Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_50fZvl4sw5QochQX9ZO2ywUMXg.roa
File:                     _50fZvl4sw5QochQX9ZO2ywUMXg.roa (raw, json)
Hash identifier:          D9KYeoIn0npDNEpD1cZ/+n3tF+39WY+L6JQ80G44YYU=
Subject key identifier:   FF:9D:1F:66:F9:78:B3:0E:50:A1:C8:50:5F:D6:4E:DB:2C:14:31:78
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0945
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_50fZvl4sw5QochQX9ZO2ywUMXg.roa
Signing time:             Sun 07 Feb 2021 11:53:10 +0000
ROA not before:           Sun 07 Feb 2021 11:53:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373 (0x945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 11:53:10 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FF9D1F66F978B30E50A1C8505FD64EDB2C143178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:49:37:52:18:6b:f6:27:14:6e:dd:2f:83:
                    7b:32:0c:35:08:0e:0f:89:7e:78:01:36:a9:6f:ee:
                    72:f1:89:35:40:6b:ed:42:bc:2c:e4:57:59:69:55:
                    be:c9:61:94:ff:15:36:a6:d1:a1:7b:4b:e9:c8:69:
                    34:4f:d6:0d:77:25:8c:44:05:11:bc:d0:44:a9:5a:
                    d8:4c:cf:5f:9d:3c:b3:f1:fc:b7:79:90:24:1f:07:
                    ec:13:fc:ea:86:08:52:a3:0e:e8:71:dc:84:81:d3:
                    41:d3:53:62:a2:a4:d9:98:c8:6e:e3:30:18:20:0c:
                    8c:51:87:24:4b:6f:75:1a:3e:fd:5d:01:a2:55:73:
                    9a:bd:05:9b:63:be:ed:ec:ae:46:a3:ef:ab:cc:75:
                    64:48:f7:15:02:6b:d7:53:ed:46:ad:f7:1f:75:03:
                    52:c7:1c:59:c4:7a:e0:8c:b5:cf:a7:d9:96:1c:2a:
                    fc:fe:ba:a0:ba:5a:b6:9f:68:54:1c:13:de:dc:c3:
                    9d:4a:7d:1b:fa:f4:4e:cd:2c:aa:11:a6:b6:1d:20:
                    66:c1:c5:8c:e9:ab:f6:a0:2f:38:e7:29:2f:87:2c:
                    2b:20:83:9a:6a:eb:7e:88:df:2d:76:34:90:18:c7:
                    6b:85:bd:73:82:02:a0:98:27:49:26:c6:66:aa:c1:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9D:1F:66:F9:78:B3:0E:50:A1:C8:50:5F:D6:4E:DB:2C:14:31:78
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_50fZvl4sw5QochQX9ZO2ywUMXg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:20:86:45:c4:07:6f:e4:56:67:f1:43:30:12:d7:3a:48:
         36:7d:7e:e0:93:ad:79:a8:8f:93:ad:bf:89:0b:6b:74:08:f7:
         0d:1e:db:51:ea:0a:d4:8b:90:73:cb:f7:51:9f:d4:10:04:04:
         7b:c9:a3:74:fb:33:48:9c:11:dc:8d:e2:71:0c:71:f6:d8:2d:
         ae:21:27:e5:a2:47:c4:e7:db:40:c5:23:65:8a:84:2f:05:c9:
         d0:e1:35:d7:46:cf:4b:23:a3:28:60:9f:74:90:c8:c2:52:5e:
         42:80:0b:4b:2b:01:ed:43:ee:4f:a5:16:b4:92:62:81:51:bd:
         44:a6:ea:44:b7:f9:10:76:ee:4e:a1:5f:f2:f1:d3:6a:3d:b6:
         b1:83:cb:46:76:fa:b5:9d:67:a8:d0:0c:0f:27:73:a6:8f:39:
         45:a7:a3:ac:da:72:c6:26:68:de:a6:b1:44:6e:28:ac:ff:a5:
         c1:a0:a2:a0:f7:eb:a3:34:22:28:56:1a:d9:b0:3b:79:79:f7:
         23:02:d9:f2:ce:de:52:d1:84:38:8e:f9:38:b3:79:57:c7:b4:
         af:4d:00:af:ce:11:88:4b:7e:44:9c:64:a6:89:25:1e:71:e9:
         f9:1e:74:50:75:0b:db:9f:09:28:e2:65:f5:65:90:49:2b:28:
         ad:b2:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org