Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oG04EmOXhg9J9UzhffSdTf9-x7w.roa
File:                     oG04EmOXhg9J9UzhffSdTf9-x7w.roa (raw, json)
Hash identifier:          BNK5OBWsj9IUdz6LAW5ibTm+9z2RNDarpVW4kTtGQz0=
Subject key identifier:   A0:6D:38:12:63:97:86:0F:49:F5:4C:E1:7D:F4:9D:4D:FF:7E:C7:BC
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0969
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oG04EmOXhg9J9UzhffSdTf9-x7w.roa
Signing time:             Sun 07 Feb 2021 13:05:23 +0000
ROA not before:           Sun 07 Feb 2021 13:05:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        121.50.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2409 (0x969)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 13:05:23 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A06D38126397860F49F54CE17DF49D4DFF7EC7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:82:1c:74:53:33:01:cd:0e:86:1c:1c:e9:df:
                    86:14:5e:3b:44:fc:73:c7:39:41:9a:3d:e1:cf:a4:
                    d3:21:db:86:3a:b6:b2:8a:de:e8:4e:96:61:33:f1:
                    69:6d:ca:17:af:70:86:e3:1e:ac:6a:f0:ce:11:40:
                    69:ad:47:50:8c:61:80:0c:47:20:ef:e3:8d:1f:82:
                    51:cb:4f:85:ad:74:5e:10:79:28:56:c8:4c:a1:e4:
                    b8:2e:63:8a:9d:df:27:53:40:be:1d:f2:dd:e5:ad:
                    c8:48:f1:03:ac:a1:e4:ed:35:29:8c:02:1b:c2:50:
                    fd:af:22:3f:b3:bc:42:35:82:44:26:0d:c4:34:c3:
                    53:ad:08:60:2f:d7:b8:28:ae:53:b0:f7:c1:ae:0e:
                    6a:73:98:6a:dc:d9:e0:ff:e5:88:71:25:0a:a1:60:
                    a5:08:58:6f:2d:da:d8:06:14:c8:d0:d0:3e:e3:65:
                    6c:71:57:11:e2:d6:98:98:27:c2:cd:10:29:de:b0:
                    66:59:f7:96:6d:51:3c:dc:d7:0c:01:32:a6:9d:3c:
                    fd:32:c0:5e:9c:e4:91:84:67:ea:76:bb:af:9c:70:
                    24:69:a0:9c:61:ff:60:35:dd:cc:eb:06:0e:95:e2:
                    20:8b:4c:68:a2:66:61:a5:25:01:d8:28:cc:ab:3d:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6D:38:12:63:97:86:0F:49:F5:4C:E1:7D:F4:9D:4D:FF:7E:C7:BC
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/oG04EmOXhg9J9UzhffSdTf9-x7w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:34:55:b5:61:d0:5b:ee:50:c9:1b:ce:4f:42:17:af:d8:9e:
         a2:d6:43:9c:58:ae:cf:ea:cd:73:9d:74:ee:89:d6:8a:c9:98:
         39:c9:52:33:7e:af:8d:a2:5c:8a:e2:e4:be:ef:0f:a7:21:80:
         5d:08:f7:aa:2f:af:e9:99:c4:cf:c1:c7:63:30:70:dc:e2:90:
         b1:50:44:6f:e2:3d:a6:c8:ef:aa:78:1f:8a:dd:46:e2:7b:91:
         28:f3:df:b9:cc:de:80:8a:ff:94:9e:91:bb:13:25:41:56:41:
         12:5d:83:a7:a1:a6:fe:82:6d:26:ff:c1:be:4d:c3:14:03:94:
         f1:1d:f3:f1:bf:2d:6b:61:3e:dd:e3:77:ea:73:36:53:69:93:
         e7:2a:3c:1b:d5:9f:b8:49:c2:36:86:26:38:4f:f8:dd:b2:06:
         8c:a4:18:b7:75:08:f3:66:90:80:fb:63:56:e6:72:2a:94:8a:
         31:83:32:50:f6:f6:b5:ef:c0:2e:21:be:b4:ba:b3:c8:dd:79:
         29:ad:d9:9a:84:8b:a7:08:86:b2:50:50:37:4d:30:63:76:4b:
         71:30:73:94:3a:4b:c8:9e:9b:d0:d2:85:4f:60:a9:54:a6:ec:
         7d:33:70:b7:6b:cf:76:86:d4:7b:fd:04:5b:92:ae:bf:21:a7:
         c1:f7:fa:d7
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMTAyMDcx
MzA1MjNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEEwNkQzODEyNjM5Nzg2
MEY0OUY1NENFMTdERjQ5RDRERkY3RUM3QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD3ghx0UzMBzQ6GHBzp34YUXjtE/HPHOUGaPeHPpNMh24Y6trKK
3uhOlmEz8WltyhevcIbjHqxq8M4RQGmtR1CMYYAMRyDv440fglHLT4WtdF4QeShW
yEyh5LguY4qd3ydTQL4d8t3lrchI8QOsoeTtNSmMAhvCUP2vIj+zvEI1gkQmDcQ0
w1OtCGAv17gorlOw98GuDmpzmGrc2eD/5YhxJQqhYKUIWG8t2tgGFMjQ0D7jZWxx
VxHi1piYJ8LNECnesGZZ95ZtUTzc1wwBMqadPP0ywF6c5JGEZ+p2u6+ccCRpoJxh
/2A13czrBg6V4iCLTGiiZmGlJQHYKMyrPUu3AgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUoG04EmOXhg9J9UzhffSdTf9+x7wwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL29HMDRFbU9YaGc5
SjlVemhmZlNkVGY5LXg3dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB5MpAwDQYJKoZIhvcNAQELBQADggEBACI0VbVh0FvuUMkbzk9CF6/YnqLW
Q5xYrs/qzXOddO6J1orJmDnJUjN+r42iXIri5L7vD6chgF0I96ovr+mZxM/Bx2Mw
cNzikLFQRG/iPabI76p4H4rdRuJ7kSjz37nM3oCK/5SekbsTJUFWQRJdg6ehpv6C
bSb/wb5NwxQDlPEd8/G/LWthPt3jd+pzNlNpk+cqPBvVn7hJwjaGJjhP+N2yBoyk
GLd1CPNmkID7Y1bmciqUijGDMlD29rXvwC4hvrS6s8jdeSmt2ZqEi6cIhrJQUDdN
MGN2S3Ewc5Q6S8iem9DShU9gqVSm7H0zcLdrz3aG1Hv9BFuSrr8hp8H3+tc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:43 2023 by rpki-client on console-ams.rpki-client.org