Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qj6xlRr9eWNv-KKgPrv1Sl3zXzY.roa
File:                     qj6xlRr9eWNv-KKgPrv1Sl3zXzY.roa (raw, json)
Hash identifier:          BQrgVzzaYm1YmlvNViJuaPdH2CUAr7Dk+nUcL9SbThs=
Subject key identifier:   AA:3E:B1:95:1A:FD:79:63:6F:F8:A2:A0:3E:BB:F5:4A:5D:F3:5F:36
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       086C
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qj6xlRr9eWNv-KKgPrv1Sl3zXzY.roa
Signing time:             Wed 04 Nov 2020 08:39:55 +0000
ROA not before:           Wed 04 Nov 2020 08:39:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        121.50.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2156 (0x86c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Nov  4 08:39:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AA3EB1951AFD79636FF8A2A03EBBF54A5DF35F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:5c:fa:07:0e:b7:21:95:47:e2:00:13:72:
                    ae:f4:96:c7:e0:5e:c4:b5:a4:b6:1d:1c:80:98:37:
                    ca:9f:34:29:b3:1d:0b:11:32:21:95:1e:ae:ea:e8:
                    31:f4:51:9e:69:04:9d:0d:7a:6b:40:3a:ee:62:e5:
                    22:c8:24:70:88:df:60:15:7a:7e:29:3b:3c:78:9d:
                    6b:f0:05:ed:b7:8b:73:dd:f6:b3:a1:66:43:d8:e0:
                    3b:30:10:68:04:95:6c:c6:c8:35:ee:6d:c7:80:65:
                    58:df:16:92:56:72:ff:11:89:64:14:30:d5:49:5c:
                    34:cc:0a:04:c1:a0:74:e6:e2:9f:96:b5:63:38:5d:
                    1e:d4:0b:15:37:1b:20:c3:13:11:5e:a6:01:cf:43:
                    35:c5:fa:9b:b8:20:7e:e8:9e:06:c8:29:00:8b:c2:
                    4b:98:ed:be:6e:34:49:85:8c:44:09:62:35:a8:dd:
                    75:0d:3c:a9:fc:8c:cc:cc:b2:c3:ae:51:87:6f:70:
                    a7:9e:59:cb:0b:07:83:df:33:3e:cf:aa:21:6e:a0:
                    a1:f1:01:1a:f1:ad:fe:8a:0b:cf:34:54:34:29:69:
                    f3:ae:6c:fb:4b:4c:bc:4c:df:ee:de:e2:d5:6d:3d:
                    e6:d2:dc:6f:6f:3f:84:85:83:7e:62:a7:d8:f5:72:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3E:B1:95:1A:FD:79:63:6F:F8:A2:A0:3E:BB:F5:4A:5D:F3:5F:36
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/qj6xlRr9eWNv-KKgPrv1Sl3zXzY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:2e:3e:ed:07:c5:14:8c:3d:af:df:b8:24:0c:af:07:be:87:
         89:ff:99:f4:d3:25:98:93:c9:37:75:fd:40:51:d2:37:99:78:
         09:85:c6:65:20:82:ec:d7:92:a7:28:8f:f2:35:03:95:a1:ec:
         c1:08:aa:6d:2b:4e:f1:b6:8c:12:4b:0e:70:c5:32:f0:0f:d1:
         51:9e:d1:cd:90:1f:65:ff:be:53:27:d7:bf:54:5d:48:ad:e1:
         e6:bd:61:49:84:cb:73:e6:18:fe:5c:e6:c3:aa:9c:c1:6f:cc:
         40:2d:3b:f0:43:73:e0:a7:e8:d3:d0:9b:da:64:72:4e:d0:b4:
         3c:f8:b8:f4:3f:62:c9:f3:3b:5b:12:5d:68:49:fa:4e:2c:e4:
         58:df:29:48:62:fc:31:41:d6:46:81:e6:48:70:05:b3:16:d3:
         6f:8c:a9:66:11:1d:f7:29:89:91:b0:04:26:b2:d8:4c:a4:18:
         a1:d6:fc:45:4c:ab:85:93:38:16:ff:1e:00:b9:53:3e:24:8b:
         f5:1a:dd:58:f5:1e:98:87:c0:30:e9:49:7e:20:d6:56:6c:31:
         cd:ac:37:20:44:b3:0c:33:6f:60:08:60:43:62:36:cb:86:39:
         7f:22:4f:f0:6f:0c:ca:66:9e:cc:33:58:66:9d:38:b4:90:d9:
         e1:a8:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org