Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/SpAjdTq8e5b6untSLwMwmN-Swpw.roa
File:                     SpAjdTq8e5b6untSLwMwmN-Swpw.roa (raw, json)
Hash identifier:          qEEhHvfMSLAe7PqMQPm/XYZOKpJcgPugaQAkKmT9IOE=
Subject key identifier:   4A:90:23:75:3A:BC:7B:96:FA:BA:7B:52:2F:03:30:98:DF:92:C2:9C
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       097B
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/SpAjdTq8e5b6untSLwMwmN-Swpw.roa
Signing time:             Sun 07 Feb 2021 13:05:40 +0000
ROA not before:           Sun 07 Feb 2021 13:05:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427 (0x97b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 13:05:40 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4A9023753ABC7B96FABA7B522F033098DF92C29C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cf:f0:5f:f0:ba:8e:bc:fd:97:15:5c:3c:41:
                    25:c4:50:c2:c5:f9:52:ea:bf:bd:be:06:8e:0e:2f:
                    28:a4:70:83:d1:5c:13:8d:d5:c4:4f:63:ac:74:15:
                    a9:e6:a0:c0:53:91:05:42:69:a8:7b:16:7e:67:e3:
                    13:d3:45:5c:80:9e:a1:5b:c6:03:73:ee:0d:7e:78:
                    fc:0f:ad:11:22:6b:d4:c5:7e:c4:12:3f:2a:53:94:
                    c7:9c:30:16:0f:64:48:bb:51:4d:81:bd:29:b0:76:
                    8b:58:09:bf:c2:8b:2c:e3:aa:4c:6e:b0:56:38:62:
                    cf:0d:ba:81:75:68:1b:60:ca:37:8b:dd:ce:2a:3c:
                    c0:07:e7:97:9a:f5:fa:20:b5:1a:e9:dc:3b:c8:5a:
                    d5:f6:26:b1:e0:0f:52:53:11:b3:a2:c7:91:60:4c:
                    fd:21:66:02:3a:03:c9:40:50:0c:46:ef:6a:6a:59:
                    ec:cb:d3:de:db:49:02:63:cc:c2:b3:27:c6:9f:4a:
                    71:ad:bb:2d:a2:50:a8:78:84:0b:a6:f3:69:dd:cc:
                    28:e0:be:0a:48:03:c8:c5:d0:73:a6:f7:6c:0c:49:
                    81:df:8f:82:25:81:b1:9b:36:ec:42:32:56:0c:4a:
                    aa:4e:88:a9:7b:52:ae:1c:24:21:54:63:28:36:62:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:90:23:75:3A:BC:7B:96:FA:BA:7B:52:2F:03:30:98:DF:92:C2:9C
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/SpAjdTq8e5b6untSLwMwmN-Swpw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:bc:c5:b1:57:e1:d3:be:ee:b3:d4:e2:30:e2:3f:6d:71:10:
         56:cd:68:0b:d5:fb:dc:d2:7e:ee:97:4f:48:f4:58:23:f6:12:
         f3:49:c0:9f:3d:73:cd:df:3d:70:af:18:21:6e:c0:cc:e6:6e:
         6f:5a:eb:60:ad:17:1f:3f:27:b0:ee:c2:25:67:57:74:12:df:
         93:15:2f:14:73:79:f1:3f:13:d4:ee:ae:a6:e5:54:a8:91:f8:
         2a:ec:a1:2b:15:6e:a1:10:2a:29:29:0f:b7:4e:e1:e8:45:2f:
         57:ef:28:74:e2:e2:66:01:ab:e7:9e:57:37:eb:09:31:ad:89:
         85:b9:7b:49:c2:23:7f:5c:60:6d:a7:7c:f8:07:a4:79:31:1d:
         3f:a0:00:ca:30:fa:7c:41:5c:ee:9a:d2:a0:34:4a:67:de:57:
         64:50:af:20:a4:f0:cb:95:7d:15:f4:f5:f5:a2:49:08:ca:98:
         bf:82:f1:46:57:cf:d1:84:dd:19:1c:a6:68:94:5e:c7:67:50:
         3b:aa:0c:21:d1:80:91:f0:f8:f0:9e:98:b6:4b:9d:45:b3:60:
         1d:62:13:46:a8:70:d6:d1:69:e1:45:ed:24:83:9d:59:51:21:
         78:f3:9b:7c:61:5d:54:fd:7d:06:cf:15:0f:b3:fa:07:e7:ff:
         e5:d0:40:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org