Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/W_aZB4pQQYdjkYaUzf1sAuMGVb0.roa
File:                     W_aZB4pQQYdjkYaUzf1sAuMGVb0.roa (raw, json)
Hash identifier:          1/57ezPzim4tUhNEJ1Q/LlWly2S7FLce+It4/I/7UMQ=
Subject key identifier:   5B:F6:99:07:8A:50:41:87:63:91:86:94:CD:FD:6C:02:E3:06:55:BD
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0841
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/W_aZB4pQQYdjkYaUzf1sAuMGVb0.roa
Signing time:             Tue 29 Sep 2020 10:02:14 +0000
ROA not before:           Tue 29 Sep 2020 10:02:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        150.116.16.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 29 10:02:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5BF699078A50418763918694CDFD6C02E30655BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:e4:af:5e:3a:f0:29:b9:cb:e3:40:45:71:66:
                    8e:fb:a3:c6:f1:b8:54:62:0f:03:71:6f:38:a5:4e:
                    1a:99:cd:68:b2:ae:f4:e3:e9:1f:e0:ec:8c:50:88:
                    80:d8:5f:25:3d:70:fa:45:9a:40:57:42:2b:50:63:
                    a1:c9:4d:9f:8d:3e:fd:ce:0d:96:f8:73:ce:70:a5:
                    fe:90:a6:0f:4e:92:6c:e0:58:39:aa:34:d5:a6:19:
                    e6:82:6f:06:bc:2c:df:af:b7:3a:47:66:6b:54:c3:
                    4d:aa:b9:b0:29:48:66:ff:0f:f4:70:e8:86:b7:ef:
                    a4:92:6c:f0:95:74:c7:da:c2:a3:66:23:5b:93:ad:
                    35:a3:75:1d:d9:19:4c:e2:d5:01:c9:9f:ba:ae:1d:
                    12:cc:06:fd:22:65:3f:39:a2:ba:e3:04:6f:81:a7:
                    a4:2e:b5:24:59:2f:5a:f0:df:e6:4a:34:7d:d3:77:
                    8d:83:40:4f:ed:d5:b9:87:07:21:df:4a:74:b4:31:
                    d3:98:75:40:18:2d:71:bc:80:13:05:a7:99:3a:89:
                    f9:48:d4:f0:08:7a:18:0b:7c:1e:e5:8b:a3:ef:1b:
                    94:fa:55:dc:54:39:0a:ac:b5:0a:6e:e6:38:46:7e:
                    86:77:31:2c:6f:43:34:15:fc:0a:cd:64:1b:ca:83:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F6:99:07:8A:50:41:87:63:91:86:94:CD:FD:6C:02:E3:06:55:BD
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/W_aZB4pQQYdjkYaUzf1sAuMGVb0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:68:31:a1:dc:71:be:75:67:09:5d:a0:1f:fe:1b:ac:ff:
         ad:81:ea:4d:3f:54:e4:3f:51:08:3d:96:cc:e7:11:7f:5c:d5:
         ca:83:7a:7e:20:36:25:03:8e:68:b5:d4:9f:7c:c2:9e:2a:46:
         71:84:24:d2:85:11:64:bb:fb:e7:06:a7:97:2f:02:b0:78:dd:
         df:94:8c:a7:c1:b4:32:9c:4d:c8:62:88:7f:6a:9e:6c:1b:aa:
         51:36:4a:19:e8:57:bf:26:69:40:b4:5b:00:4c:53:ed:37:2a:
         d4:b0:9a:8a:41:5a:07:f3:8d:4c:16:68:2e:df:d7:52:bb:bf:
         80:e3:eb:0f:71:75:3b:9f:1b:5c:38:25:e3:88:cf:96:de:21:
         ad:12:66:5d:fa:f9:cb:bb:3c:ea:e1:f0:20:28:d4:ec:9f:ba:
         19:ae:ee:d3:6f:96:36:05:5d:56:5e:63:26:51:a6:3c:fd:70:
         2a:44:39:3a:6a:1b:b3:6c:35:2a:66:f4:e8:39:6a:b4:02:f7:
         8a:e7:03:7d:77:8c:64:75:38:e6:40:f5:b6:b7:b4:60:02:ec:
         e7:16:2e:61:8f:0b:43:be:b4:1e:02:51:fa:2b:c2:c0:db:d5:
         a1:4d:a3:6c:82:61:a3:9f:c0:ad:fe:68:a4:8c:ef:7f:dc:89:
         9b:42:dc:76
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMDA5Mjkx
MDAyMTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVCRjY5OTA3OEE1MDQx
ODc2MzkxODY5NENERkQ2QzAyRTMwNjU1QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD95K9eOvApucvjQEVxZo77o8bxuFRiDwNxbzilThqZzWiyrvTj
6R/g7IxQiIDYXyU9cPpFmkBXQitQY6HJTZ+NPv3ODZb4c85wpf6Qpg9OkmzgWDmq
NNWmGeaCbwa8LN+vtzpHZmtUw02qubApSGb/D/Rw6Ia376SSbPCVdMfawqNmI1uT
rTWjdR3ZGUzi1QHJn7quHRLMBv0iZT85orrjBG+Bp6QutSRZL1rw3+ZKNH3Td42D
QE/t1bmHByHfSnS0MdOYdUAYLXG8gBMFp5k6iflI1PAIehgLfB7li6PvG5T6VdxU
OQqstQpu5jhGfoZ3MSxvQzQV/ArNZBvKgz7dAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUW/aZB4pQQYdjkYaUzf1sAuMGVb0wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9XX2FaQjRwUVFZZGpr
WWFVemYxc0F1TUdWYjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQElnQQMA0GCSqGSIb3DQEBCwUAA4IBAQCWHWgxodxxvnVnCV2gH/4brP+tgepN
P1TkP1EIPZbM5xF/XNXKg3p+IDYlA45otdSffMKeKkZxhCTShRFku/vnBqeXLwKw
eN3flIynwbQynE3IYoh/ap5sG6pRNkoZ6Fe/JmlAtFsATFPtNyrUsJqKQVoH841M
Fmgu39dSu7+A4+sPcXU7nxtcOCXjiM+W3iGtEmZd+vnLuzzq4fAgKNTsn7oZru7T
b5Y2BV1WXmMmUaY8/XAqRDk6ahuzbDUqZvToOWq0AveK5wN9d4xkdTjmQPW2t7Rg
AuznFi5hjwtDvrQeAlH6K8LA29WhTaNsgmGjn8Ct/mikjO9/3ImbQtx2
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:40 2025 by rpki-client