Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/g9G5c6irhfnp0NUrYLO_fJXexeg.roa
File:                     g9G5c6irhfnp0NUrYLO_fJXexeg.roa (raw, json)
Hash identifier:          v4aJMgtyGjtdhCxB3blH/esHbZ9USAJKjxXsNuUVksU=
Subject key identifier:   83:D1:B9:73:A8:AB:85:F9:E9:D0:D5:2B:60:B3:BF:7C:95:DE:C5:E8
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       096D
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/g9G5c6irhfnp0NUrYLO_fJXexeg.roa
Signing time:             Sun 07 Feb 2021 13:05:27 +0000
ROA not before:           Sun 07 Feb 2021 13:05:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        121.50.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413 (0x96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 13:05:27 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=83D1B973A8AB85F9E9D0D52B60B3BF7C95DEC5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:30:aa:18:d5:be:78:03:e2:94:21:ae:26:
                    f6:cf:bd:c5:6a:0e:87:6b:6b:5a:a0:41:f8:27:45:
                    32:27:64:07:44:0e:23:18:e4:d9:1c:a0:15:6f:8f:
                    03:da:4e:f6:29:b6:3f:39:8e:1d:3f:32:a6:64:d8:
                    57:ae:e6:bf:7d:5c:51:d4:3d:70:87:2f:38:51:d3:
                    df:6a:63:95:a5:76:38:7b:f1:e8:84:1c:47:62:3b:
                    f8:ee:b8:9b:af:42:ba:6b:df:5e:a9:c5:d5:d3:64:
                    da:a0:87:8b:a5:29:28:d8:3e:2f:ee:f3:f6:cd:d5:
                    f3:22:a7:6e:8f:fa:46:15:11:0e:e7:a8:22:d5:42:
                    60:99:4e:57:73:9e:35:d1:8f:a1:a0:79:10:e3:f7:
                    ce:86:14:91:c0:82:2f:fe:98:36:4a:6a:4c:a5:37:
                    f4:09:38:9f:d6:49:36:ef:57:6e:c6:11:a2:f5:90:
                    2d:07:cb:e7:be:f4:2f:cc:a2:d0:71:76:a8:60:e3:
                    bb:4e:c4:dc:d7:f1:14:25:7c:3f:62:94:f7:57:f2:
                    a3:99:2e:37:f2:f3:85:54:c2:89:78:8b:ad:b2:29:
                    d9:54:0d:6e:3b:cd:c0:c9:ce:6e:19:30:f1:88:b5:
                    6e:d1:20:92:e7:75:2d:8e:40:3a:fa:5b:6c:ea:f5:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D1:B9:73:A8:AB:85:F9:E9:D0:D5:2B:60:B3:BF:7C:95:DE:C5:E8
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/g9G5c6irhfnp0NUrYLO_fJXexeg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:3e:e1:e1:79:a0:ff:a6:56:f6:22:dd:98:ec:18:c9:f7:
         18:5b:54:ac:4e:c4:0b:ba:06:59:44:19:22:ed:73:8d:aa:4a:
         30:c4:bf:c5:93:31:34:a6:5c:6e:23:ec:a2:b1:3c:c4:64:e1:
         db:20:ee:7f:48:14:d4:d1:b1:1f:c4:01:7d:4f:69:33:2c:65:
         54:16:f9:33:68:6a:6f:20:eb:ff:bb:71:16:5e:9e:3e:72:29:
         f4:83:df:94:9a:01:35:46:36:b7:d9:0b:12:b6:46:9f:9f:76:
         4e:48:b2:d7:f8:84:69:f2:76:33:b6:47:5c:1d:eb:f0:f4:32:
         3a:d5:a5:fa:89:84:e2:85:b6:2e:c4:3e:72:fd:15:3b:be:d3:
         02:02:60:4f:f2:af:49:18:82:5a:a5:6c:97:61:80:c2:6d:f5:
         0d:51:ac:40:c0:09:2e:91:cb:0e:50:c7:f2:2c:dc:e2:a5:31:
         d1:63:00:e6:36:c3:81:84:72:26:c9:26:85:5b:de:4b:66:f6:
         58:00:bc:38:b9:8f:e1:a4:7d:3e:a9:b0:0a:56:ff:79:a6:95:
         32:0c:0c:2a:dd:bf:59:58:3f:e3:b1:09:90:38:f7:d9:dd:ac:
         24:87:d3:02:66:51:f6:6a:ed:20:75:00:9b:65:58:a4:bf:44:
         ea:08:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org