Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/JCWsT1KP8-G2Nf_xXuGCZanxrBI.roa
File:                     JCWsT1KP8-G2Nf_xXuGCZanxrBI.roa (raw, json)
Hash identifier:          kLRMTqEjt/9mpJpJGgHfPPVM63Fwjm3wdP4c/x0TRLQ=
Subject key identifier:   24:25:AC:4F:52:8F:F3:E1:B6:35:FF:F1:5E:E1:82:65:A9:F1:AC:12
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       078C
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/JCWsT1KP8-G2Nf_xXuGCZanxrBI.roa
Signing time:             Tue 29 Sep 2020 10:00:32 +0000
ROA not before:           Tue 29 Sep 2020 10:00:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2425AC4F528FF3E1B635FFF15EE18265A9F1AC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:4f:84:d0:68:23:88:7e:46:c7:f0:80:8b:
                    71:2d:75:65:ff:52:e8:31:d4:ec:c8:5a:88:b5:db:
                    e1:91:f3:78:ee:b1:64:91:1b:4f:17:52:dd:15:d6:
                    c8:dc:ec:db:d5:6c:3a:23:b9:3a:4b:a9:6a:c1:bb:
                    a9:41:2c:f5:6b:33:fc:8d:61:fb:b6:91:44:bd:54:
                    a2:1e:a3:f8:25:41:60:e0:dc:79:10:fc:12:c0:5f:
                    dc:5f:82:24:25:07:68:d1:9b:a2:15:1d:89:89:22:
                    30:7a:c2:9d:fa:53:02:63:0f:20:28:a0:76:4e:7e:
                    65:b0:df:0e:38:48:01:c9:01:64:06:14:3c:44:a7:
                    8c:89:9b:bd:7e:b2:75:c3:a1:ff:a2:3a:24:0d:98:
                    08:aa:50:be:12:80:11:d4:aa:e8:c1:24:f1:4f:2a:
                    9d:5e:3c:73:e6:13:83:28:3a:a1:64:fe:1c:3c:d3:
                    e4:22:cd:0e:79:25:0f:83:39:fb:2b:b0:b4:0f:1e:
                    ef:30:a1:65:80:af:f4:7d:f0:34:01:72:62:4a:ba:
                    43:8e:66:5e:e1:ff:59:e7:0b:41:61:8f:7b:be:36:
                    44:e0:b0:ba:04:3d:55:e0:70:ff:b6:f9:37:ee:e6:
                    f2:88:2a:40:5d:5f:bf:64:fc:93:8f:7b:5e:50:1a:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:25:AC:4F:52:8F:F3:E1:B6:35:FF:F1:5E:E1:82:65:A9:F1:AC:12
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/JCWsT1KP8-G2Nf_xXuGCZanxrBI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:01:16:a0:79:20:ec:87:a5:f1:34:9d:19:a9:73:6c:00:34:
         d4:2e:5b:83:e7:0a:d4:e9:52:5e:30:be:d4:04:f7:fe:f1:ea:
         07:e7:11:ad:5c:06:88:5f:8f:0a:d9:e4:fb:cf:d0:f4:65:c5:
         c3:df:ad:c3:c5:80:48:b1:4e:a0:a7:d9:84:6a:bf:3a:60:59:
         e5:04:c4:1d:7a:ad:22:4e:aa:7c:36:0a:33:a5:b6:2d:44:1d:
         49:75:31:f8:e0:21:b8:85:ca:5b:2d:fd:b6:a1:33:18:35:83:
         dc:bd:9b:ae:74:a1:2d:31:39:80:6a:ff:d2:89:08:84:e0:1d:
         97:6b:89:df:c3:86:88:9a:a3:67:d4:3e:eb:5d:e5:02:5b:d0:
         a1:2d:5f:93:18:98:3e:b7:5e:59:78:1b:92:d3:22:b4:41:d9:
         86:a6:d2:6f:a1:5b:54:1f:5e:b5:e9:bd:a6:fb:45:a0:16:e6:
         20:f1:dd:23:f9:4c:e9:40:8f:d7:9a:41:7d:d5:f1:39:f0:a8:
         55:b8:29:8e:60:9c:59:9f:6f:d1:6e:46:64:8d:27:f9:c0:92:
         1d:39:b9:82:3b:79:ed:dc:51:fb:a2:28:09:d1:42:c6:a9:8d:
         17:4e:13:b0:c0:c0:77:2f:4e:08:97:4c:72:a4:ec:0e:09:45:
         5d:10:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org