Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/j17oPridtTarXA1CQWC6hk-5FhE.roa
File:                     j17oPridtTarXA1CQWC6hk-5FhE.roa (raw, json)
Hash identifier:          pkdvV8gPERcYL1WymVuz5iR3q4O1Z9FYF/HQ7yDT3z0=
Subject key identifier:   8F:5E:E8:3E:B8:9D:B5:36:AB:5C:0D:42:41:60:BA:86:4F:B9:16:11
Certificate issuer:       /CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
Certificate serial:       0DE3
Authority key identifier: F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/j17oPridtTarXA1CQWC6hk-5FhE.roa
Signing time:             Tue 29 Sep 2020 10:03:30 +0000
ROA not before:           Tue 29 Sep 2020 10:03:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131606
IP address blocks:        103.124.40.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3555 (0xde3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3174813DFB1F9B4560472C267F76CD0C141E5DE
        Validity
            Not Before: Sep 29 10:03:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8F5EE83EB89DB536AB5C0D424160BA864FB91611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:f6:c7:e5:07:d3:8c:fc:10:d5:d8:fb:33:
                    36:ee:86:85:1e:78:2c:35:c9:62:0c:5b:cd:4e:ab:
                    cb:58:00:5a:ec:22:d9:69:70:b4:52:6d:43:c6:ce:
                    31:50:66:4b:f7:ec:85:8c:f8:3f:d9:b3:b7:6b:75:
                    22:13:ec:3d:36:0c:7b:9b:be:2b:1e:a2:55:2a:35:
                    c4:a3:43:7c:33:19:86:7a:c1:cd:4d:3c:3c:64:fb:
                    c8:48:a8:91:d0:5e:a5:d1:18:28:3c:97:54:38:09:
                    95:ff:f9:87:62:c9:a6:e9:8b:85:34:bd:9f:d6:16:
                    86:2b:af:82:aa:8c:30:61:54:0f:ce:44:57:8f:c1:
                    a0:8d:f4:99:53:16:c0:cf:51:01:9e:35:63:e9:4e:
                    31:c8:f6:56:bb:33:33:24:86:92:15:37:87:b7:26:
                    2e:bd:17:4e:54:7a:3c:a4:5d:76:51:e8:ef:92:c4:
                    b7:a3:1e:96:16:e1:dd:64:8d:57:d0:fb:a3:05:cc:
                    b6:7d:dd:08:c3:f0:cd:b6:b4:d4:cf:78:7e:45:14:
                    09:74:6e:86:0b:32:5f:00:e2:c8:48:9c:1e:eb:67:
                    e3:86:d1:29:94:0e:6f:83:08:00:10:67:aa:b5:7e:
                    06:a4:35:2e:66:b1:6f:c1:52:0e:98:8e:63:35:5d:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:E8:3E:B8:9D:B5:36:AB:5C:0D:42:41:60:BA:86:4F:B9:16:11
            X509v3 Authority Key Identifier:
                keyid:F3:17:48:13:DF:B1:F9:B4:56:04:72:C2:67:F7:6C:D0:C1:41:E5:DE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8xdIE9-x-bRWBHLCZ_ds0MFB5d4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FAMILYPLUS/j17oPridtTarXA1CQWC6hk-5FhE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:12:39:ab:bc:88:65:ff:f0:27:24:79:e6:59:7b:40:62:31:
         c7:35:be:5e:be:2a:d0:13:4f:b6:50:e0:06:81:90:c6:25:a7:
         d6:10:e4:c3:56:41:97:84:66:2d:52:00:bb:5e:94:e3:4c:f9:
         89:80:79:0d:17:76:cb:e3:3b:c6:a4:fe:30:53:d0:8b:ef:94:
         74:44:42:7c:7a:80:30:31:25:6f:e7:ea:1d:ec:aa:4c:74:a4:
         9d:a3:93:43:6c:11:2d:32:60:33:5f:3e:3d:54:c9:4d:eb:63:
         9a:70:13:f9:cf:df:df:8e:73:e2:c1:35:c6:1b:0c:3f:74:b2:
         8e:27:06:8d:c6:eb:e1:14:19:f9:e4:14:34:bb:95:67:c7:dc:
         a1:f6:d6:04:7b:99:3e:e7:51:11:43:e6:5d:d4:bb:1b:a7:04:
         ef:f1:9c:54:a0:05:25:00:f2:c9:d7:5b:c4:87:7a:34:75:a0:
         5e:5d:ce:3c:54:28:56:3a:70:d2:c8:cc:8d:8c:0d:3e:a1:5b:
         92:8a:88:c7:a1:2a:8e:df:c9:dd:87:59:f6:20:7b:03:56:84:
         fe:cf:48:d3:89:01:d8:6e:c3:d1:38:93:32:37:ba:b0:cb:8d:
         ad:8b:43:84:a7:41:cc:e9:85:d4:d5:fa:b2:84:fc:4f:1d:03:
         8d:63:72:e5
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICDeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMx
NzQ4MTNERkIxRjlCNDU2MDQ3MkMyNjdGNzZDRDBDMTQxRTVERTAeFw0yMDA5Mjkx
MDAzMzBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDhGNUVFODNFQjg5REI1
MzZBQjVDMEQ0MjQxNjBCQTg2NEZCOTE2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC1/bH5QfTjPwQ1dj7MzbuhoUeeCw1yWIMW81Oq8tYAFrsItlp
cLRSbUPGzjFQZkv37IWM+D/Zs7drdSIT7D02DHubviseolUqNcSjQ3wzGYZ6wc1N
PDxk+8hIqJHQXqXRGCg8l1Q4CZX/+Ydiyabpi4U0vZ/WFoYrr4KqjDBhVA/ORFeP
waCN9JlTFsDPUQGeNWPpTjHI9la7MzMkhpIVN4e3Ji69F05UejykXXZR6O+SxLej
HpYW4d1kjVfQ+6MFzLZ93QjD8M22tNTPeH5FFAl0boYLMl8A4shInB7rZ+OG0SmU
Dm+DCAAQZ6q1fgakNS5msW/BUg6YjmM1XT+ZAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUj17oPridtTarXA1CQWC6hk+5FhEwHwYDVR0jBBgwFoAU8xdIE9+x+bRWBHLC
Z/ds0MFB5d4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFNSUxZ
UExVUy84eGRJRTkteC1iUldCSExDWl9kczBNRkI1ZDQuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBLzh4ZElFOS14LWJSV0JITENaX2RzME1GQjVkNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTUlMWVBMVVMvajE3b1ByaWR0
VGFyWEExQ1FXQzZoay01RmhFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWd8KDANBgkqhkiG9w0BAQsFAAOCAQEAmRI5q7yIZf/wJyR55ll7QGIx
xzW+Xr4q0BNPtlDgBoGQxiWn1hDkw1ZBl4RmLVIAu16U40z5iYB5DRd2y+M7xqT+
MFPQi++UdERCfHqAMDElb+fqHeyqTHSknaOTQ2wRLTJgM18+PVTJTetjmnAT+c/f
345z4sE1xhsMP3SyjicGjcbr4RQZ+eQUNLuVZ8fcofbWBHuZPudREUPmXdS7G6cE
7/GcVKAFJQDyyddbxId6NHWgXl3OPFQoVjpw0sjMjYwNPqFbkoqIx6Eqjt/J3YdZ
9iB7A1aE/s9I04kB2G7D0TiTMje6sMuNrYtDhKdBzOmF1NX6soT8Tx0DjWNy5Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:53 2023 by rpki-client on console-ams.rpki-client.org