Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/aVcEpTY-vmVUWOQfRusfiwr-AgE.roa
File:                     aVcEpTY-vmVUWOQfRusfiwr-AgE.roa (raw, json)
Hash identifier:          eQxW0f1a5RBNGW6a2kiJ/kO832FZYm3vSNyL0AOukys=
Subject key identifier:   69:57:04:A5:36:3E:BE:65:54:58:E4:1F:46:EB:1F:8B:0A:FE:02:01
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/aVcEpTY-vmVUWOQfRusfiwr-AgE.roa
Signing time:             Thu 15 Sep 2022 02:39:13 +0000
ROA not before:           Thu 15 Sep 2022 02:39:13 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     7532
IP address blocks:        150.116.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 15 02:39:13 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=695704A5363EBE655458E41F46EB1F8B0AFE0201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:6a:cd:04:5b:e0:1c:92:88:77:77:36:86:
                    03:5e:5e:72:22:6b:9f:83:78:14:80:f7:b7:12:4a:
                    14:77:40:47:2b:fb:a5:08:1a:cd:54:be:ca:f9:aa:
                    e2:aa:ef:75:0b:69:d1:28:a3:c8:a0:1c:76:82:62:
                    73:0a:83:69:e1:6c:37:9c:95:4f:52:87:85:2c:39:
                    8d:f6:2b:46:97:bb:52:6d:b4:bd:72:0c:f0:53:56:
                    18:b6:9c:cc:b6:fb:0a:9c:fd:9d:8f:02:40:fe:a2:
                    52:a6:68:a5:8a:0f:73:42:ba:31:d4:6b:24:47:ee:
                    7d:f3:ac:08:94:1c:84:54:cf:bd:fe:41:69:b1:0e:
                    52:cf:af:8d:57:8a:91:4d:37:c8:51:6c:10:d6:15:
                    df:5b:07:80:78:a9:98:91:aa:d0:f8:eb:e7:29:48:
                    87:f7:26:1d:ba:5a:12:b0:9f:6e:aa:d1:5e:19:06:
                    62:52:2a:5b:df:22:b4:51:ec:f4:a8:7c:af:6d:17:
                    95:bd:b8:1d:1f:5f:66:b8:fd:cd:89:d5:00:d8:94:
                    83:84:9c:ea:7c:27:c7:12:80:f5:c1:db:f6:39:3f:
                    6c:35:eb:be:d6:97:22:78:0a:53:6c:2b:8f:24:e2:
                    f8:e1:86:bd:9f:5f:fa:f3:da:4b:e4:84:bf:d8:c1:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:57:04:A5:36:3E:BE:65:54:58:E4:1F:46:EB:1F:8B:0A:FE:02:01
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/aVcEpTY-vmVUWOQfRusfiwr-AgE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:64:ca:9a:91:ba:36:14:2b:9b:f6:b6:a2:9f:71:b5:ec:
         ef:6c:88:77:b2:ab:8a:8c:de:26:0c:16:b3:f7:8e:84:99:19:
         21:11:fa:05:b2:79:64:1d:4d:47:ed:35:e0:fe:8b:e5:c3:8d:
         32:15:5d:63:32:97:92:21:c3:68:3d:ec:35:5a:a3:ce:4a:a8:
         5a:2d:77:ae:42:51:84:64:20:d1:18:2c:ff:57:2d:ea:4c:94:
         15:00:80:e7:c1:af:5f:63:37:77:c0:d5:e3:f1:67:4e:77:7c:
         86:98:2f:a7:2a:ab:1e:e3:8d:64:e3:32:e8:06:e8:59:fd:30:
         ab:d3:52:ab:bc:b5:6d:f7:69:c5:0e:0d:c3:10:72:ac:d1:65:
         c9:3f:7c:c0:f4:40:4e:f4:8d:77:81:c2:57:a1:98:33:59:ad:
         ed:d3:a2:21:84:79:51:7d:c4:ab:8a:2b:b1:17:4a:8e:65:40:
         6a:e7:b3:5d:e2:ad:81:ec:1c:f9:3d:c0:6d:71:1c:e3:97:c8:
         39:8a:9a:f1:55:4a:a2:d0:75:4d:4e:c0:37:a9:9e:34:c9:87:
         fd:8a:1d:80:ce:69:ea:0a:e0:30:63:11:35:98:4f:11:8a:5d:
         91:f6:9c:1f:56:4a:5b:9c:bd:7e:64:cd:ff:73:fb:01:08:15:
         ec:f5:ba:52
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjA5MTUw
MjM5MTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDY5NTcwNEE1MzYzRUJF
NjU1NDU4RTQxRjQ2RUIxRjhCMEFGRTAyMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIu2rNBFvgHJKId3c2hgNeXnIia5+DeBSA97cSShR3QEcr+6UI
Gs1Uvsr5quKq73ULadEoo8igHHaCYnMKg2nhbDeclU9Sh4UsOY32K0aXu1JttL1y
DPBTVhi2nMy2+wqc/Z2PAkD+olKmaKWKD3NCujHUayRH7n3zrAiUHIRUz73+QWmx
DlLPr41XipFNN8hRbBDWFd9bB4B4qZiRqtD46+cpSIf3Jh26WhKwn26q0V4ZBmJS
KlvfIrRR7PSofK9tF5W9uB0fX2a4/c2J1QDYlIOEnOp8J8cSgPXB2/Y5P2w1677W
lyJ4ClNsK48k4vjhhr2fX/rz2kvkhL/YwfL1AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUaVcEpTY+vmVUWOQfRusfiwr+AgEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9hVmNFcFRZLXZtVlVX
T1FmUnVzZml3ci1BZ0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnQ3MA0GCSqGSIb3DQEBCwUAA4IBAQAx1GTKmpG6NhQrm/a2op9xtezvbIh3
squKjN4mDBaz946EmRkhEfoFsnlkHU1H7TXg/ovlw40yFV1jMpeSIcNoPew1WqPO
SqhaLXeuQlGEZCDRGCz/Vy3qTJQVAIDnwa9fYzd3wNXj8WdOd3yGmC+nKqse441k
4zLoBuhZ/TCr01KrvLVt92nFDg3DEHKs0WXJP3zA9EBO9I13gcJXoZgzWa3t06Ih
hHlRfcSriiuxF0qOZUBq57Nd4q2B7Bz5PcBtcRzjl8g5iprxVUqi0HVNTsA3qZ40
yYf9ih2AzmnqCuAwYxE1mE8Ril2R9pwfVkpbnL1+ZM3/c/sBCBXs9bpS
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org