Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/2VVNhQg0fNmPKmcpp_OI69FLAwY.roa
File:                     2VVNhQg0fNmPKmcpp_OI69FLAwY.roa (raw, json)
Hash identifier:          21Nx18lRJLlgSDlNO968urTeoyx1ZGZb7bG7U0mZrt8=
Subject key identifier:   D9:55:4D:85:08:34:7C:D9:8F:2A:67:29:A7:F3:88:EB:D1:4B:03:06
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       08D7
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/2VVNhQg0fNmPKmcpp_OI69FLAwY.roa
Signing time:             Sun 07 Feb 2021 12:58:16 +0000
ROA not before:           Sun 07 Feb 2021 12:58:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        101.0.232.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Feb  7 12:58:16 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D9554D8508347CD98F2A6729A7F388EBD14B0306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:38:36:86:14:38:24:bf:28:e9:6d:5d:e1:72:
                    a6:83:28:09:3c:c0:fc:c8:ca:2e:60:9f:9e:f4:22:
                    af:29:d2:94:96:f7:66:72:43:41:2f:79:54:56:08:
                    84:90:af:8d:de:00:1f:db:f5:6e:20:69:c0:81:51:
                    d6:84:b2:c6:33:5c:a1:c8:f8:d9:62:4a:e3:00:d7:
                    00:75:39:2d:7c:cc:aa:f8:e0:0b:cc:80:f0:90:9b:
                    d3:c5:9e:e4:6f:c7:a4:5b:4f:fd:58:1c:c9:9a:37:
                    9b:41:51:06:4d:17:85:21:10:bf:c7:77:23:60:22:
                    1a:fe:f5:7a:25:b6:8d:f6:f7:ba:ff:79:6e:48:6d:
                    b3:f9:c5:02:9f:ff:a1:99:ef:54:3c:eb:b5:0f:df:
                    aa:b5:68:6b:47:37:db:ac:4f:d2:7b:76:9b:ec:5f:
                    21:ac:5a:64:d8:65:d9:86:fe:b9:64:ed:65:13:77:
                    68:2d:e3:f8:2a:c9:17:cf:04:9c:45:74:4f:85:2d:
                    25:ff:d5:53:55:55:4b:83:66:f0:75:15:76:ca:68:
                    b6:c2:20:95:17:22:de:90:fc:fa:8f:02:a5:ae:60:
                    76:f8:cc:e9:c8:32:66:95:2b:68:54:e6:5f:45:78:
                    df:05:02:2b:f5:28:a4:7f:aa:92:95:e9:8c:88:2b:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:55:4D:85:08:34:7C:D9:8F:2A:67:29:A7:F3:88:EB:D1:4B:03:06
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/2VVNhQg0fNmPKmcpp_OI69FLAwY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:c5:3e:ff:02:96:e2:3f:af:57:e4:08:4f:89:47:60:87:18:
         26:4c:a1:73:26:ee:98:45:39:b4:4e:cf:18:54:47:9d:93:42:
         69:cb:59:22:22:ef:c0:6e:a6:7d:99:cf:39:bc:57:a8:5c:fd:
         5d:61:2d:eb:2c:ea:36:fb:ca:74:de:8a:81:a4:05:89:f9:2f:
         48:4a:22:54:31:34:fd:3e:ca:33:3e:3c:4a:43:29:f5:a9:a0:
         da:32:96:50:63:de:c7:9b:93:3e:e0:87:d0:5a:35:36:3e:2c:
         25:5f:a9:5c:8f:a9:d3:72:af:21:1f:9b:72:63:75:30:46:07:
         9b:ef:ee:54:76:be:b0:cb:15:ce:5f:59:e6:09:04:9a:f5:2d:
         8b:a1:4c:a7:1a:27:29:15:3a:a6:fc:a4:37:6c:59:b1:db:1a:
         46:19:03:85:01:98:15:f5:dc:74:2b:57:57:e6:ac:85:24:3e:
         11:8d:cc:bd:82:bd:17:f8:20:8d:b9:cb:a8:e3:a6:e9:c4:3c:
         e5:19:5a:9e:de:05:ab:4c:2c:71:07:0e:20:92:f0:6f:db:35:
         dd:4f:64:eb:10:77:c5:45:f3:63:48:cf:32:dc:11:d7:07:4b:
         34:a3:a1:b3:5e:2b:1c:14:f9:e8:6c:8b:c9:13:61:68:8d:ff:
         60:05:71:85
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1
NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yMTAyMDcx
MjU4MTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ5NTU0RDg1MDgzNDdD
RDk4RjJBNjcyOUE3RjM4OEVCRDE0QjAzMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgODaGFDgkvyjpbV3hcqaDKAk8wPzIyi5gn570Iq8p0pSW92Zy
Q0EveVRWCISQr43eAB/b9W4gacCBUdaEssYzXKHI+NliSuMA1wB1OS18zKr44AvM
gPCQm9PFnuRvx6RbT/1YHMmaN5tBUQZNF4UhEL/HdyNgIhr+9Xolto3297r/eW5I
bbP5xQKf/6GZ71Q867UP36q1aGtHN9usT9J7dpvsXyGsWmTYZdmG/rlk7WUTd2gt
4/gqyRfPBJxFdE+FLSX/1VNVVUuDZvB1FXbKaLbCIJUXIt6Q/PqPAqWuYHb4zOnI
MmaVK2hU5l9FeN8FAiv1KKR/qpKV6YyIK6XRAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQU2VVNhQg0fNmPKmcpp/OI69FLAwYwHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU
LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t
Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vMlZWTmhRZzBm
Tm1QS21jcHBfT0k2OUZMQXdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA2UA6DANBgkqhkiG9w0BAQsFAAOCAQEAUcU+/wKW4j+vV+QIT4lHYIcY
JkyhcybumEU5tE7PGFRHnZNCactZIiLvwG6mfZnPObxXqFz9XWEt6yzqNvvKdN6K
gaQFifkvSEoiVDE0/T7KMz48SkMp9amg2jKWUGPex5uTPuCH0Fo1Nj4sJV+pXI+p
03KvIR+bcmN1MEYHm+/uVHa+sMsVzl9Z5gkEmvUti6FMpxonKRU6pvykN2xZsdsa
RhkDhQGYFfXcdCtXV+ashSQ+EY3MvYK9F/ggjbnLqOOm6cQ85Rlant4Fq0wscQcO
IJLwb9s13U9k6xB3xUXzY0jPMtwR1wdLNKOhs14rHBT56GyLyRNhaI3/YAVxhQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:14 2025 by rpki-client