Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qWFSHKiCYXdVs482JtRixeRTkFM.roa
File:                     qWFSHKiCYXdVs482JtRixeRTkFM.roa (raw, json)
Hash identifier:          1ltGrdEl/ARkhhO+9EHytRgDDJfx+9TRNLQE9gl0fY4=
Subject key identifier:   A9:61:52:1C:A8:82:61:77:55:B3:8F:36:26:D4:62:C5:E4:53:90:53
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0973
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qWFSHKiCYXdVs482JtRixeRTkFM.roa
Signing time:             Sun 07 Feb 2021 13:05:32 +0000
ROA not before:           Sun 07 Feb 2021 13:05:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        121.50.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419 (0x973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 13:05:32 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A961521CA882617755B38F3626D462C5E4539053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:79:ec:78:9d:b7:58:38:51:19:1c:28:64:
                    66:43:20:01:f3:76:19:6b:76:60:f1:f5:1f:5a:11:
                    fb:be:9f:7d:d7:ab:dd:70:bf:c1:3f:f9:b6:73:8d:
                    ef:2b:32:ed:4a:e3:86:3d:c5:c2:06:7e:66:ef:0f:
                    f0:f2:dd:04:c7:5d:97:33:8a:ed:07:b5:0d:73:bf:
                    77:93:76:fb:96:14:b6:d0:f9:a2:39:72:85:64:57:
                    e4:7d:c5:21:06:ca:9e:07:81:9c:c3:cc:36:98:10:
                    be:58:83:3d:64:01:57:27:a4:0e:d4:c9:f0:98:c6:
                    85:40:cb:db:29:0b:e8:22:1a:3f:c5:3f:f8:ec:a3:
                    9d:39:59:7c:23:45:02:bc:e4:b8:3d:4f:2e:db:6f:
                    4b:31:72:c8:a5:6f:6c:73:30:ab:c3:20:68:56:6f:
                    38:eb:37:94:6b:31:c8:a7:64:3f:ff:d1:e0:9b:9b:
                    21:a7:3b:b1:fc:ae:cb:aa:cd:36:3b:db:e1:a0:a2:
                    15:58:b3:03:f1:8a:60:c7:ef:a8:8f:23:8d:51:40:
                    83:06:a1:33:cc:e8:3c:68:7f:fe:81:ac:98:1e:a5:
                    ae:36:d1:17:92:19:99:ec:71:af:51:1b:63:3d:ba:
                    0a:4f:3d:2c:92:65:ce:00:12:57:c5:ce:48:8b:bb:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:61:52:1C:A8:82:61:77:55:B3:8F:36:26:D4:62:C5:E4:53:90:53
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qWFSHKiCYXdVs482JtRixeRTkFM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:d3:bb:a1:2e:ec:45:64:b0:0f:0a:60:e1:20:88:56:a8:67:
         02:1e:b6:95:02:c6:15:43:b5:19:7c:15:e5:1c:7e:8c:b2:8a:
         1a:22:77:b2:16:52:70:fe:70:0c:4a:51:c2:05:23:45:b5:8e:
         9b:23:36:f5:15:d3:59:f2:aa:86:0f:a1:39:cc:8a:38:e5:48:
         b2:40:72:ac:81:2d:f9:df:8c:35:36:58:66:be:13:95:9a:81:
         bf:9c:cd:bb:0b:79:4e:80:1f:fb:40:ad:2e:d0:77:d3:73:73:
         a1:b3:0f:6d:4c:87:4e:17:37:8f:45:ad:d3:3e:1d:16:22:35:
         6d:3a:d2:23:ef:fd:b2:ae:53:b8:b4:1a:77:29:2f:29:b1:2a:
         61:0d:a5:29:a2:26:ac:7d:17:b6:5c:16:18:37:3f:69:fe:26:
         3c:37:0f:8a:f8:97:81:f4:49:88:d7:6b:58:1d:e4:92:d2:58:
         8a:33:49:47:76:cf:52:36:32:7b:e1:11:96:3f:fb:fa:6c:b7:
         76:be:77:cd:01:02:42:f8:5b:6a:99:c8:29:33:55:60:ea:71:
         9a:2e:5b:12:9a:0e:43:43:55:75:e6:86:1e:35:f4:4d:78:93:
         c7:6e:1f:77:6d:72:39:cd:ec:63:f2:a4:71:5d:c7:54:c8:69:
         8b:cb:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:43 2023 by rpki-client on console-ams.rpki-client.org