Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/hSqarjE1z_9RLX4NLydBfTjMOTg.roa
File:                     hSqarjE1z_9RLX4NLydBfTjMOTg.roa (raw, json)
Hash identifier:          GYTNaoYR7Ab7F6sLAmb4JPnaA3728DqsGizsug17ltQ=
Subject key identifier:   85:2A:9A:AE:31:35:CF:FF:51:2D:7E:0D:2F:27:41:7D:38:CC:39:38
Certificate issuer:       /CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
Certificate serial:       0F25
Authority key identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/hSqarjE1z_9RLX4NLydBfTjMOTg.roa
Signing time:             Sun 07 Feb 2021 13:03:51 +0000
ROA not before:           Sun 07 Feb 2021 13:03:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131606
IP address blocks:        103.124.40.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3877 (0xf25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
        Validity
            Not Before: Feb  7 13:03:51 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=852A9AAE3135CFFF512D7E0D2F27417D38CC3938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:bd:68:68:30:6c:de:66:63:03:50:32:5a:
                    0c:a5:0c:2f:9f:99:99:a9:36:a9:12:7c:ea:86:35:
                    75:35:ca:50:05:aa:66:cd:25:b7:ba:55:2c:1f:d8:
                    ba:31:e9:81:45:8a:ee:26:cf:78:95:3e:e6:d1:70:
                    5d:2f:30:cf:64:7c:1a:c0:d1:99:4f:41:b5:3b:cc:
                    90:54:42:7e:d4:a2:78:f8:2f:34:98:22:3e:d0:10:
                    c2:6e:9a:52:b7:c4:72:d6:fd:f9:de:ed:26:59:33:
                    2e:b0:50:c0:10:4f:ef:00:36:8e:50:f7:01:59:b7:
                    7f:bf:04:c8:d4:01:d8:a8:b6:ef:82:24:e3:20:d4:
                    f7:28:be:8b:16:7c:6d:bb:78:76:39:2a:2d:13:51:
                    55:b4:82:0c:85:f9:48:9c:0a:ac:17:ac:87:3c:13:
                    48:45:4d:f9:82:1b:a1:ff:2c:a2:0f:c0:09:c6:fa:
                    ac:50:c6:0d:59:fb:0e:3b:5a:1b:5a:d2:5a:62:16:
                    44:25:0d:d9:df:2b:56:f7:18:82:fd:5a:e2:95:a6:
                    1b:41:43:93:26:b0:53:52:e1:88:d6:84:f3:af:da:
                    d0:7f:76:c7:26:fd:f7:ef:84:65:cd:fb:4c:ae:1d:
                    0f:95:e4:c8:f2:c6:32:95:dc:af:7f:04:dd:c8:85:
                    29:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2A:9A:AE:31:35:CF:FF:51:2D:7E:0D:2F:27:41:7D:38:CC:39:38
            X509v3 Authority Key Identifier:
                keyid:F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/hSqarjE1z_9RLX4NLydBfTjMOTg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:b8:cf:06:41:47:99:3e:b2:b2:a1:66:b3:d1:f0:97:dd:3d:
         c9:98:6e:7c:07:37:d9:26:5a:ed:9a:07:86:e5:2e:87:c9:e2:
         88:eb:44:e5:54:69:bc:0e:9e:1d:3c:fe:9d:4f:83:a5:50:32:
         60:76:d4:d1:04:23:5f:e7:46:e7:f3:15:13:07:48:43:e5:3d:
         ce:df:17:8b:0c:39:32:d6:9d:37:3c:c5:38:1d:bb:eb:56:5d:
         ab:b7:81:64:9a:11:e7:ea:ab:84:fc:3a:d1:62:62:59:b1:44:
         c6:61:da:a9:68:18:36:d6:b7:86:a2:0e:d9:36:70:4f:06:16:
         12:ef:fa:4f:a8:9d:c4:9b:ca:9d:57:7d:31:9f:1d:2c:4d:46:
         f1:5b:21:67:e1:83:c0:7d:97:f0:81:64:60:05:9d:5c:5a:f3:
         00:c7:3e:9f:63:64:58:d7:87:11:ce:57:32:8c:ac:b7:73:4c:
         8a:35:d0:a5:dd:18:a7:b8:ab:8d:8e:73:bd:a0:28:29:b9:d4:
         5f:07:dd:28:91:2e:19:26:00:38:aa:18:3b:d8:26:c2:da:b3:
         74:8c:ac:c2:a4:c9:a8:79:f8:b3:4b:c3:7f:75:99:e5:ae:2a:
         df:82:02:d3:0e:62:18:de:25:c1:af:99:44:62:1f:60:7a:eb:
         ef:7b:d1:07
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICDyUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMx
NzQ4MTNERkIxRjlCNDU2MDQ3MkMyNjdGNzZDRDBDMTQxRTVERTAeFw0yMTAyMDcx
MzAzNTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDg1MkE5QUFFMzEzNUNG
RkY1MTJEN0UwRDJGMjc0MTdEMzhDQzM5MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDgL1oaDBs3mZjA1AyWgylDC+fmZmpNqkSfOqGNXU1ylAFqmbN
Jbe6VSwf2Lox6YFFiu4mz3iVPubRcF0vMM9kfBrA0ZlPQbU7zJBUQn7Uonj4LzSY
Ij7QEMJumlK3xHLW/fne7SZZMy6wUMAQT+8ANo5Q9wFZt3+/BMjUAdiotu+CJOMg
1PcovosWfG27eHY5Ki0TUVW0ggyF+UicCqwXrIc8E0hFTfmCG6H/LKIPwAnG+qxQ
xg1Z+w47Whta0lpiFkQlDdnfK1b3GIL9WuKVphtBQ5MmsFNS4YjWhPOv2tB/dscm
/ffvhGXN+0yuHQ+V5MjyxjKV3K9/BN3IhSnPAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUhSqarjE1z/9RLX4NLydBfTjMOTgwHwYDVR0jBBgwFoAU8xdIE9+x+bRWBHLC
Z/ds0MFB5d4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFNSUxZ
UExVUy84eGRJRTkteC1iUldCSExDWl9kczBNRkI1ZDQuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBLzh4ZElFOS14LWJSV0JITENaX2RzME1GQjVkNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTUlMWVBMVVMvaFNxYXJqRTF6
XzlSTFg0Tkx5ZEJmVGpNT1RnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWd8KDANBgkqhkiG9w0BAQsFAAOCAQEAfLjPBkFHmT6ysqFms9Hwl909
yZhufAc32SZa7ZoHhuUuh8niiOtE5VRpvA6eHTz+nU+DpVAyYHbU0QQjX+dG5/MV
EwdIQ+U9zt8Xiww5MtadNzzFOB2761Zdq7eBZJoR5+qrhPw60WJiWbFExmHaqWgY
Nta3hqIO2TZwTwYWEu/6T6idxJvKnVd9MZ8dLE1G8VshZ+GDwH2X8IFkYAWdXFrz
AMc+n2NkWNeHEc5XMoyst3NMijXQpd0Yp7irjY5zvaAoKbnUXwfdKJEuGSYAOKoY
O9gmwtqzdIyswqTJqHn4s0vDf3WZ5a4q34IC0w5iGN4lwa+ZRGIfYHrr73vRBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org