Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jtO-FuRJsY6ydfAK5AmynA9aMoc.roa
File:                     jtO-FuRJsY6ydfAK5AmynA9aMoc.roa (raw, json)
Hash identifier:          mg5qCRtWa34l6fp5+ifz1PLNMmiZEjxdEF6KHh4swM8=
Subject key identifier:   8E:D3:BE:16:E4:49:B1:8E:B2:75:F0:0A:E4:09:B2:9C:0F:5A:32:87
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0959
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jtO-FuRJsY6ydfAK5AmynA9aMoc.roa
Signing time:             Sun 07 Feb 2021 13:05:10 +0000
ROA not before:           Sun 07 Feb 2021 13:05:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        103.30.44.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2393 (0x959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 13:05:10 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8ED3BE16E449B18EB275F00AE409B29C0F5A3287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:e0:96:6e:83:bf:2e:1a:27:5f:dc:18:4d:
                    3d:07:b1:3a:a7:c9:a0:db:59:2e:ac:a3:ce:6b:c8:
                    bb:16:f8:19:ee:2b:27:3c:60:0c:85:58:7f:95:36:
                    2d:1f:90:4d:38:b4:ea:28:23:0a:93:15:cd:ff:8e:
                    b7:84:75:ff:a5:e5:88:2b:aa:dc:93:b2:51:af:a4:
                    04:90:da:80:12:ef:b7:5c:c6:98:12:c6:1e:72:c3:
                    89:09:1b:91:69:d3:c8:c5:27:a1:90:66:17:aa:f4:
                    b0:33:1f:92:03:a3:98:08:23:58:93:2a:3b:b7:62:
                    00:a1:de:af:ee:12:48:97:28:a6:ca:84:b7:8f:cf:
                    06:2f:02:fe:34:e7:83:31:bf:56:a7:5d:5d:93:85:
                    a9:b8:04:c8:42:d3:32:51:72:ea:f8:53:00:fc:00:
                    d1:4f:a4:9a:e8:3c:f2:d4:3b:f1:40:92:dc:d6:17:
                    db:2d:2b:2a:ef:d1:49:18:03:a7:e3:98:ba:18:ff:
                    3a:04:ac:1b:28:e4:1c:cd:e6:1e:c4:7f:67:0b:59:
                    18:8f:70:28:41:8c:48:a8:e8:ba:94:02:fc:66:37:
                    6a:ca:45:c9:33:b6:08:90:5c:c1:7e:cb:fb:ae:c5:
                    7d:f4:8f:9f:60:ba:5e:95:8e:ae:48:5e:89:d0:de:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D3:BE:16:E4:49:B1:8E:B2:75:F0:0A:E4:09:B2:9C:0F:5A:32:87
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jtO-FuRJsY6ydfAK5AmynA9aMoc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:b5:3a:bc:ae:c0:dd:1d:c8:80:b1:3c:ea:d2:25:d3:47:96:
         59:b0:64:6c:db:57:f2:ac:2f:a9:b2:60:1a:24:af:3d:2c:94:
         ca:4b:e2:48:d3:2e:36:89:7e:8b:30:95:73:14:bc:a9:87:c5:
         88:e6:7a:f2:7c:36:39:6f:aa:9e:dc:14:50:b7:89:16:c6:d8:
         c6:5d:60:c4:a4:53:c7:98:97:9d:10:eb:6f:59:48:f6:7c:44:
         b5:65:b2:35:d7:73:d9:ed:b0:a7:cc:de:e1:ab:b4:a9:99:21:
         07:f7:cb:87:d0:98:4f:f3:3d:6d:3f:06:5f:bc:a9:fc:0d:01:
         a9:dd:8c:f0:79:07:d0:a1:cb:69:cd:34:10:8a:79:1b:02:7e:
         6a:a0:97:13:4d:1d:0b:97:7f:10:02:aa:16:62:d5:3f:df:f4:
         25:e0:e0:ad:68:e6:da:05:4b:d7:f4:62:22:a3:0c:33:fc:2b:
         f0:a4:2a:0e:ea:b6:b1:1a:0e:1b:e1:f9:ef:28:55:4a:4f:b3:
         51:96:87:13:ba:a8:65:39:d6:30:2f:79:61:66:e4:0f:29:03:
         8b:bd:47:5e:ab:aa:90:e7:7e:60:49:ed:ac:62:45:a5:5f:38:
         c5:c0:e8:30:9c:91:35:d4:e0:27:26:76:5b:1e:02:19:89:15:
         51:bc:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org