Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/vQcfj3-7chusg-_pw3gYDFMuArY.roa
File:                     vQcfj3-7chusg-_pw3gYDFMuArY.roa (raw, json)
Hash identifier:          DRkD18yVc4+pZYP1LzmmtLTuX1KoynBYP+YwojoujzU=
Subject key identifier:   BD:07:1F:8F:7F:BB:72:1B:AC:83:EF:E9:C3:78:18:0C:53:2E:02:B6
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0850
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/vQcfj3-7chusg-_pw3gYDFMuArY.roa
Signing time:             Wed 04 Nov 2020 08:30:18 +0000
ROA not before:           Wed 04 Nov 2020 08:30:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        103.30.46.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Nov  4 08:30:18 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BD071F8F7FBB721BAC83EFE9C378180C532E02B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8c:8a:f6:8f:c0:36:24:c4:d3:10:e4:4b:43:
                    8c:35:5a:75:34:7c:9c:3b:f9:eb:ad:21:94:a9:4d:
                    3f:89:d6:f2:f5:ab:c7:37:8f:50:74:e7:37:16:5b:
                    21:fa:94:b2:bd:b6:91:ed:30:ee:d5:52:80:4c:f8:
                    6d:0b:25:56:9a:b3:cb:12:94:11:0f:68:0c:09:7e:
                    16:8a:2b:2a:fa:5c:de:30:c1:3d:44:5a:63:a3:f1:
                    82:d3:57:e3:2c:31:dd:e5:6d:04:47:d4:2f:f4:e3:
                    92:ed:bc:ec:84:8d:bf:a0:a1:48:42:76:9c:ca:63:
                    7a:8e:3b:ba:db:92:1e:e1:8e:91:55:ae:8c:eb:10:
                    40:ec:6a:e3:9d:0a:e4:34:79:31:2e:10:57:16:2d:
                    1f:41:ef:97:88:9c:79:8d:4a:a2:c8:cd:8a:ea:8e:
                    39:02:12:c4:8a:03:22:b2:c4:b7:fa:33:9b:95:73:
                    e8:29:44:3c:72:f5:b7:13:65:90:0c:92:b8:d1:90:
                    d9:98:af:fe:a6:ea:81:e9:fc:da:5d:82:4c:92:b5:
                    48:ff:98:5c:17:4e:24:3d:43:61:e8:ec:71:24:50:
                    f8:c9:db:04:21:9c:19:a9:fe:6f:7d:d3:19:b6:a1:
                    2f:d5:a8:a4:85:70:2d:66:b0:2d:50:86:40:f7:14:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:07:1F:8F:7F:BB:72:1B:AC:83:EF:E9:C3:78:18:0C:53:2E:02:B6
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/vQcfj3-7chusg-_pw3gYDFMuArY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:2f:31:e3:69:6e:68:e6:d1:7b:72:2d:ad:f2:41:5d:19:fb:
         64:e0:cb:c2:77:1e:ad:33:d4:dd:07:be:03:87:8e:a5:14:3e:
         b2:e0:db:5e:da:9d:38:0c:8a:d1:c2:52:ad:c3:ab:c7:ef:c2:
         2c:cb:9b:ed:89:5d:e0:2f:7e:f2:b3:e6:84:a9:8d:df:26:eb:
         23:fd:85:5e:bf:92:f4:49:b6:3d:fb:36:e6:4f:bc:e6:1a:86:
         f3:ed:90:27:74:94:a4:91:95:df:37:35:42:59:07:0b:b2:b2:
         86:89:69:69:4a:16:37:2a:ec:51:db:2c:f1:07:14:38:33:35:
         77:81:ef:e5:10:6f:a6:ae:80:51:f8:68:15:d3:ee:cf:c3:40:
         be:3a:6c:67:f3:e8:fd:fa:58:a6:d5:59:a1:7a:0c:9c:f5:d7:
         63:e2:f3:bd:f6:8f:c1:41:ff:a7:dc:74:1a:ab:34:d4:23:5d:
         ea:07:eb:f4:61:9a:f4:56:b5:51:99:23:17:11:01:3a:fa:ee:
         02:4c:33:ef:56:c5:35:2d:d7:6a:03:e5:2e:27:40:e9:3f:8e:
         6c:f7:81:d1:78:24:fd:41:2c:70:74:bd:70:85:5b:50:f5:0f:
         f2:fc:09:38:56:79:2a:69:0f:7f:7b:c4:fe:1b:df:4e:d1:f3:
         7a:0c:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:43 2023 by rpki-client on console-ams.rpki-client.org