Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/Y_AZTb4q11F5okKZ4XyBPwG88L8.roa
File:                     Y_AZTb4q11F5okKZ4XyBPwG88L8.roa (raw, json)
Hash identifier:          4pZEysFMf+JiuOKs46OZHNu8tJZylIOs2TvrYlDN4+M=
Subject key identifier:   63:F0:19:4D:BE:2A:D7:51:79:A2:42:99:E1:7C:81:3F:01:BC:F0:BF
Certificate issuer:       /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial:       0775
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/Y_AZTb4q11F5okKZ4XyBPwG88L8.roa
Signing time:             Tue 29 Sep 2020 10:03:05 +0000
ROA not before:           Tue 29 Sep 2020 10:03:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17416
IP address blocks:        211.78.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
        Validity
            Not Before: Sep 29 10:03:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=63F0194DBE2AD75179A24299E17C813F01BCF0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:5a:49:8c:7a:e6:a8:42:6c:08:a1:64:17:
                    2f:63:72:9d:59:7c:9a:6f:72:44:8e:f2:dc:92:61:
                    b1:6f:bd:fe:6f:7a:a0:88:b4:5d:2e:ec:eb:17:e5:
                    9b:8c:69:ec:5c:b8:ab:0b:e3:18:f9:d7:d2:26:48:
                    96:3d:30:92:27:65:46:4f:b9:1d:03:54:e0:8f:82:
                    cc:45:26:cd:76:e0:40:b7:c4:bb:4a:00:72:1f:8b:
                    a9:37:56:64:f2:28:0e:17:4f:ca:e3:43:94:94:b2:
                    79:cb:42:c1:da:67:42:2e:3e:b7:0b:46:c9:ee:e8:
                    ab:fb:a7:21:d4:22:52:24:de:62:ed:6b:ee:5b:3e:
                    67:28:32:30:95:1d:30:fb:00:81:ee:7a:c4:02:d8:
                    ff:71:05:ab:95:58:26:c1:c1:fa:40:6e:a0:ff:4a:
                    bd:a9:12:0a:80:08:61:3e:93:f1:fe:86:6c:14:a8:
                    7f:cd:b4:17:1a:37:1f:b5:3c:b3:c6:e9:ea:7b:45:
                    82:43:62:c6:9c:23:48:5b:10:fc:bf:bc:92:95:84:
                    6c:88:13:39:64:74:cf:3f:66:c0:f8:07:41:05:1b:
                    b6:d2:b0:c9:03:50:3a:b5:84:af:51:8d:a8:7f:d1:
                    1e:bc:64:94:41:0b:b8:da:a3:a8:0f:59:43:6d:c6:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:19:4D:BE:2A:D7:51:79:A2:42:99:E1:7C:81:3F:01:BC:F0:BF
            X509v3 Authority Key Identifier:
                keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/Y_AZTb4q11F5okKZ4XyBPwG88L8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.78.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:3a:24:3f:b4:b7:d1:5b:90:e2:32:e7:4b:f0:e7:ff:3a:5d:
         7c:13:dc:18:75:f7:4e:b7:3b:cf:96:08:3f:b3:eb:42:bd:78:
         a8:b6:ef:4d:ff:22:e2:80:e9:5d:e3:f7:b2:0d:c3:19:68:23:
         f7:17:19:f4:5d:f1:0f:5c:4e:c3:52:6a:f5:83:ae:f2:2e:af:
         a2:b3:f4:09:c1:a9:f2:0d:24:5b:2a:2d:8a:fa:e7:46:37:02:
         6c:b9:e9:62:ad:4e:b6:e2:66:47:7a:16:50:ca:75:63:9a:d3:
         92:b5:08:a6:b9:bb:3f:83:80:6c:2e:2a:ab:cd:19:aa:0c:6c:
         42:0f:f8:0e:c8:86:3c:42:5f:2d:4e:bc:d7:12:f1:d0:68:61:
         b6:4f:78:76:6b:3b:c0:3e:d8:66:11:aa:42:7a:60:1e:c1:fa:
         cb:f2:bd:a3:14:d7:d0:64:9b:90:b9:0e:7b:a1:49:83:c4:df:
         8e:f8:db:57:29:99:95:3c:90:cf:fe:80:36:3a:f5:b5:aa:9b:
         b2:30:43:f9:2f:36:a0:77:3a:f0:a7:6d:f8:b4:27:dc:74:78:
         54:6c:ae:9a:dc:df:11:0e:d8:0d:21:a2:8a:c1:d5:c1:24:01:
         b7:e5:92:93:29:2b:83:d8:50:a2:0a:51:50:1b:39:6b:c6:9f:
         97:f0:c4:dd
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjE1
RjlCRDk4Q0M3MEU4ODM2RDAxQTk0ODFDMTlDNUMyRDQ1RDc5MTAeFw0yMDA5Mjkx
MDAzMDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDYzRjAxOTREQkUyQUQ3
NTE3OUEyNDI5OUUxN0M4MTNGMDFCQ0YwQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfrVpJjHrmqEJsCKFkFy9jcp1ZfJpvckSO8tySYbFvvf5veqCI
tF0u7OsX5ZuMaexcuKsL4xj519ImSJY9MJInZUZPuR0DVOCPgsxFJs124EC3xLtK
AHIfi6k3VmTyKA4XT8rjQ5SUsnnLQsHaZ0IuPrcLRsnu6Kv7pyHUIlIk3mLta+5b
PmcoMjCVHTD7AIHuesQC2P9xBauVWCbBwfpAbqD/Sr2pEgqACGE+k/H+hmwUqH/N
tBcaNx+1PLPG6ep7RYJDYsacI0hbEPy/vJKVhGyIEzlkdM8/ZsD4B0EFG7bSsMkD
UDq1hK9Rjah/0R68ZJRBC7jao6gPWUNtxhfNAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUY/AZTb4q11F5okKZ4XyBPwG88L8wHwYDVR0jBBgwFoAUYV+b2YzHDog20BqU
gcGcXC1F15EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFdJTlMv
WVYtYjJZekhEb2cyMEJxVWdjR2NYQzFGMTVFLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9ZVi1iMll6SERvZzIwQnFVZ2NHY1hDMUYxNUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9EV0lOUy9ZX0FaVGI0cTExRjVva0taNFh5
QlB3Rzg4TDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE005Q
MA0GCSqGSIb3DQEBCwUAA4IBAQCfOiQ/tLfRW5DiMudL8Of/Ol18E9wYdfdOtzvP
lgg/s+tCvXiotu9N/yLigOld4/eyDcMZaCP3Fxn0XfEPXE7DUmr1g67yLq+is/QJ
wanyDSRbKi2K+udGNwJsuelirU624mZHehZQynVjmtOStQimubs/g4BsLiqrzRmq
DGxCD/gOyIY8Ql8tTrzXEvHQaGG2T3h2azvAPthmEapCemAewfrL8r2jFNfQZJuQ
uQ57oUmDxN+O+NtXKZmVPJDP/oA2OvW1qpuyMEP5Lzagdzrwp234tCfcdHhUbK6a
3N8RDtgNIaKKwdXBJAG35ZKTKSuD2FCiClFQGzlrxp+X8MTd
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:05 2024 by rpki-client on console-ams.rpki-client.org