Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4Vyo47Cskrdx72np0mWcc9np64U.roa
File:                     4Vyo47Cskrdx72np0mWcc9np64U.roa (raw, json)
Hash identifier:          c8/XPk4TEYL1LFY6adgEuFgrivpAz9fhwu/7VKWuuPA=
Subject key identifier:   E1:5C:A8:E3:B0:AC:92:B7:71:EF:69:E9:D2:65:9C:73:D9:E9:EB:85
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0AC6
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4Vyo47Cskrdx72np0mWcc9np64U.roa
Signing time:             Sun 07 Feb 2021 12:38:04 +0000
ROA not before:           Sun 07 Feb 2021 12:38:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131627
IP address blocks:        150.116.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2758 (0xac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Feb  7 12:38:04 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E15CA8E3B0AC92B771EF69E9D2659C73D9E9EB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:9b:f1:9f:42:f3:4e:e7:9b:56:0d:a1:cd:
                    aa:bd:f2:e3:3d:17:9d:a8:eb:b9:b4:03:5c:27:cb:
                    a5:f7:ed:3e:c0:76:27:b6:66:2a:63:43:44:12:b2:
                    be:4e:93:25:0f:33:b4:b5:02:78:e7:7a:e2:1e:e5:
                    27:57:2c:23:2e:d4:66:ed:7d:31:45:dc:05:dd:e0:
                    1a:84:8c:02:11:10:d5:59:21:4b:02:2b:bc:de:8a:
                    eb:25:dd:6f:0b:8b:78:f5:7d:af:da:2f:d3:1d:c8:
                    ff:61:b0:95:ca:b9:ee:97:80:e4:f0:e1:7d:c9:29:
                    73:61:07:65:6c:ed:cc:6d:2e:e3:0e:3d:49:8f:0f:
                    8f:bb:b7:1e:3c:0b:c3:2d:8f:b7:55:16:e7:23:5a:
                    68:91:ea:7d:07:d3:7d:9a:24:84:1e:54:9e:a9:1f:
                    50:c1:de:68:00:46:28:2d:12:65:f4:f6:13:54:21:
                    1d:d3:3c:cb:f7:d6:73:af:39:49:a6:73:ad:65:ab:
                    c5:44:e6:46:15:48:9f:3b:bb:72:65:92:38:5a:23:
                    f4:e9:d3:3f:86:99:d1:75:ce:45:9d:3a:9e:50:08:
                    78:7b:39:e1:c3:c4:8d:0a:02:e5:9c:a9:df:23:27:
                    43:be:7c:9a:c0:4d:c6:f7:53:07:8a:b2:5d:ae:49:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5C:A8:E3:B0:AC:92:B7:71:EF:69:E9:D2:65:9C:73:D9:E9:EB:85
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/4Vyo47Cskrdx72np0mWcc9np64U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:73:b1:fb:0e:57:31:e4:92:44:e8:5e:4b:21:3c:03:d7:49:
         0c:60:5e:22:d8:23:1f:a8:d1:24:af:05:ac:ca:b6:0a:17:c3:
         8f:74:00:97:ed:aa:62:9b:c4:f9:45:41:0c:c5:14:2a:f4:77:
         48:f2:4e:b9:84:46:0d:a3:75:9b:8f:a8:fd:1d:d3:b3:4c:5e:
         98:be:5b:2b:c2:ab:c6:a5:62:b4:60:b6:ed:0a:52:1e:99:7c:
         14:f8:89:d1:8d:77:11:d4:a1:dc:97:38:a2:2a:81:e2:a2:04:
         b6:0d:b9:1e:7b:eb:f7:d5:65:27:01:79:8f:a7:8c:67:09:e8:
         79:7a:6c:fc:82:44:1a:2d:ba:97:37:ff:9b:a7:91:65:b8:41:
         1e:a2:bc:d2:91:19:0e:54:9f:36:d5:20:01:66:3e:0c:bc:6a:
         be:7d:7c:62:e7:c3:32:68:df:57:e5:7e:e0:b2:89:ae:db:b5:
         b2:8a:11:f4:a3:2f:35:f0:58:e8:38:e4:0e:e8:9a:cd:7b:7e:
         30:ba:35:1c:7d:b5:93:5a:81:c2:b4:ac:93:d2:b7:40:58:dc:
         b3:c8:17:78:ea:3e:7c:16:12:71:56:31:e5:8a:fa:be:a7:11:
         43:61:2d:be:e0:1d:77:a9:f9:6f:62:0c:a7:cd:07:79:1d:25:
         22:a0:fd:ee
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTAyMDcx
MjM4MDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEUxNUNBOEUzQjBBQzky
Qjc3MUVGNjlFOUQyNjU5QzczRDlFOUVCODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOmZvxn0LzTuebVg2hzaq98uM9F52o67m0A1wny6X37T7Adie2
ZipjQ0QSsr5OkyUPM7S1AnjneuIe5SdXLCMu1GbtfTFF3AXd4BqEjAIRENVZIUsC
K7zeiusl3W8Li3j1fa/aL9MdyP9hsJXKue6XgOTw4X3JKXNhB2Vs7cxtLuMOPUmP
D4+7tx48C8Mtj7dVFucjWmiR6n0H032aJIQeVJ6pH1DB3mgARigtEmX09hNUIR3T
PMv31nOvOUmmc61lq8VE5kYVSJ87u3JlkjhaI/Tp0z+GmdF1zkWdOp5QCHh7OeHD
xI0KAuWcqd8jJ0O+fJrATcb3UweKsl2uSQVBAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU4Vyo47Cskrdx72np0mWcc9np64UwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy80VnlvNDdDc2tyZHg3
Mm5wMG1XY2M5bnA2NFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnTvMA0GCSqGSIb3DQEBCwUAA4IBAQBDc7H7Dlcx5JJE6F5LITwD10kMYF4i
2CMfqNEkrwWsyrYKF8OPdACX7apim8T5RUEMxRQq9HdI8k65hEYNo3Wbj6j9HdOz
TF6YvlsrwqvGpWK0YLbtClIemXwU+InRjXcR1KHclziiKoHiogS2Dbkee+v31WUn
AXmPp4xnCeh5emz8gkQaLbqXN/+bp5FluEEeorzSkRkOVJ821SABZj4MvGq+fXxi
58MyaN9X5X7gsomu27WyihH0oy818FjoOOQO6JrNe34wujUcfbWTWoHCtKyT0rdA
WNyzyBd46j58FhJxVjHlivq+pxFDYS2+4B13qflvYgynzQd5HSUioP3u
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:33 2024 by rpki-client on console-fra.rpki-client.org