Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/0oZyCvtAZxUHMFmSlnQ8yDGfC80.roa
File:                     0oZyCvtAZxUHMFmSlnQ8yDGfC80.roa (raw, json)
Hash identifier:          W8/OJneRUQA0Pc4s09OWBUlYfFiPbTsS4slUJ9HIQBE=
Subject key identifier:   D2:86:72:0A:FB:40:67:15:07:30:59:92:96:74:3C:C8:31:9F:0B:CD
Certificate issuer:       /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Certificate serial:       0910
Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/0oZyCvtAZxUHMFmSlnQ8yDGfC80.roa
Signing time:             Wed 29 Sep 2021 02:39:21 +0000
ROA not before:           Wed 29 Sep 2021 02:39:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131144
IP address blocks:        103.10.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
        Validity
            Not Before: Sep 29 02:39:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D286720AFB4067150730599296743CC8319F0BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:a5:76:4b:19:4a:f8:17:6e:07:5a:c5:f1:
                    1a:47:fa:4a:b2:21:bc:b9:2f:be:93:49:5d:43:32:
                    09:7b:74:cc:05:8a:31:f1:65:1d:a6:3d:76:15:a9:
                    70:e8:f3:c5:8a:7e:8d:0a:39:c1:df:4c:ee:dc:8c:
                    a9:0a:95:16:f7:ab:1d:9a:24:45:08:5a:9d:e7:97:
                    de:06:c3:87:0e:15:40:b2:f3:2c:46:4d:54:31:1b:
                    20:9e:5a:9b:c1:29:10:f8:d2:3a:1f:b0:03:4c:97:
                    05:05:75:a3:f9:a9:19:f3:cb:59:b2:7a:3e:29:fa:
                    da:f5:81:7f:8b:e6:a8:e5:50:1e:27:7d:d3:c2:fa:
                    12:f0:0c:f3:42:6e:96:2c:9e:cf:9b:35:41:57:30:
                    ef:bb:21:27:e2:52:1c:c7:02:a5:9d:19:df:75:41:
                    92:76:b2:54:91:fb:84:af:b4:64:d4:64:7e:3f:22:
                    9f:41:f4:ad:f0:ee:72:fe:a5:10:1d:a9:20:f2:8c:
                    53:10:48:a2:f3:30:fb:aa:7f:21:01:85:ad:2f:f8:
                    f4:0c:70:9f:56:12:e7:bf:fd:38:ec:c1:72:42:d3:
                    dc:6c:38:ad:60:42:e3:0f:30:d8:32:a8:64:b3:3f:
                    d9:bd:a5:46:7c:9b:e5:27:f3:e5:46:af:96:70:8e:
                    a6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:72:0A:FB:40:67:15:07:30:59:92:96:74:3C:C8:31:9F:0B:CD
            X509v3 Authority Key Identifier:
                keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/0oZyCvtAZxUHMFmSlnQ8yDGfC80.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:02:63:f8:e6:d0:26:a2:46:be:42:d9:c3:ed:62:a7:a8:d9:
         f4:b0:59:dc:e6:60:86:fb:a4:c7:ff:b7:5f:1e:49:8d:43:ba:
         4f:c5:b9:bb:1e:18:ea:f5:f0:1b:e4:f6:b8:a8:6e:07:fe:be:
         40:ce:3f:6e:85:b1:2c:e5:f3:21:07:2f:30:a8:01:47:8a:0b:
         2c:e4:3b:12:98:05:9e:ea:29:29:4d:ae:1e:e2:5c:d8:6c:5b:
         f4:9d:10:57:b0:b3:41:47:80:53:01:57:14:00:ec:9b:a1:99:
         9f:94:21:27:50:e4:92:bf:ba:9a:ef:fc:b2:65:4a:ac:ae:11:
         77:85:96:64:9c:af:0b:5a:80:13:7c:76:85:98:58:ca:36:5a:
         d0:f0:1a:9c:bb:ea:89:bd:04:61:27:70:ea:4f:ba:a4:df:43:
         23:a4:53:e6:7f:28:ac:b4:d9:68:29:04:2f:cb:eb:11:54:d3:
         9f:ab:84:99:42:3e:18:a1:ce:d1:1d:ac:f8:f8:43:76:b3:e9:
         49:b1:39:79:72:fc:6d:bd:e7:a3:05:63:10:a4:6b:1e:e4:02:
         bb:94:cc:2a:d9:95:87:d3:c0:8c:4f:13:59:4d:cd:e2:f1:5e:
         19:47:31:bb:7c:e6:fc:e1:e7:91:f9:18:ba:e0:55:f7:20:d2:
         97:52:cf:6e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzg2
NjQ4Rjc5QkI3OUUxRjBCMEZGOTAzOTY5MkY3NEU0RjNDRTFGODAeFw0yMTA5Mjkw
MjM5MjFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEQyODY3MjBBRkI0MDY3
MTUwNzMwNTk5Mjk2NzQzQ0M4MzE5RjBCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPZ6V2SxlK+BduB1rF8RpH+kqyIby5L76TSV1DMgl7dMwFijHx
ZR2mPXYVqXDo88WKfo0KOcHfTO7cjKkKlRb3qx2aJEUIWp3nl94Gw4cOFUCy8yxG
TVQxGyCeWpvBKRD40jofsANMlwUFdaP5qRnzy1myej4p+tr1gX+L5qjlUB4nfdPC
+hLwDPNCbpYsns+bNUFXMO+7ISfiUhzHAqWdGd91QZJ2slSR+4SvtGTUZH4/Ip9B
9K3w7nL+pRAdqSDyjFMQSKLzMPuqfyEBha0v+PQMcJ9WEue//TjswXJC09xsOK1g
QuMPMNgyqGSzP9m9pUZ8m+Un8+VGr5ZwjqaxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU0oZyCvtAZxUHMFmSlnQ8yDGfC80wHwYDVR0jBBgwFoAUeGZI95u3nh8LD/kD
lpL3Tk884fgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNVUy9l
R1pJOTV1M25oOExEX2tEbHBMM1RrODg0ZmcuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2VHWkk5NXUzbmg4TERfa0RscEwzVGs4ODRmZy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FTVVMvMG9aeUN2dEFaeFVITUZtU2xuUTh5
REdmQzgwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcKBDAN
BgkqhkiG9w0BAQsFAAOCAQEAPAJj+ObQJqJGvkLZw+1ip6jZ9LBZ3OZghvukx/+3
Xx5JjUO6T8W5ux4Y6vXwG+T2uKhuB/6+QM4/boWxLOXzIQcvMKgBR4oLLOQ7EpgF
nuopKU2uHuJc2Gxb9J0QV7CzQUeAUwFXFADsm6GZn5QhJ1Dkkr+6mu/8smVKrK4R
d4WWZJyvC1qAE3x2hZhYyjZa0PAanLvqib0EYSdw6k+6pN9DI6RT5n8orLTZaCkE
L8vrEVTTn6uEmUI+GKHO0R2s+PhDdrPpSbE5eXL8bb3nowVjEKRrHuQCu5TMKtmV
h9PAjE8TWU3N4vFeGUcxu3zm/OHnkfkYuuBV9yDSl1LPbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:02 2024 by rpki-client on console-ams.rpki-client.org