Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/YV4J0KWEEytozNMI2h2aa67ByAk.roa
File:                     YV4J0KWEEytozNMI2h2aa67ByAk.roa (raw, json)
Hash identifier:          QHEzcTAkqaiaL6xYzCzqLsem0TfMq9EHkVBxuHDn2a0=
Subject key identifier:   61:5E:09:D0:A5:84:13:2B:68:CC:D3:08:DA:1D:9A:6B:AE:C1:C8:09
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0776
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/YV4J0KWEEytozNMI2h2aa67ByAk.roa
Signing time:             Tue 29 Sep 2020 10:00:14 +0000
ROA not before:           Tue 29 Sep 2020 10:00:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        61.57.208.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Sep 29 10:00:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=615E09D0A584132B68CCD308DA1D9A6BAEC1C809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:36:94:8a:54:55:33:5d:46:9f:b7:04:c6:63:
                    23:0c:e1:79:97:c2:d2:53:5f:36:67:b6:c7:03:95:
                    13:76:4d:ff:54:aa:bb:30:bc:6f:2f:c4:3f:57:20:
                    1f:35:b8:a3:8a:ab:f3:8d:8a:e1:92:9d:18:87:d6:
                    15:2d:bd:f1:6a:d1:ca:b2:80:56:40:95:58:32:6a:
                    05:e1:3e:ce:1c:54:6f:e2:4b:be:c3:b8:62:03:5a:
                    c6:99:b7:4b:b9:70:3b:fc:96:d8:d0:b9:a6:dd:b5:
                    ad:a4:35:a7:5c:34:52:88:cd:52:29:69:86:bf:40:
                    1d:57:b9:c5:70:97:5b:7b:31:8b:d1:ec:dd:44:e4:
                    a0:83:94:bf:ee:c5:5d:73:66:f0:a0:6c:14:62:ce:
                    34:60:5d:51:02:43:88:c7:02:78:88:cc:b6:64:66:
                    0a:66:dd:7e:af:65:56:80:a6:2f:22:41:31:c0:b5:
                    e0:64:55:f3:ad:7e:13:dd:c3:4f:02:b3:2f:e8:34:
                    68:77:9b:01:e1:e8:75:1b:ae:f7:72:f6:5a:3a:03:
                    c1:97:a4:20:55:d8:11:22:12:d9:76:28:24:b1:0b:
                    af:56:7b:70:a9:8c:7a:9d:0e:34:df:5e:9c:2d:b8:
                    dd:36:0d:a4:e9:a2:05:83:69:c8:09:4f:b0:dc:5f:
                    a1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5E:09:D0:A5:84:13:2B:68:CC:D3:08:DA:1D:9A:6B:AE:C1:C8:09
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/YV4J0KWEEytozNMI2h2aa67ByAk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.57.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:5b:43:fe:04:d1:83:3c:b7:a4:e3:04:4b:de:ed:08:ea:
         5c:33:e6:ff:94:7d:0b:aa:92:0c:4f:d4:50:18:66:17:ce:2b:
         b0:28:0b:04:71:7c:a6:39:bb:85:5c:e0:30:79:04:4f:56:7b:
         9b:80:ac:f1:32:6e:84:c1:54:5e:8a:80:91:93:fc:0c:69:54:
         ad:d4:4a:ff:7f:81:be:50:ff:1a:68:90:d2:49:a3:5e:66:05:
         c1:66:0b:15:d0:7d:28:84:91:6e:04:c7:fd:19:70:3e:f5:f7:
         d1:8c:e6:90:bc:15:a4:45:32:85:c8:9e:ac:99:4d:aa:e2:b6:
         bd:75:92:fb:fc:49:54:43:d2:97:e8:e7:5a:9d:53:18:00:b5:
         8d:cd:19:7b:e4:81:7b:5a:3e:4a:a1:e9:5d:ac:63:bf:67:cf:
         99:87:53:0e:90:09:8d:ce:ce:8d:86:e3:39:db:95:bf:ee:b3:
         4b:28:65:8b:30:97:20:d5:15:b9:53:50:56:27:18:87:50:d5:
         98:76:93:d8:45:6d:76:34:cf:43:79:95:2f:52:5b:61:71:ae:
         34:57:80:a9:9d:af:67:c5:2a:8f:a0:09:74:d5:d2:50:25:de:
         3e:51:ab:68:a4:3e:de:15:1c:b2:e2:42:72:21:93:0d:f7:1d:
         03:0d:5d:ae
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkZE
RUEzNDcwNzE1MjI5MEMxRDI2MDZGRkJGQzY5QjkyN0Q0MEE1QjAeFw0yMDA5Mjkx
MDAwMTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYxNUUwOUQwQTU4NDEz
MkI2OENDRDMwOERBMUQ5QTZCQUVDMUM4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUNpSKVFUzXUaftwTGYyMM4XmXwtJTXzZntscDlRN2Tf9Uqrsw
vG8vxD9XIB81uKOKq/ONiuGSnRiH1hUtvfFq0cqygFZAlVgyagXhPs4cVG/iS77D
uGIDWsaZt0u5cDv8ltjQuabdta2kNadcNFKIzVIpaYa/QB1XucVwl1t7MYvR7N1E
5KCDlL/uxV1zZvCgbBRizjRgXVECQ4jHAniIzLZkZgpm3X6vZVaApi8iQTHAteBk
VfOtfhPdw08Csy/oNGh3mwHh6HUbrvdy9lo6A8GXpCBV2BEiEtl2KCSxC69We3Cp
jHqdDjTfXpwtuN02DaTpogWDacgJT7DcX6GhAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUYV4J0KWEEytozNMI2h2aa67ByAkwHwYDVR0jBBgwFoAUb96jRwcVIpDB0mBv
+/xpuSfUClswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ1lDQ0FU
Vi9iOTZqUndjVklwREIwbUJ2LV94cHVTZlVDbHMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2I5NmpSd2NWSXBEQjBtQnYtX3hwdVNmVUNscy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NZQ0NBVFYvWVY0SjBLV0VFeXRvek5N
STJoMmFhNjdCeUFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BD050DANBgkqhkiG9w0BAQsFAAOCAQEArZJbQ/4E0YM8t6TjBEve7QjqXDPm/5R9
C6qSDE/UUBhmF84rsCgLBHF8pjm7hVzgMHkET1Z7m4Cs8TJuhMFUXoqAkZP8DGlU
rdRK/3+BvlD/GmiQ0kmjXmYFwWYLFdB9KISRbgTH/RlwPvX30YzmkLwVpEUyhcie
rJlNquK2vXWS+/xJVEPSl+jnWp1TGAC1jc0Ze+SBe1o+SqHpXaxjv2fPmYdTDpAJ
jc7OjYbjOduVv+6zSyhlizCXINUVuVNQVicYh1DVmHaT2EVtdjTPQ3mVL1JbYXGu
NFeAqZ2vZ8Uqj6AJdNXSUCXePlGraKQ+3hUcsuJCciGTDfcdAw1drg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org