Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/S61bEZ_Dkqv0b9lu7MUI7wcGXHk.roa
File:                     S61bEZ_Dkqv0b9lu7MUI7wcGXHk.roa (raw, json)
Hash identifier:          IUYTxfdykdW18eyPlo2wD7STyfL1Pu/v+xlDiQfCnDE=
Subject key identifier:   4B:AD:5B:11:9F:C3:92:AB:F4:6F:D9:6E:EC:C5:08:EF:07:06:5C:79
Certificate issuer:       /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial:       0777
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/S61bEZ_Dkqv0b9lu7MUI7wcGXHk.roa
Signing time:             Tue 29 Sep 2020 10:03:34 +0000
ROA not before:           Tue 29 Sep 2020 10:03:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131588
IP address blocks:        2400:e480::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
        Validity
            Not Before: Sep 29 10:03:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4BAD5B119FC392ABF46FD96EECC508EF07065C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a7:60:12:7b:aa:08:f7:2d:e7:68:6b:87:6b:
                    b0:2f:0a:8f:00:03:41:c6:05:dd:99:a3:e0:f4:2b:
                    a0:9a:b5:ea:c9:14:6f:0c:8c:71:5e:24:8e:05:69:
                    5c:bc:0e:ac:d0:f2:ea:5c:be:9c:8f:05:eb:62:73:
                    6f:a2:c6:23:74:d4:a7:10:1e:cb:0b:49:f9:f4:8a:
                    31:7f:2d:20:1d:9e:2b:73:c4:4a:e1:90:84:fc:9a:
                    53:99:14:80:33:33:26:05:b3:85:f1:1f:21:d3:40:
                    1d:f5:67:ac:07:bf:81:c6:92:10:d5:55:f5:1f:d2:
                    37:c1:ea:0e:6b:79:c4:26:b2:30:03:30:4d:ec:14:
                    91:1c:bb:e8:60:ab:d7:41:7f:09:1b:f4:3f:e9:79:
                    2a:92:3a:b2:75:66:3f:5a:2a:a4:f7:47:d8:54:a7:
                    d6:a6:92:eb:d2:bf:29:a8:16:a5:ee:b0:8d:42:ee:
                    73:f5:8e:f6:84:0d:07:33:fc:f4:ae:6e:f0:d5:a0:
                    36:33:50:17:18:0a:07:60:21:a1:6d:dd:63:4d:75:
                    ed:82:89:35:be:e4:33:94:b0:1c:2a:da:32:a4:1f:
                    4f:18:3c:c1:b4:be:27:fe:2d:bf:11:c4:90:2a:be:
                    28:e3:77:29:06:3b:65:51:a7:6e:97:ae:d5:c4:1d:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AD:5B:11:9F:C3:92:AB:F4:6F:D9:6E:EC:C5:08:EF:07:06:5C:79
            X509v3 Authority Key Identifier:
                keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/S61bEZ_Dkqv0b9lu7MUI7wcGXHk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e480::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:29:c8:78:5a:51:b4:2d:8d:c2:f0:4f:bc:a3:fe:5f:ac:5e:
         39:a1:89:5b:8a:88:dc:a5:a9:e9:9a:00:3d:2b:1a:4a:a2:38:
         63:d1:0b:20:8e:e9:bd:fb:51:90:68:fc:69:06:04:21:ed:90:
         e5:94:44:25:22:ec:20:af:2f:7c:1f:0e:a5:b3:5c:ee:92:07:
         50:63:f8:d6:95:8c:2b:04:57:3c:e8:b0:a6:6d:6e:7f:b0:02:
         79:f8:17:02:eb:31:82:10:27:77:c3:0d:7d:b5:90:19:cc:70:
         61:26:72:11:7b:6e:94:ef:30:af:31:e2:d0:a3:33:5b:52:a7:
         3b:8c:52:36:09:bb:a5:cb:80:a2:43:fd:f5:dc:53:c4:98:61:
         7c:bd:90:aa:a7:e7:7d:09:9f:75:76:15:9a:1b:4a:98:dd:01:
         68:f6:24:97:16:68:7e:fe:b3:69:70:6c:e7:de:8e:7d:37:4a:
         0b:2c:07:d7:92:62:ab:1b:8a:e2:f1:69:74:41:69:e4:9d:b5:
         9f:7f:36:fc:3f:5c:73:d2:f7:69:7d:51:f5:09:42:12:8f:a6:
         0f:da:f1:d8:c1:fe:af:21:bf:83:5b:a0:fc:99:e9:73:ed:7b:
         08:c8:65:5e:56:d0:b3:1f:a9:34:99:6a:10:d1:f6:8d:5a:c0:
         51:31:e3:37
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjBD
RTEwQkQ3QzJCMzlBMDNBNzBDMzAyQkEyQjA4NjUyQzA4MDdEMjAeFw0yMDA5Mjkx
MDAzMzRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRCQUQ1QjExOUZDMzky
QUJGNDZGRDk2RUVDQzUwOEVGMDcwNjVDNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5p2ASe6oI9y3naGuHa7AvCo8AA0HGBd2Zo+D0K6CaterJFG8M
jHFeJI4FaVy8DqzQ8upcvpyPBetic2+ixiN01KcQHssLSfn0ijF/LSAdnitzxErh
kIT8mlOZFIAzMyYFs4XxHyHTQB31Z6wHv4HGkhDVVfUf0jfB6g5recQmsjADME3s
FJEcu+hgq9dBfwkb9D/peSqSOrJ1Zj9aKqT3R9hUp9amkuvSvymoFqXusI1C7nP1
jvaEDQcz/PSubvDVoDYzUBcYCgdgIaFt3WNNde2CiTW+5DOUsBwq2jKkH08YPMG0
vif+Lb8RxJAqvijjdykGO2VRp26XrtXEHURHAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUS61bEZ/Dkqv0b9lu7MUI7wcGXHkwHwYDVR0jBBgwFoAU8M4QvXwrOaA6cMMC
uisIZSwIB9IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRklTQy84
TTRRdlh3ck9hQTZjTU1DdWlzSVpTd0lCOUkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzhNNFF2WHdyT2FBNmNNTUN1aXNJWlN3SUI5SS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0ZJU0MvUzYxYkVaX0RrcXYwYjlsdTdNVUk3
d2NHWEhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQA5IAw
DQYJKoZIhvcNAQELBQADggEBAKYpyHhaUbQtjcLwT7yj/l+sXjmhiVuKiNylqema
AD0rGkqiOGPRCyCO6b37UZBo/GkGBCHtkOWURCUi7CCvL3wfDqWzXO6SB1Bj+NaV
jCsEVzzosKZtbn+wAnn4FwLrMYIQJ3fDDX21kBnMcGEmchF7bpTvMK8x4tCjM1tS
pzuMUjYJu6XLgKJD/fXcU8SYYXy9kKqn530Jn3V2FZobSpjdAWj2JJcWaH7+s2lw
bOfejn03SgssB9eSYqsbiuLxaXRBaeSdtZ9/Nvw/XHPS92l9UfUJQhKPpg/a8djB
/q8hv4NboPyZ6XPtewjIZV5W0LMfqTSZahDR9o1awFEx4zc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org