Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/UcR_vc-bYIZZJYKULFmnW2brsh4.roa
File:                     UcR_vc-bYIZZJYKULFmnW2brsh4.roa (raw, json)
Hash identifier:          osG7AwhLpzBH7B4fvOdLV7aKk8tGag3BbKfEi8VVv5E=
Subject key identifier:   51:C4:7F:BD:CF:9B:60:86:59:25:82:94:2C:59:A7:5B:66:EB:B2:1E
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/UcR_vc-bYIZZJYKULFmnW2brsh4.roa
Signing time:             Thu 15 Sep 2022 02:50:32 +0000
ROA not before:           Thu 15 Sep 2022 02:50:32 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        103.30.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 15 02:50:32 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=51C47FBDCF9B6086592582942C59A75B66EBB21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:5c:21:5d:1c:b2:7d:fe:8d:b6:ca:5b:0d:
                    7a:5d:59:f3:b6:66:60:6a:d7:1a:0d:29:2f:0a:43:
                    50:c0:c3:97:b5:0e:7e:de:98:62:dd:e0:a7:06:45:
                    59:6f:e3:41:34:a4:b6:98:fb:1d:b2:79:a1:f0:58:
                    ed:ba:1d:74:ca:65:eb:83:57:f7:c3:c6:63:b4:df:
                    12:90:39:13:a6:bb:05:79:5c:bc:6c:56:90:91:29:
                    34:c4:2e:35:63:d6:86:e8:c2:c2:f0:a0:97:7b:c9:
                    6c:2a:1b:3c:3b:30:31:ff:6e:51:b0:5d:09:76:0d:
                    75:89:b9:b9:90:d6:77:4f:9f:8c:d3:c7:53:3a:ac:
                    b6:08:ef:0b:43:d0:37:7e:77:f8:92:34:52:84:5d:
                    39:87:30:db:5a:0e:3c:25:6d:36:61:63:96:0e:f6:
                    a2:34:52:60:fb:89:fe:3e:74:2a:fa:6e:3a:98:23:
                    3b:b0:25:f8:2e:12:86:6e:ff:ae:c5:19:c9:f9:44:
                    28:d2:dc:3f:a8:bd:98:e9:86:f1:e9:40:24:0b:9f:
                    03:67:aa:a0:63:1c:12:a0:34:b9:fd:3d:96:ce:3d:
                    dd:5e:d4:b8:7c:6b:30:4f:1b:89:88:9c:2f:f3:1d:
                    00:45:38:34:0e:3e:2e:35:ea:84:8d:8f:8f:c6:f5:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:7F:BD:CF:9B:60:86:59:25:82:94:2C:59:A7:5B:66:EB:B2:1E
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/UcR_vc-bYIZZJYKULFmnW2brsh4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b6:19:b2:21:dc:d9:84:d1:02:88:97:2b:04:49:ae:01:30:
         bf:86:aa:20:64:09:24:b6:3d:b0:8b:7a:ed:a4:3a:7b:07:a8:
         83:3a:71:c2:08:6f:76:df:27:3a:13:39:de:3c:33:28:fb:5b:
         f6:3d:bc:51:a7:1b:95:34:2b:35:6c:5c:f4:7c:89:4a:f6:65:
         82:23:3b:e2:b1:d3:ce:b5:da:c9:f7:33:f5:89:23:a5:60:9d:
         88:2e:68:44:1f:f1:9d:4d:44:69:e1:28:4a:b3:c0:1b:4f:c1:
         7c:25:34:5b:70:84:c9:7d:47:92:45:6f:0c:c8:90:f8:36:58:
         d5:10:ee:94:50:90:73:d3:a2:49:c6:b2:55:aa:ae:b7:8c:e8:
         a1:8e:e9:17:5d:6b:c8:21:c1:2f:c1:f5:0e:3f:a8:3d:85:24:
         92:49:a1:7d:31:76:42:ac:72:ba:f1:9d:ed:69:99:f1:fe:1a:
         0b:6c:73:7f:88:8f:5e:05:4d:5c:c8:bb:92:f8:31:87:99:b8:
         e1:12:ad:1a:f9:ca:e8:65:1a:dd:62:f4:b2:8a:bf:62:cc:45:
         db:bc:a8:be:92:b5:47:55:0a:04:90:cd:d1:5d:0b:e2:c7:3f:
         2c:5e:38:ed:8e:90:8f:76:64:ef:81:6b:dd:bb:cc:39:8e:e5:
         99:09:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org