Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3D6zUR6Vn3Fw82df57Vylu4x7x8.roa
File:                     3D6zUR6Vn3Fw82df57Vylu4x7x8.roa (raw, json)
Hash identifier:          JC/TZcGxAITKLCEN8V1w/uMFTb3pakwwyFd6vVWDqkY=
Subject key identifier:   DC:3E:B3:51:1E:95:9F:71:70:F3:67:5F:E7:B5:72:96:EE:31:EF:1F
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       08D1
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3D6zUR6Vn3Fw82df57Vylu4x7x8.roa
Signing time:             Sun 07 Feb 2021 12:58:11 +0000
ROA not before:           Sun 07 Feb 2021 12:58:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        150.129.36.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257 (0x8d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Feb  7 12:58:11 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DC3EB3511E959F7170F3675FE7B57296EE31EF1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:c1:ac:8d:53:c3:f1:c2:6f:f8:04:58:82:
                    a4:2b:bf:46:25:cf:0f:44:17:e6:47:ee:58:83:9e:
                    2d:57:ff:a3:fc:d3:fc:3a:d7:82:99:5e:b7:3a:a8:
                    eb:30:56:7d:99:74:2b:aa:7a:91:c9:3d:ce:3a:04:
                    5a:8d:39:ac:f2:61:f5:1d:a7:a0:67:a5:71:4c:f1:
                    89:89:87:ec:1b:b0:d2:62:b9:d7:0b:ef:7b:f4:2e:
                    37:bf:a0:73:77:44:98:91:ff:60:86:a2:a6:47:51:
                    2a:05:97:ab:28:20:36:ab:cf:20:20:d5:53:bf:57:
                    94:5e:df:01:65:de:3f:66:20:00:ea:c4:a7:ff:c2:
                    9b:cd:d3:30:d1:e4:a7:69:c2:fa:e0:0f:68:dd:67:
                    d9:a4:42:90:ca:de:62:fa:7d:e4:d5:67:2f:17:bf:
                    0b:31:5c:63:f8:0a:35:f5:ae:ac:50:28:a2:68:da:
                    6d:db:4a:57:49:be:53:2f:6c:9b:2b:4d:b5:4f:2a:
                    99:d5:b8:32:0c:1a:a2:f9:78:f9:23:0d:d8:7f:c1:
                    cf:7f:34:a6:3c:d3:c2:e5:2e:71:04:c3:4a:72:b4:
                    2b:8b:8b:a7:dc:1c:00:7e:1e:a9:35:90:23:b4:6c:
                    07:14:27:70:a0:66:7a:5c:6e:f3:4b:98:a0:dd:66:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3E:B3:51:1E:95:9F:71:70:F3:67:5F:E7:B5:72:96:EE:31:EF:1F
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3D6zUR6Vn3Fw82df57Vylu4x7x8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:44:0b:46:95:46:c5:cb:d8:f8:55:49:bb:72:bf:ea:23:
         bb:3b:cb:49:81:cb:97:be:0b:d0:ba:a6:ab:be:6b:4a:0d:f0:
         31:52:cf:04:12:41:91:1b:a0:73:df:56:0e:03:a9:b9:27:50:
         af:02:6a:42:70:e5:76:30:25:52:39:cf:88:2b:98:02:50:c9:
         3a:49:75:80:0e:42:b3:1a:52:8c:20:fa:ac:77:43:d9:8b:41:
         fa:6c:4a:da:81:2f:23:4f:a1:11:91:96:62:0c:da:21:c7:02:
         5b:92:b9:a6:a9:e3:5d:07:12:2f:b9:a0:1a:0d:fd:ca:94:72:
         65:68:de:7c:29:d6:76:ea:6d:8a:39:7b:4f:05:51:5a:a8:dc:
         2b:72:d0:c2:6d:51:f5:52:77:dd:5b:80:95:96:b5:65:a5:f8:
         9f:6c:02:82:b6:ce:d5:43:e9:0a:93:d3:34:3c:b3:3e:e5:ee:
         7a:ce:47:c2:09:74:f5:64:41:36:e3:cf:7c:8d:18:53:74:84:
         f9:07:bf:83:42:61:b2:e7:5f:b4:c0:17:95:7c:f8:e2:a2:17:
         75:48:51:c3:94:37:38:5a:99:7f:f0:27:f0:1b:75:f5:f5:90:
         d6:57:5d:00:c7:fc:94:41:76:08:02:1d:b7:04:49:37:a7:44:
         48:16:e5:fb
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1
NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yMTAyMDcx
MjU4MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKERDM0VCMzUxMUU5NTlG
NzE3MEYzNjc1RkU3QjU3Mjk2RUUzMUVGMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQw8GsjVPD8cJv+ARYgqQrv0Ylzw9EF+ZH7liDni1X/6P80/w6
14KZXrc6qOswVn2ZdCuqepHJPc46BFqNOazyYfUdp6BnpXFM8YmJh+wbsNJiudcL
73v0Lje/oHN3RJiR/2CGoqZHUSoFl6soIDarzyAg1VO/V5Re3wFl3j9mIADqxKf/
wpvN0zDR5KdpwvrgD2jdZ9mkQpDK3mL6feTVZy8XvwsxXGP4CjX1rqxQKKJo2m3b
SldJvlMvbJsrTbVPKpnVuDIMGqL5ePkjDdh/wc9/NKY808LlLnEEw0pytCuLi6fc
HAB+Hqk1kCO0bAcUJ3CgZnpcbvNLmKDdZsW5AgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQU3D6zUR6Vn3Fw82df57Vylu4x7x8wHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU
LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t
Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vM0Q2elVSNlZu
M0Z3ODJkZjU3VnlsdTR4N3g4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEApaBJDANBgkqhkiG9w0BAQsFAAOCAQEASxZEC0aVRsXL2PhVSbtyv+oj
uzvLSYHLl74L0Lqmq75rSg3wMVLPBBJBkRugc99WDgOpuSdQrwJqQnDldjAlUjnP
iCuYAlDJOkl1gA5CsxpSjCD6rHdD2YtB+mxK2oEvI0+hEZGWYgzaIccCW5K5pqnj
XQcSL7mgGg39ypRyZWjefCnWduptijl7TwVRWqjcK3LQwm1R9VJ33VuAlZa1ZaX4
n2wCgrbO1UPpCpPTNDyzPuXues5Hwgl09WRBNuPPfI0YU3SE+Qe/g0JhsudftMAX
lXz44qIXdUhRw5Q3OFqZf/An8Bt19fWQ1lddAMf8lEF2CAIdtwRJN6dESBbl+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org