Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/i1i2yzmtp_avi0KwABMDV5xp51Y.roa
File:                     i1i2yzmtp_avi0KwABMDV5xp51Y.roa (raw, json)
Hash identifier:          plyjQ7fwIm1W7C05xODhR8KDnQPhWRcSRGThEyGXzGk=
Subject key identifier:   8B:58:B6:CB:39:AD:A7:F6:AF:8B:42:B0:00:13:03:57:9C:69:E7:56
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0785
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/i1i2yzmtp_avi0KwABMDV5xp51Y.roa
Signing time:             Tue 29 Sep 2020 10:00:30 +0000
ROA not before:           Tue 29 Sep 2020 10:00:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        103.30.46.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8B58B6CB39ADA7F6AF8B42B0001303579C69E756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:be:cb:e7:c8:3e:a7:24:61:96:49:dc:8e:
                    23:8a:1e:97:b9:ed:2a:4a:77:07:90:15:ed:55:8b:
                    95:11:02:9f:d9:d0:af:db:01:0a:b0:ba:b2:07:46:
                    ba:f8:a7:17:c2:b9:f9:8c:13:bf:4a:51:cf:cd:08:
                    fd:35:1b:4c:9b:9f:dd:c4:23:5a:cd:59:e8:a6:9a:
                    6b:57:97:fd:1b:d2:de:e5:ff:f2:f7:25:ec:4d:fd:
                    a7:01:4b:f7:5e:cd:94:db:68:09:c2:28:89:b2:34:
                    2d:7f:5e:2b:1a:3c:9d:f8:3f:56:d8:e7:24:0c:8a:
                    18:48:b8:44:e2:35:6c:ef:33:79:ab:cc:53:e4:10:
                    61:13:e4:45:22:be:00:4a:7f:2e:83:15:31:67:51:
                    e0:6f:b6:8e:f7:22:77:d4:4f:9b:83:cb:7e:03:4e:
                    cd:88:a3:fb:44:04:bf:f8:96:38:e2:e6:a2:d2:b1:
                    1f:bf:e0:76:df:bd:91:dd:7d:5e:2e:c7:f1:7d:d9:
                    03:70:03:83:03:18:cf:bb:e6:83:b5:d1:6c:df:9a:
                    ae:da:7e:79:5e:9e:41:14:22:24:b8:2e:ac:82:b9:
                    66:83:cb:48:8e:00:ce:1f:44:39:d0:aa:59:2b:fa:
                    e4:c3:96:65:80:b7:e8:4f:d7:50:15:0b:31:40:44:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:58:B6:CB:39:AD:A7:F6:AF:8B:42:B0:00:13:03:57:9C:69:E7:56
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/i1i2yzmtp_avi0KwABMDV5xp51Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:a1:d5:db:4d:7a:fa:c6:c7:d3:9a:58:dd:a6:d0:63:db:1c:
         74:c1:a5:3b:6d:36:5b:8a:96:c8:2c:40:69:66:ed:ae:48:3f:
         fb:d5:43:26:2b:3f:e7:56:3d:fb:be:0e:29:af:02:d4:e2:32:
         7d:5c:01:d0:e1:8e:34:ca:a4:6c:56:3b:f0:7d:e3:9f:84:fa:
         7c:7f:d8:52:ba:5c:32:13:d4:d4:a4:ce:43:e6:13:24:6f:4b:
         15:05:1b:d3:b8:c0:1e:47:b0:1a:36:35:d1:16:32:f4:ff:a6:
         e3:34:b4:5d:5d:84:61:49:0f:d9:37:3d:8e:45:3c:1d:9c:98:
         26:7b:2c:79:3a:34:9c:61:27:13:75:48:78:51:3d:f2:8e:22:
         11:43:4f:1b:1d:af:a5:c6:97:6c:4d:b9:1c:01:9d:2d:f6:86:
         d0:d7:a3:6c:70:db:f6:f7:e6:eb:03:fe:b8:49:8c:3b:a8:0a:
         58:76:c3:92:da:4a:d9:de:70:9d:cd:3c:ab:6a:15:d4:36:2f:
         ef:e6:d7:43:17:59:8c:d5:76:71:ab:24:c1:61:7c:b5:e3:1d:
         9e:23:97:99:39:c5:80:72:5a:53:f4:6c:ac:1b:f8:8f:c3:81:
         7b:bc:8f:f7:3e:2a:e1:17:18:e4:26:cc:27:9e:da:df:2c:e4:
         a9:ad:b9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org