Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PncCbtf3qIFv4Q_VGVtpJldTUN0.roa
File:                     PncCbtf3qIFv4Q_VGVtpJldTUN0.roa (raw, json)
Hash identifier:          qWsw1YsLq5znTGbH0sc0ECAd7uKGOSXFbNpLfuvD/hw=
Subject key identifier:   3E:77:02:6E:D7:F7:A8:81:6F:E1:0F:D5:19:5B:69:26:57:53:50:DD
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0854
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PncCbtf3qIFv4Q_VGVtpJldTUN0.roa
Signing time:             Wed 04 Nov 2020 08:30:41 +0000
ROA not before:           Wed 04 Nov 2020 08:30:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        103.30.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2132 (0x854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Nov  4 08:30:41 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3E77026ED7F7A8816FE10FD5195B6926575350DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:8c:88:eb:f8:b0:02:ce:66:2a:87:ce:38:
                    f3:68:79:75:76:90:e7:2c:50:2e:be:39:54:1a:11:
                    31:10:2a:31:25:b3:26:24:85:c0:6a:56:28:ab:f6:
                    74:cb:0a:8e:d0:09:5e:ec:65:f2:47:5a:91:9a:e3:
                    9f:c2:37:4a:9a:e3:62:aa:5e:48:43:b5:73:fa:93:
                    aa:77:79:3b:c6:d1:f9:a3:2d:69:3e:4b:87:e3:4d:
                    33:6f:29:f6:96:f7:14:a1:09:f3:60:9e:fc:d7:bb:
                    90:54:9e:91:00:9c:04:50:3d:49:ac:37:ee:71:01:
                    55:7b:12:d8:ab:bd:5e:ca:e8:7c:c5:6a:bb:94:f2:
                    bf:9c:e0:1c:ad:c4:6d:2e:d2:dd:7c:d5:11:24:3e:
                    61:f7:0f:66:cb:8c:77:3d:56:d5:eb:b3:43:ea:4d:
                    48:c8:ed:75:0e:97:7e:2a:08:c3:13:7c:17:f4:6e:
                    02:98:74:f2:7d:cd:e6:7f:b8:e0:10:3f:02:cd:61:
                    40:9a:93:30:7b:3b:80:3d:5b:da:af:33:a4:ce:61:
                    21:ac:22:43:12:3c:e5:8c:c8:9c:86:a8:46:d5:a1:
                    5d:26:0f:41:68:41:ac:03:d3:b4:ab:46:6f:ba:b3:
                    5f:ee:17:d7:9b:2e:3c:6f:8a:8d:95:e1:33:95:98:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:02:6E:D7:F7:A8:81:6F:E1:0F:D5:19:5B:69:26:57:53:50:DD
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/PncCbtf3qIFv4Q_VGVtpJldTUN0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:83:3b:0f:7a:94:c9:f9:ec:4d:77:59:4d:f8:34:16:e0:cd:
         ef:b5:21:2a:07:4d:72:15:58:ce:7c:ca:b5:e3:d4:ab:39:4c:
         ca:9b:04:5b:f8:28:b6:57:e1:dc:68:22:27:59:9f:35:ce:e1:
         a1:7c:7f:e6:f6:94:64:fa:c2:2f:82:7b:94:5e:c1:60:29:fb:
         09:3a:b9:17:53:bf:b1:e0:e4:e4:71:06:ff:2f:27:e9:8b:35:
         48:27:99:2c:cd:e1:7c:57:96:98:70:26:99:93:f0:ad:32:a9:
         43:32:db:57:39:79:13:68:a8:42:cd:16:cd:9f:5a:0e:06:63:
         15:94:9c:f6:09:46:15:2c:48:61:18:7d:69:be:8d:d0:46:56:
         d8:9c:3b:c5:23:b0:37:71:70:6f:b8:e4:f3:50:12:bf:3a:69:
         a7:39:79:71:ce:47:69:f5:0c:32:87:08:0b:d6:87:ed:32:99:
         3d:4c:2e:77:7a:d0:0e:19:14:02:38:23:0e:a0:77:33:6d:57:
         64:ee:35:49:e3:fb:19:bf:1e:b4:6d:d1:ba:dd:d4:c0:91:3c:
         e9:d0:0e:d2:03:c9:17:72:9f:34:6b:76:ac:32:54:16:4c:48:
         9b:77:ba:4f:f2:87:23:9a:d4:b8:e3:9e:bf:d5:84:6a:8e:35:
         21:94:27:2f
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMDExMDQw
ODMwNDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDNFNzcwMjZFRDdGN0E4
ODE2RkUxMEZENTE5NUI2OTI2NTc1MzUwREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC64yI6/iwAs5mKofOOPNoeXV2kOcsUC6+OVQaETEQKjElsyYk
hcBqViir9nTLCo7QCV7sZfJHWpGa45/CN0qa42KqXkhDtXP6k6p3eTvG0fmjLWk+
S4fjTTNvKfaW9xShCfNgnvzXu5BUnpEAnARQPUmsN+5xAVV7EtirvV7K6HzFaruU
8r+c4BytxG0u0t181REkPmH3D2bLjHc9VtXrs0PqTUjI7XUOl34qCMMTfBf0bgKY
dPJ9zeZ/uOAQPwLNYUCakzB7O4A9W9qvM6TOYSGsIkMSPOWMyJyGqEbVoV0mD0Fo
QawD07SrRm+6s1/uF9ebLjxvio2V4TOVmJ/VAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUPncCbtf3qIFv4Q/VGVtpJldTUN0wHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL1BuY0NidGYzcUlG
djRRX1ZHVnRwSmxkVFVOMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnHi0wDQYJKoZIhvcNAQELBQADggEBAMWDOw96lMn57E13WU34NBbgze+1
ISoHTXIVWM58yrXj1Ks5TMqbBFv4KLZX4dxoIidZnzXO4aF8f+b2lGT6wi+Ce5Re
wWAp+wk6uRdTv7Hg5ORxBv8vJ+mLNUgnmSzN4XxXlphwJpmT8K0yqUMy21c5eRNo
qELNFs2fWg4GYxWUnPYJRhUsSGEYfWm+jdBGVticO8UjsDdxcG+45PNQEr86aac5
eXHOR2n1DDKHCAvWh+0ymT1MLnd60A4ZFAI4Iw6gdzNtV2TuNUnj+xm/HrRt0brd
1MCRPOnQDtIDyRdynzRrdqwyVBZMSJt3uk/yhyOa1Ljjnr/VhGqONSGUJy8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org