Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/vj65nciG4U-HTyUfQJFW5i49YAM.roa
File:                     vj65nciG4U-HTyUfQJFW5i49YAM.roa (raw, json)
Hash identifier:          J2EXPu4Y7WkB+7Yhjln4GvqHVMhZ3oTVTt8hgBw+U1I=
Subject key identifier:   BE:3E:B9:9D:C8:86:E1:4F:87:4F:25:1F:40:91:56:E6:2E:3D:60:03
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0957
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/vj65nciG4U-HTyUfQJFW5i49YAM.roa
Signing time:             Sun 07 Feb 2021 13:05:08 +0000
ROA not before:           Sun 07 Feb 2021 13:05:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        103.30.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 13:05:08 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BE3EB99DC886E14F874F251F409156E62E3D6003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:c4:9b:a2:e4:39:92:dd:ef:52:74:68:55:
                    33:47:c7:a9:1b:5b:c7:46:9a:9c:9c:7a:7a:b7:eb:
                    2d:02:77:8a:cf:bc:a2:55:7c:0c:6d:1b:7c:ae:fc:
                    cf:68:fd:8b:f4:d6:ee:07:3f:20:89:10:0d:54:d2:
                    0b:fe:b9:95:03:fb:f9:48:a5:03:3e:a8:b8:27:4f:
                    b9:b7:c7:e9:63:9d:21:8a:65:2f:6b:4e:ae:70:62:
                    ea:a4:22:f6:bb:8f:fe:3b:67:de:77:65:35:18:df:
                    b2:71:7b:35:b6:8d:0b:b7:e2:d1:e0:47:7e:45:2d:
                    98:d6:61:82:c2:57:1c:d3:95:7f:dd:ab:1e:6f:04:
                    ec:ab:41:1e:1a:54:31:c1:a5:cf:e5:25:e3:ea:6e:
                    dd:1d:89:5b:a0:2b:30:ba:0e:79:04:f9:9f:dc:0d:
                    d8:71:63:32:e8:4a:84:b6:05:4e:a4:6d:24:15:7f:
                    ec:8e:c0:3b:4f:be:1b:94:5a:fa:75:a8:3c:d8:da:
                    2e:74:d7:a2:56:f8:3c:16:95:3d:ef:e4:9c:cd:95:
                    bc:16:e0:55:af:02:e5:f4:15:2a:1f:54:56:b6:57:
                    eb:be:b4:36:ab:7c:1c:01:15:5c:80:f8:11:b1:57:
                    b1:1e:b4:39:7b:4b:ed:8c:5b:23:b3:0c:20:b6:63:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3E:B9:9D:C8:86:E1:4F:87:4F:25:1F:40:91:56:E6:2E:3D:60:03
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/vj65nciG4U-HTyUfQJFW5i49YAM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:ca:30:e7:68:33:3c:c8:a5:c5:8f:79:66:88:fb:c4:22:a5:
         ab:6c:52:60:d3:31:f2:62:83:1c:a7:e2:db:f8:4d:2d:d3:6a:
         fa:76:1a:9c:48:93:15:03:9d:45:38:21:90:96:f5:b2:ca:93:
         22:59:a5:a5:ed:84:62:3b:d6:4f:2f:56:9d:e2:66:6b:f2:9e:
         4c:f9:68:ab:d3:4e:5a:02:e8:16:61:0d:06:63:98:75:c3:fa:
         97:43:d6:50:ed:81:18:90:cd:96:13:1b:3a:d0:35:04:88:10:
         ac:3d:a9:c9:3e:83:49:1e:3f:9b:92:ec:a9:35:d2:f4:cf:f9:
         24:69:48:c6:9c:47:8d:de:dc:58:8a:c8:8a:93:23:8a:f7:d7:
         ff:22:ff:20:34:42:b2:c2:01:ac:45:90:af:44:ef:06:c3:70:
         9b:a8:e0:9c:71:3f:06:52:46:1c:82:a3:6f:36:ad:1a:90:1c:
         5f:2d:da:e3:88:fd:e0:ad:9e:94:85:8e:08:b3:3c:22:e4:04:
         69:fa:8f:00:ae:b2:16:69:84:ef:9a:4a:75:53:45:2e:20:31:
         2d:79:9f:cd:5c:4b:b7:36:d5:2a:76:87:fd:70:e6:da:08:34:
         cf:4d:0c:70:56:02:42:e6:55:5e:04:08:ab:2b:0d:5e:fe:f3:
         32:5a:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org