e:b0:a5:a6:d9:09:6d:7d:5b:aa:40:cc:
         42:c9:9a:23:ec:86:22:1b:c3:9b:cd:e7:d4:22:7c:ee:fd:98:
         af:44:8e:15:4e:3c:17:f1:45:ad:d5:7c:18:11:34:47:2e:df:
         83:61:93:fa:1e:06:2f:9d:02:de:d7:d6:a8:2a:dc:10:dd:4c:
         88:91:72:db:c1:0c:09:0e:7c:56:b2:91:6a:63:b9:82:b3:bc:
         b5:a5:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org