Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TRPV9fLsw00d1oXANpiQB52iL5g.roa
File:                     TRPV9fLsw00d1oXANpiQB52iL5g.roa (raw, json)
Hash identifier:          kWCHhTqlms9QqIPHzz5FR+yASKT0wMLVw4+wy2qCbLU=
Subject key identifier:   4D:13:D5:F5:F2:EC:C3:4D:1D:D6:85:C0:36:98:90:07:9D:A2:2F:98
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0A98
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TRPV9fLsw00d1oXANpiQB52iL5g.roa
Signing time:             Sun 07 Feb 2021 11:50:35 +0000
ROA not before:           Sun 07 Feb 2021 11:50:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131607
IP address blocks:        150.117.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2712 (0xa98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Feb  7 11:50:35 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4D13D5F5F2ECC34D1DD685C0369890079DA22F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:38:a3:44:cd:94:ae:57:80:10:e5:72:8c:
                    7f:f7:b0:97:21:86:91:db:63:ff:4c:e9:fa:af:a0:
                    57:40:92:9b:d4:59:2e:f1:41:91:4e:50:7b:e6:6e:
                    03:42:c0:52:3a:8c:e5:0a:e3:31:e1:0d:93:88:1f:
                    0d:b1:1d:f4:05:a2:60:0a:17:41:29:d8:dc:5e:20:
                    69:82:c9:45:70:02:2d:c5:c7:84:3f:37:f2:5b:16:
                    14:29:84:9b:4f:23:e1:61:02:0f:73:8f:e5:40:ae:
                    38:97:e9:4d:a2:d9:bd:31:92:29:2c:3b:8b:6d:1f:
                    e9:0e:5a:26:3c:95:c9:3e:94:b4:fc:3b:f9:19:de:
                    c8:00:92:1b:8a:ca:9d:6b:f3:fc:a5:1e:ab:5d:71:
                    0d:bb:70:e5:14:c6:80:3d:bd:ea:e5:69:c9:8f:00:
                    d1:1a:d6:d6:4d:61:27:eb:61:fb:cb:71:05:69:72:
                    fa:b1:f3:9e:a1:df:c2:c7:7d:59:19:93:dd:4e:f5:
                    61:f2:8c:33:3b:66:05:59:b1:03:62:ab:03:90:16:
                    c9:bd:9a:e4:b3:3e:7e:45:b1:60:db:d2:a2:26:0a:
                    a2:22:d3:a8:2a:60:b7:36:14:7a:e9:fe:32:1c:aa:
                    4d:bf:f1:ea:a5:33:97:f1:d8:77:bf:2b:d5:c2:89:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:13:D5:F5:F2:EC:C3:4D:1D:D6:85:C0:36:98:90:07:9D:A2:2F:98
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/TRPV9fLsw00d1oXANpiQB52iL5g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.117.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:2c:c3:84:2d:a7:82:b3:8d:f9:9a:65:bf:c4:49:b7:b3:86:
         3a:2b:17:87:66:cf:0c:b8:fe:09:af:f3:65:a5:66:db:15:94:
         92:4f:43:8c:26:73:74:00:2f:ef:ee:84:60:7e:15:69:dc:dd:
         cc:41:cc:b7:b2:55:f2:cb:b5:0c:7f:32:e9:6c:cb:60:51:58:
         ad:c4:8d:f6:43:f1:85:28:3d:25:e1:5c:52:16:6f:01:ae:a0:
         41:7d:f3:48:34:bc:df:21:a4:a9:65:e9:32:22:17:53:0a:36:
         09:66:93:fe:e4:6c:02:7c:79:37:2e:b5:f1:b5:98:c6:38:ed:
         21:2a:ee:fb:a2:e1:1a:d5:b7:50:22:0b:e8:9c:6c:66:f7:f5:
         2b:ae:9a:ed:cf:04:c9:ec:e2:8e:24:ec:da:00:ff:12:1b:8f:
         32:ad:a7:b6:23:58:4f:f7:37:28:db:eb:dc:6d:03:20:22:7d:
         c1:66:3f:e8:ed:07:f7:18:67:e1:1e:6f:4e:7d:59:08:45:fc:
         b8:50:0e:c7:9a:48:77:1a:a4:0e:4d:13:75:94:5e:fe:c0:f3:
         57:5a:3b:d9:50:b5:88:ae:82:2e:12:7f:61:61:44:d8:46:8a:
         12:eb:d3:48:44:f7:e1:a7:b5:94:fe:b1:80:2a:65:11:db:95:
         10:f6:c9:c0
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCpgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMTAyMDcx
MTUwMzVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDREMTNENUY1RjJFQ0Mz
NEQxREQ2ODVDMDM2OTg5MDA3OURBMjJGOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRrjijRM2UrleAEOVyjH/3sJchhpHbY/9M6fqvoFdAkpvUWS7x
QZFOUHvmbgNCwFI6jOUK4zHhDZOIHw2xHfQFomAKF0Ep2NxeIGmCyUVwAi3Fx4Q/
N/JbFhQphJtPI+FhAg9zj+VArjiX6U2i2b0xkiksO4ttH+kOWiY8lck+lLT8O/kZ
3sgAkhuKyp1r8/ylHqtdcQ27cOUUxoA9verlacmPANEa1tZNYSfrYfvLcQVpcvqx
856h38LHfVkZk91O9WHyjDM7ZgVZsQNiqwOQFsm9muSzPn5FsWDb0qImCqIi06gq
YLc2FHrp/jIcqk2/8eqlM5fx2He/K9XCiSfDAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUTRPV9fLsw00d1oXANpiQB52iL5gwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9UUlBWOWZMc3cwMGQx
b1hBTnBpUUI1MmlMNWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQElnVQMA0GCSqGSIb3DQEBCwUAA4IBAQB+LMOELaeCs435mmW/xEm3s4Y6KxeH
Zs8MuP4Jr/NlpWbbFZSST0OMJnN0AC/v7oRgfhVp3N3MQcy3slXyy7UMfzLpbMtg
UVitxI32Q/GFKD0l4VxSFm8BrqBBffNINLzfIaSpZekyIhdTCjYJZpP+5GwCfHk3
LrXxtZjGOO0hKu77ouEa1bdQIgvonGxm9/UrrprtzwTJ7OKOJOzaAP8SG48yrae2
I1hP9zco2+vcbQMgIn3BZj/o7Qf3GGfhHm9OfVkIRfy4UA7Hmkh3GqQOTRN1lF7+
wPNXWjvZULWIroIuEn9hYUTYRooS69NIRPfhp7WU/rGAKmUR25UQ9snA
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:58 2023 by rpki-client on console-fra.rpki-client.org