Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/nAbSL96tOxM4lkTa65ek6uZJSCA.roa
File:                     nAbSL96tOxM4lkTa65ek6uZJSCA.roa (raw, json)
Hash identifier:          jA7rtOF7BkaeklT14qJIMF3GHpAED3YyXHbElGbNe14=
Subject key identifier:   9C:06:D2:2F:DE:AD:3B:13:38:96:44:DA:EB:97:A4:EA:E6:49:48:20
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0BC1
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/nAbSL96tOxM4lkTa65ek6uZJSCA.roa
Signing time:             Mon 27 Mar 2023 23:14:02 +0000
ROA not before:           Mon 27 Mar 2023 23:14:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18424
IP address blocks:        103.30.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3009 (0xbc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Mar 27 23:14:02 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9C06D22FDEAD3B13389644DAEB97A4EAE6494820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:1e:39:df:31:a5:59:1f:06:28:ed:c4:c7:
                    8d:ea:01:5e:6f:d2:71:45:86:c3:24:2a:f6:4e:a0:
                    86:94:00:a1:5f:43:a6:15:35:6c:44:50:4a:39:fc:
                    95:d0:c2:05:ec:47:73:25:38:25:34:07:5f:0d:2f:
                    56:96:05:a4:24:c8:bb:7e:fe:70:aa:d7:a2:69:12:
                    24:eb:28:4c:91:8f:02:d6:2c:e3:61:58:67:84:a0:
                    7e:f6:da:40:5d:89:fb:1e:24:34:72:de:b6:bf:28:
                    30:b8:94:13:1d:89:33:1a:b4:b2:36:d1:74:16:63:
                    2d:d9:bd:38:1f:8c:45:de:e8:71:e8:df:9a:7d:e6:
                    b1:16:7b:8c:cb:d1:cb:f9:55:9e:8e:1a:b5:00:6a:
                    1f:84:b7:04:16:39:51:3a:65:c9:86:99:7e:42:04:
                    d8:0d:e5:2b:31:6a:c0:a9:cc:6d:82:df:72:97:da:
                    ad:a4:04:91:8d:4a:dc:fc:3b:35:32:4e:ba:39:e3:
                    f2:5f:8d:74:75:25:37:f4:2f:99:bc:3c:7d:56:f4:
                    01:a7:17:95:b1:5c:3d:2e:a0:93:e7:54:ae:fa:d5:
                    c8:7b:5c:17:d1:1e:14:70:e2:db:70:56:e7:6b:2f:
                    53:b2:58:ac:ae:0e:2e:f0:5d:c8:32:62:da:ca:f0:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:06:D2:2F:DE:AD:3B:13:38:96:44:DA:EB:97:A4:EA:E6:49:48:20
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/nAbSL96tOxM4lkTa65ek6uZJSCA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f1:aa:42:81:1c:95:08:8d:48:02:3c:f8:8f:78:71:03:44:
         27:2b:9c:f2:cb:30:9b:72:3e:0b:bd:68:63:f3:8c:76:a3:da:
         63:5b:b3:ca:8e:91:0b:c8:d8:fa:df:9c:8e:a0:6c:42:1a:3e:
         31:a6:09:b0:92:0d:a0:b0:7d:94:bf:81:6d:5c:13:3d:91:37:
         65:f6:58:48:33:c1:53:ab:2b:e8:e7:25:1e:8e:2d:f8:8e:cc:
         06:0a:1b:0e:05:63:83:78:f0:73:41:28:65:3f:00:7b:32:ef:
         76:15:b5:b9:12:c7:9b:5b:29:cd:27:9a:72:84:04:a1:bb:26:
         dd:4b:9a:e8:08:33:0f:4a:7f:fb:59:04:f2:09:16:db:3c:f1:
         18:42:f9:26:28:c3:1c:20:25:75:99:c4:0b:f1:23:a3:58:0a:
         11:35:8f:d3:88:9c:28:4b:7d:47:56:86:4b:d5:d6:75:91:c2:
         8a:8f:22:2e:ba:74:db:94:fd:87:34:de:5f:90:ec:8a:22:12:
         28:fc:ea:33:eb:aa:3d:3b:c3:e9:47:50:c7:73:bc:e8:25:42:
         b1:dd:bb:87:3a:62:4d:75:39:7e:b6:c9:9e:ed:10:dc:91:61:
         0b:90:d8:04:8f:ed:9f:b4:e3:27:bf:13:d1:bb:5d:2e:2a:36:
         70:8e:ba:89
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzAzMjcy
MzE0MDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlDMDZEMjJGREVBRDNC
MTMzODk2NDREQUVCOTdBNEVBRTY0OTQ4MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPsR453zGlWR8GKO3Ex43qAV5v0nFFhsMkKvZOoIaUAKFfQ6YV
NWxEUEo5/JXQwgXsR3MlOCU0B18NL1aWBaQkyLt+/nCq16JpEiTrKEyRjwLWLONh
WGeEoH722kBdifseJDRy3ra/KDC4lBMdiTMatLI20XQWYy3ZvTgfjEXe6HHo35p9
5rEWe4zL0cv5VZ6OGrUAah+EtwQWOVE6ZcmGmX5CBNgN5SsxasCpzG2C33KX2q2k
BJGNStz8OzUyTro54/JfjXR1JTf0L5m8PH1W9AGnF5WxXD0uoJPnVK761ch7XBfR
HhRw4ttwVudrL1OyWKyuDi7wXcgyYtrK8OCHAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUnAbSL96tOxM4lkTa65ek6uZJSCAwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL25BYlNMOTZ0T3hN
NGxrVGE2NWVrNnVaSlNDQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnHi4wDQYJKoZIhvcNAQELBQADggEBACrxqkKBHJUIjUgCPPiPeHEDRCcr
nPLLMJtyPgu9aGPzjHaj2mNbs8qOkQvI2PrfnI6gbEIaPjGmCbCSDaCwfZS/gW1c
Ez2RN2X2WEgzwVOrK+jnJR6OLfiOzAYKGw4FY4N48HNBKGU/AHsy73YVtbkSx5tb
Kc0nmnKEBKG7Jt1LmugIMw9Kf/tZBPIJFts88RhC+SYowxwgJXWZxAvxI6NYChE1
j9OInChLfUdWhkvV1nWRwoqPIi66dNuU/Yc03l+Q7IoiEij86jPrqj07w+lHUMdz
vOglQrHdu4c6Yk11OX62yZ7tENyRYQuQ2ASP7Z+04ye/E9G7XS4qNnCOuok=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org