Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/lCCeDvjfVNZAKYediKDMdQn_nZQ.roa
File:                     lCCeDvjfVNZAKYediKDMdQn_nZQ.roa (raw, json)
Hash identifier:          kxcPdcNUKrFO93U7AtIutCg6EYRlyhddqVVS7EiOMPs=
Subject key identifier:   94:20:9E:0E:F8:DF:54:D6:40:29:87:9D:88:A0:CC:75:09:FF:9D:94
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       078A
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/lCCeDvjfVNZAKYediKDMdQn_nZQ.roa
Signing time:             Tue 29 Sep 2020 10:00:32 +0000
ROA not before:           Tue 29 Sep 2020 10:00:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        103.30.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1930 (0x78a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=94209E0EF8DF54D64029879D88A0CC7509FF9D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:a0:7a:72:88:0a:2b:de:42:a6:47:e6:07:
                    2f:86:cd:c6:74:d6:f3:7d:ae:e4:d1:37:36:0e:c9:
                    b8:7c:b4:6d:79:6e:75:03:59:c7:88:a5:d7:16:a6:
                    d8:45:ca:d2:d7:4b:a5:9e:e7:80:0b:94:a4:de:fc:
                    8c:f9:b0:4d:fd:70:16:61:76:36:7c:fd:c2:72:3a:
                    08:90:b2:22:45:25:4c:1d:6f:72:62:f8:f6:f8:bb:
                    0c:50:3e:05:71:e0:4d:19:0d:d8:cf:9a:54:91:8e:
                    6a:cd:d6:a0:47:e0:0b:2d:df:89:91:76:b8:c7:32:
                    62:09:25:2c:cc:79:a5:ab:e3:7e:38:50:99:44:ca:
                    72:05:ff:c7:df:8e:96:de:7f:32:f3:c8:82:d5:9a:
                    12:56:4c:2f:e7:27:ad:cc:a2:24:c8:09:30:bb:ee:
                    b7:ff:89:9d:3a:e2:fc:80:fb:6f:46:89:5c:d1:8f:
                    40:ed:23:a8:54:45:e5:0b:3f:14:35:65:c5:a9:c5:
                    6b:14:eb:7c:f4:8b:57:6d:16:1f:7b:dd:e4:59:8c:
                    b8:14:fc:62:61:5a:6b:42:f1:df:65:3f:65:5a:1a:
                    dd:b9:0c:bf:51:f8:f5:12:fc:ae:15:34:79:cc:0d:
                    70:be:6f:9f:e5:88:f7:1c:3f:10:0e:11:57:6e:d1:
                    62:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:20:9E:0E:F8:DF:54:D6:40:29:87:9D:88:A0:CC:75:09:FF:9D:94
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/lCCeDvjfVNZAKYediKDMdQn_nZQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:f9:cc:a3:a5:08:9d:db:eb:f7:a6:1d:53:d9:c6:49:39:e3:
         11:a8:7c:63:1e:93:b1:80:bd:90:58:33:0b:97:24:19:d6:a4:
         6f:19:b0:77:64:d7:e0:0f:bd:f1:34:b0:1c:4e:87:26:12:b2:
         73:45:48:b2:90:a0:17:49:3d:13:1e:74:45:d6:bd:56:27:96:
         a6:c9:3f:41:fe:10:92:ab:f3:6d:f8:de:f7:82:0f:6d:ab:c0:
         1e:0e:10:b3:82:a2:ef:ed:1b:c7:a4:2c:27:a2:3d:ad:92:6b:
         aa:ee:d5:d8:67:df:a1:c5:79:e6:6f:ba:a3:cb:87:be:8c:1c:
         f2:50:56:08:91:b5:0c:12:73:21:60:0f:78:d6:6a:38:79:70:
         fd:2b:db:e9:11:b7:0e:0b:02:05:fe:01:45:87:e6:be:ec:55:
         6a:20:36:8e:0a:10:a7:14:15:68:1b:8c:08:d2:2a:8d:db:a1:
         b3:d6:c7:c0:d4:a8:ee:94:dd:4e:ed:4a:dc:f3:92:5d:40:e1:
         e6:40:da:78:a0:ac:da:6e:b5:3e:2c:34:e5:17:15:e9:1c:70:
         8f:36:15:b0:86:2f:b5:13:92:30:37:b6:4b:3e:44:a8:f6:d2:
         ba:b2:ee:62:6b:78:05:18:e4:04:01:35:b4:e5:da:d6:75:8b:
         47:fc:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:43 2023 by rpki-client on console-ams.rpki-client.org