Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PkOQ8DlvsHrsa7z5504343Lobt8.roa
File:                     PkOQ8DlvsHrsa7z5504343Lobt8.roa (raw, json)
Hash identifier:          W5V+L/wSKqLhU23TGpoaWf0r5Wq1z+Xg4BKKl82YLAw=
Subject key identifier:   3E:43:90:F0:39:6F:B0:7A:EC:6B:BC:F9:E7:4E:37:E3:72:E8:6E:DF
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0953
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PkOQ8DlvsHrsa7z5504343Lobt8.roa
Signing time:             Sun 07 Feb 2021 11:53:19 +0000
ROA not before:           Sun 07 Feb 2021 11:53:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        103.30.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 11:53:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3E4390F0396FB07AEC6BBCF9E74E37E372E86EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:56:5f:8c:d6:8a:25:96:c3:f6:eb:e5:19:
                    17:a4:6c:62:86:b7:ab:b2:ce:47:86:74:95:2b:81:
                    75:75:3c:9e:09:69:be:be:00:67:c8:1d:b5:bf:09:
                    f2:8b:6e:64:cf:09:9b:25:1e:a2:b6:95:29:c6:e2:
                    30:c9:90:fc:52:95:dd:66:03:78:c0:cc:d9:7c:95:
                    9f:bf:36:31:89:87:5c:a7:ce:86:cc:30:ca:4c:35:
                    d4:34:36:5b:3d:f6:96:eb:2a:fd:9f:1c:90:ce:57:
                    d4:f7:35:f6:05:32:b1:67:bd:52:3b:48:65:97:81:
                    fc:da:d3:c7:6c:e7:c0:9f:3d:b2:96:3f:94:f3:a2:
                    95:f4:aa:46:79:8a:f1:79:23:67:55:97:93:93:b2:
                    a6:9e:3c:29:c0:a2:18:3f:64:56:77:3b:f1:a6:75:
                    29:1e:63:01:d6:fc:8f:d3:13:10:dc:c2:8c:3f:36:
                    64:f9:dc:d8:70:92:80:e8:60:d5:3a:82:ec:7f:2e:
                    dd:e1:57:3a:d7:90:3d:7f:a2:d3:f3:56:72:a3:86:
                    78:c7:dc:43:c0:00:c5:d7:ee:a5:9a:7a:1b:e0:66:
                    64:e8:5d:34:96:8b:30:43:3f:76:48:96:5a:09:8e:
                    94:ee:bf:a4:fe:7c:ca:fc:31:2a:f0:c0:2a:49:75:
                    f9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:43:90:F0:39:6F:B0:7A:EC:6B:BC:F9:E7:4E:37:E3:72:E8:6E:DF
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PkOQ8DlvsHrsa7z5504343Lobt8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:77:77:32:1c:d2:73:4a:86:55:7b:38:c8:0c:b5:56:93:
         7f:c2:eb:f1:ff:4d:05:55:b5:3b:65:0d:9a:33:a6:fd:7a:2e:
         fc:b2:03:89:c4:fb:1b:fb:88:b1:b7:74:cf:1d:8b:22:d9:ba:
         d1:19:3e:e0:e9:e8:29:c8:b2:70:44:8e:22:4b:9b:e2:6c:3d:
         61:62:70:6c:ba:f6:43:bc:ce:73:1b:2d:47:0a:96:ec:74:41:
         8b:be:bd:4b:c5:07:0f:91:6b:8e:13:78:ab:b0:7b:db:46:c8:
         cf:04:77:90:10:da:e8:92:e0:b1:e0:d5:17:bf:86:d8:ec:e0:
         ac:41:a6:c5:1f:8b:40:72:2c:5a:11:4a:a7:eb:e6:15:9a:07:
         69:04:e6:1a:ac:a1:bc:05:33:96:b3:1b:f4:dd:b4:5e:5f:8d:
         ae:72:53:63:f8:94:7e:7c:f5:18:cc:3c:cb:6f:e9:82:37:0e:
         21:5c:42:b7:28:68:6d:34:8a:c3:1b:11:a3:c6:79:c8:67:b2:
         e9:95:c5:c5:50:8d:67:30:9a:ba:6f:0c:5e:cd:8c:9b:08:85:
         ac:10:84:1f:5d:7b:b6:9a:ac:60:b4:32:6d:18:56:93:c5:8a:
         0d:61:bb:90:29:af:5f:17:6a:22:23:91:ca:03:77:91:2c:c8:
         7e:f9:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org