Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/F3lIznYgwFZRK7pF_yM822zGZEU.roa
File:                     F3lIznYgwFZRK7pF_yM822zGZEU.roa (raw, json)
Hash identifier:          mr1UMNPNTp7xDOuxwaUfAuNaaPayzY4HyRgQaaGYG3o=
Subject key identifier:   17:79:48:CE:76:20:C0:56:51:2B:BA:45:FF:23:3C:DB:6C:C6:64:45
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       08C1
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/F3lIznYgwFZRK7pF_yM822zGZEU.roa
Signing time:             Sun 07 Feb 2021 11:45:16 +0000
ROA not before:           Sun 07 Feb 2021 11:45:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        61.56.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Feb  7 11:45:16 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=177948CE7620C056512BBA45FF233CDB6CC66445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e0:8b:16:af:a9:00:1b:63:26:23:09:d1:28:
                    f6:e7:6b:98:e6:1c:c6:4e:19:49:d8:3d:45:8d:c0:
                    78:f8:e1:b9:dd:99:ec:7b:56:ea:8d:c1:13:56:14:
                    1b:c4:38:08:b7:33:83:16:47:f6:f5:8e:d2:2b:a9:
                    67:1f:7d:b3:85:7e:02:bb:98:81:b9:45:d0:58:15:
                    5f:62:70:e6:72:84:4b:fe:55:ac:d6:87:e1:20:a1:
                    cc:88:55:d9:40:62:a8:04:8d:6d:6a:72:d0:95:12:
                    a2:b7:5c:e4:16:52:8b:28:9d:d5:57:1d:b2:4c:42:
                    b0:06:62:6f:58:86:d6:ca:0c:87:c4:b1:f0:4b:75:
                    7c:4c:2c:1c:7b:66:f7:37:79:45:a3:43:9a:33:7a:
                    55:70:02:90:58:86:df:c4:da:f6:ad:08:a9:08:e5:
                    ae:ac:7b:25:db:e4:c6:ae:d2:0e:ae:99:e5:f5:e3:
                    4b:5d:44:95:2c:dc:73:64:6d:98:d9:13:7a:f0:ca:
                    f2:61:df:d9:56:3f:1c:3e:80:e6:d4:01:f2:5a:cf:
                    b5:d6:24:7b:08:21:74:b4:08:3d:c3:08:ef:ed:04:
                    f8:cf:1a:38:ed:65:c8:4b:63:7d:31:9d:de:9e:2a:
                    8d:ac:97:0e:b8:85:1b:48:b7:f4:1b:f0:db:a0:a2:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:79:48:CE:76:20:C0:56:51:2B:BA:45:FF:23:3C:DB:6C:C6:64:45
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/F3lIznYgwFZRK7pF_yM822zGZEU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:19:5d:7e:3b:1b:68:9d:3c:13:4b:21:4a:50:bc:fb:b2:fb:
         eb:33:61:06:4c:c1:3e:fa:ac:4a:c3:e7:93:79:fc:56:a1:d0:
         cd:a0:cb:a3:62:c2:75:cf:3b:2a:3f:00:1b:13:b2:9a:a6:28:
         60:30:65:a4:cf:18:4b:78:b3:33:50:fe:ee:7f:de:b1:11:99:
         56:5f:5b:6d:bc:be:00:67:1e:34:77:1f:b2:9e:91:2e:e5:62:
         04:e2:1c:c4:63:01:09:d5:1d:20:ef:23:fa:32:6b:0f:aa:a7:
         4d:16:fb:2e:c3:ed:71:06:69:45:70:66:e4:68:d7:da:93:fb:
         e7:e4:df:ea:00:fe:1f:e4:c9:e7:7e:09:8d:eb:c0:21:88:ba:
         c9:0e:69:e9:23:96:3c:5f:3b:c2:4a:c2:61:a8:e7:80:e5:5b:
         da:a7:c7:1a:94:4d:00:0d:ac:ca:8f:1b:35:42:ef:b8:e9:5f:
         f2:fa:f7:bb:20:27:0a:40:db:60:97:71:0a:81:8f:72:66:99:
         61:82:19:aa:60:83:3f:4c:2c:3c:c1:b0:4a:53:34:51:b0:cc:
         f0:2d:c8:9f:16:51:06:15:d8:a4:6b:3c:01:1e:99:42:e2:71:
         23:46:4b:df:8c:f1:d9:a7:35:51:4f:e2:18:b0:09:57:d9:75:
         35:23:dd:28
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE
RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yMTAyMDcx
MTQ1MTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE3Nzk0OENFNzYyMEMw
NTY1MTJCQkE0NUZGMjMzQ0RCNkNDNjY0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx4IsWr6kAG2MmIwnRKPbna5jmHMZOGUnYPUWNwHj44bndmex7
VuqNwRNWFBvEOAi3M4MWR/b1jtIrqWcffbOFfgK7mIG5RdBYFV9icOZyhEv+VazW
h+EgocyIVdlAYqgEjW1qctCVEqK3XOQWUosondVXHbJMQrAGYm9YhtbKDIfEsfBL
dXxMLBx7Zvc3eUWjQ5ozelVwApBYht/E2vatCKkI5a6seyXb5Mau0g6umeX140td
RJUs3HNkbZjZE3rwyvJh39lWPxw+gObUAfJaz7XWJHsIIXS0CD3DCO/tBPjPGjjt
ZchLY30xnd6eKo2slw64hRtIt/Qb8Nugog5ZAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUF3lIznYgwFZRK7pF/yM822zGZEUwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv
+/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU
Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvRjNsSXpuWWd3RlpSSzdw
Rl95TTgyMnpHWkVVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BD04YDANBgkqhkiG9w0BAQsFAAOCAQEAehldfjsbaJ08E0shSlC8+7L76zNhBkzB
PvqsSsPnk3n8VqHQzaDLo2LCdc87Kj8AGxOymqYoYDBlpM8YS3izM1D+7n/esRGZ
Vl9bbby+AGceNHcfsp6RLuViBOIcxGMBCdUdIO8j+jJrD6qnTRb7LsPtcQZpRXBm
5GjX2pP75+Tf6gD+H+TJ534JjevAIYi6yQ5p6SOWPF87wkrCYajngOVb2qfHGpRN
AA2syo8bNULvuOlf8vr3uyAnCkDbYJdxCoGPcmaZYYIZqmCDP0wsPMGwSlM0UbDM
8C3InxZRBhXYpGs8AR6ZQuJxI0ZL34zx2ac1UU/iGLAJV9l1NSPdKA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:34 2024 by rpki-client on console-fra.rpki-client.org