Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/APMP2nQD5F8mCI-eiwjK1OmzVmM.roa
File:                     APMP2nQD5F8mCI-eiwjK1OmzVmM.roa (raw, json)
Hash identifier:          H6WCMPLU1zEe78rjChr8WxUYFGlxf92I74K8rG4iplQ=
Subject key identifier:   00:F3:0F:DA:74:03:E4:5F:26:08:8F:9E:8B:08:CA:D4:E9:B3:56:63
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0A6F
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/APMP2nQD5F8mCI-eiwjK1OmzVmM.roa
Signing time:             Thu 15 Sep 2022 02:49:56 +0000
ROA not before:           Thu 15 Sep 2022 02:49:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     18046
IP address blocks:        121.50.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2671 (0xa6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Sep 15 02:49:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=00F30FDA7403E45F26088F9E8B08CAD4E9B35663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:b3:70:df:a8:cf:f4:50:30:fb:74:ce:e8:
                    51:cb:df:2e:d9:91:27:4b:e2:d8:5d:03:da:c9:6f:
                    12:71:4e:08:16:28:74:29:8c:37:0a:3e:ac:0e:92:
                    88:f1:5b:37:70:b8:54:a4:9b:6b:4e:8d:3d:b6:b3:
                    6c:e1:f7:26:d8:90:4d:56:81:23:a6:1e:c3:80:da:
                    8f:2b:63:f3:0c:22:19:0e:92:58:81:8d:79:7b:e3:
                    85:25:d1:3f:87:3b:0f:42:0e:55:bb:f6:9b:aa:44:
                    8b:7f:c4:f1:22:76:4b:f2:2d:9c:4c:b5:3a:c5:e8:
                    69:e0:9e:c2:10:70:fe:b3:72:c0:74:1b:90:43:63:
                    24:20:ef:e2:94:ed:ed:67:d6:66:b5:56:ab:fd:78:
                    97:5b:b0:b5:e2:a9:e9:98:79:50:af:ad:e4:c2:c0:
                    69:c3:ea:21:37:5c:fb:8e:f8:39:04:c4:08:f9:b2:
                    7c:5e:28:d3:85:55:71:32:3d:fb:a5:1c:1d:25:a3:
                    db:88:a3:20:e7:b5:62:66:50:14:ae:08:2d:79:f9:
                    c2:87:65:9b:2a:6b:c4:99:24:69:df:45:a2:ae:39:
                    97:bd:9a:3c:d0:12:e7:81:e3:bc:cf:cb:2e:16:c4:
                    60:10:40:58:71:22:60:87:ec:66:e1:de:85:b0:50:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F3:0F:DA:74:03:E4:5F:26:08:8F:9E:8B:08:CA:D4:E9:B3:56:63
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/APMP2nQD5F8mCI-eiwjK1OmzVmM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bc:85:20:8c:fa:c3:64:1a:cc:2f:65:dd:1f:23:26:a4:5e:2f:
         c7:7b:8d:62:a9:97:61:82:73:d5:85:c4:46:79:e6:ef:8b:d5:
         b9:96:b4:73:e1:f4:77:c9:e4:83:4e:61:ee:7e:22:15:0e:6c:
         36:7f:a2:2f:8f:fc:32:a0:e4:59:ad:1a:18:ad:9d:ae:33:e2:
         f8:32:4c:88:50:4c:4f:29:a5:77:03:2a:19:4f:6e:01:d2:ce:
         aa:7a:bd:0d:f3:8a:03:79:8d:f3:3f:77:4b:57:35:23:00:05:
         4b:09:f3:4f:22:f6:3b:0e:9d:db:70:58:00:2f:d9:bc:60:2f:
         da:37:2e:af:64:2f:10:25:77:70:4b:2d:3d:7c:df:1f:05:2c:
         c5:bc:64:08:94:67:a4:f6:ff:8a:3e:fc:48:a3:20:25:30:e1:
         af:f3:fd:b7:eb:43:fd:3e:20:6a:27:f1:4e:83:62:2e:e4:de:
         d3:30:27:49:48:89:69:ea:a1:dd:7a:66:67:17:f0:69:7b:8b:
         2a:6c:a2:b6:1e:96:b1:bd:70:da:40:77:e3:3c:b0:5e:e0:62:
         56:06:51:69:a4:72:23:7c:d8:6c:6e:5a:fb:1e:04:af:b7:ec:
         76:d5:33:2e:ed:e5:ae:d5:a6:40:60:ac:90:5a:03:ab:cb:1e:
         fa:da:f4:c7
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjg1
NTk3MzY3MkIxRUVENzE3NjBDMDk0MkMyN0ZENUY3NTY5MDE5QzAeFw0yMjA5MTUw
MjQ5NTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAwRjMwRkRBNzQwM0U0
NUYyNjA4OEY5RThCMDhDQUQ0RTlCMzU2NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC51LNw36jP9FAw+3TO6FHL3y7ZkSdL4thdA9rJbxJxTggWKHQp
jDcKPqwOkojxWzdwuFSkm2tOjT22s2zh9ybYkE1WgSOmHsOA2o8rY/MMIhkOkliB
jXl744Ul0T+HOw9CDlW79puqRIt/xPEidkvyLZxMtTrF6GngnsIQcP6zcsB0G5BD
YyQg7+KU7e1n1ma1Vqv9eJdbsLXiqemYeVCvreTCwGnD6iE3XPuO+DkExAj5snxe
KNOFVXEyPfulHB0lo9uIoyDntWJmUBSuCC15+cKHZZsqa8SZJGnfRaKuOZe9mjzQ
EueB47zPyy4WxGAQQFhxImCH7Gbh3oWwUAO5AgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUAPMP2nQD5F8mCI+eiwjK1OmzVmMwHwYDVR0jBBgwFoAUKFWXNnKx7tcXYMCU
LCf9X3VpAZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hVQU4t
Q0hBTi9LRldYTm5LeDd0Y1hZTUNVTENmOVgzVnBBWncuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL0tGV1hObkt4N3RjWFlNQ1VMQ2Y5WDNWcEFady5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NIVUFOLUNIQU4vQVBNUDJuUUQ1
RjhtQ0ktZWl3aksxT216Vm1NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBHkysDANBgkqhkiG9w0BAQsFAAOCAQEAvIUgjPrDZBrML2XdHyMmpF4v
x3uNYqmXYYJz1YXERnnm74vVuZa0c+H0d8nkg05h7n4iFQ5sNn+iL4/8MqDkWa0a
GK2drjPi+DJMiFBMTymldwMqGU9uAdLOqnq9DfOKA3mN8z93S1c1IwAFSwnzTyL2
Ow6d23BYAC/ZvGAv2jcur2QvECV3cEstPXzfHwUsxbxkCJRnpPb/ij78SKMgJTDh
r/P9t+tD/T4gaifxToNiLuTe0zAnSUiJaeqh3XpmZxfwaXuLKmyith6Wsb1w2kB3
4zywXuBiVgZRaaRyI3zYbG5a+x4Er7fsdtUzLu3lrtWmQGCskFoDq8se+tr0xw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org