Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/426HseZxUzaXQqFT_Gt3iTlna5E.roa
File:                     426HseZxUzaXQqFT_Gt3iTlna5E.roa (raw, json)
Hash identifier:          jGF18Lk1mavlRqheykasHLYeDR2G14S9noCVtoiAY1M=
Subject key identifier:   E3:6E:87:B1:E6:71:53:36:97:42:A1:53:FC:6B:77:89:39:67:6B:91
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       09F2
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/426HseZxUzaXQqFT_Gt3iTlna5E.roa
Signing time:             Tue 20 Oct 2020 04:14:25 +0000
ROA not before:           Tue 20 Oct 2020 04:14:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18178
IP address blocks:        103.137.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2546 (0x9f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Oct 20 04:14:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E36E87B1E67153369742A153FC6B778939676B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:38:f2:70:03:f0:ad:a4:78:90:b1:2e:93:4a:
                    9c:32:4a:d7:27:2e:7d:b1:ce:ed:ab:ba:46:69:62:
                    4d:e8:86:2d:8e:28:5c:70:4a:06:54:f5:83:9b:23:
                    c0:8f:30:6c:58:43:9d:a0:4f:de:91:2b:73:c2:58:
                    96:19:2c:15:47:1d:45:30:34:fe:dd:75:a6:66:67:
                    33:4b:96:f0:4b:f3:de:b5:9c:25:d8:ec:7a:f3:5a:
                    fa:10:67:ed:e0:ae:db:df:c3:ec:d5:b1:75:c4:bd:
                    dd:c8:79:bc:bc:b3:da:12:2f:8c:c6:11:ad:a5:aa:
                    0a:f0:e0:9c:f6:5d:16:68:16:3d:16:e4:eb:f7:1b:
                    61:62:b3:09:91:19:00:21:16:0c:8b:78:da:2e:91:
                    f8:28:24:73:3b:00:31:b9:3c:5e:b1:69:cb:79:9d:
                    7a:16:16:cd:3e:48:76:c2:b2:ff:0e:3e:d6:92:73:
                    d2:a8:35:ea:09:97:de:af:03:70:b4:55:22:0f:b5:
                    cd:f4:e4:61:41:ef:0f:68:3b:c6:39:03:84:cc:d1:
                    86:d8:d5:fc:82:b4:eb:18:90:b5:b5:4d:02:32:4e:
                    fc:3c:01:b3:6c:12:1c:5d:9e:0c:2e:63:ce:d8:5f:
                    1b:3e:b0:4f:2d:60:a2:67:71:61:98:47:fe:ba:48:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6E:87:B1:E6:71:53:36:97:42:A1:53:FC:6B:77:89:39:67:6B:91
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/426HseZxUzaXQqFT_Gt3iTlna5E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:07:c0:61:5b:b8:60:39:fa:90:7f:ee:90:42:56:96:d0:
         89:08:5e:0c:38:59:59:cb:71:e9:a7:88:7a:74:53:d9:c3:50:
         c7:41:dd:fb:c4:6e:84:90:7d:fa:02:8d:93:06:4e:95:77:62:
         7d:0e:85:d8:28:34:c8:f1:4d:3b:6a:66:ed:07:2e:cf:0e:a2:
         25:27:7f:05:be:4b:cf:fa:b4:a1:81:67:1e:00:55:ab:80:87:
         6c:f7:a7:fc:e4:b9:d1:04:15:98:c6:0c:53:6e:92:f5:cf:c5:
         71:35:67:36:3a:60:cc:26:83:be:19:16:56:0c:dd:6d:29:54:
         0d:50:cc:e2:50:32:8d:89:9b:22:cc:f8:6f:61:53:fc:c5:0e:
         67:db:26:c2:36:d6:0f:e5:c9:a2:fb:b8:b0:c1:24:d1:9d:ea:
         d2:65:3e:9e:fc:0a:83:21:4e:b7:fb:80:7b:2e:6b:45:25:13:
         69:f5:d7:9d:24:f9:6a:15:e2:ba:10:e8:26:05:5d:6e:81:de:
         5e:4e:76:72:ac:de:a5:ce:2c:25:61:e9:3d:2b:93:81:fd:2e:
         4e:cc:0f:3c:45:28:0f:48:de:c5:a1:d6:b3:a0:e6:d2:dc:2c:
         13:38:01:f6:01:d7:d2:7b:b4:ac:91:07:14:f0:8c:52:1d:30:
         54:28:93:77
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1
NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yMDEwMjAw
NDE0MjVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEUzNkU4N0IxRTY3MTUz
MzY5NzQyQTE1M0ZDNkI3Nzg5Mzk2NzZCOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqOPJwA/CtpHiQsS6TSpwyStcnLn2xzu2rukZpYk3ohi2OKFxw
SgZU9YObI8CPMGxYQ52gT96RK3PCWJYZLBVHHUUwNP7ddaZmZzNLlvBL8961nCXY
7HrzWvoQZ+3grtvfw+zVsXXEvd3Ieby8s9oSL4zGEa2lqgrw4Jz2XRZoFj0W5Ov3
G2FiswmRGQAhFgyLeNoukfgoJHM7ADG5PF6xact5nXoWFs0+SHbCsv8OPtaSc9Ko
NeoJl96vA3C0VSIPtc305GFB7w9oO8Y5A4TM0YbY1fyCtOsYkLW1TQIyTvw8AbNs
EhxdngwuY87YXxs+sE8tYKJncWGYR/66SJbpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU426HseZxUzaXQqFT/Gt3iTlna5EwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD
jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP
VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC80MjZIc2VaeFV6YVhR
cUZUX0d0M2lUbG5hNUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQAqWQfAYVu4YDn6kH/ukEJWltCJCF4M
OFlZy3Hpp4h6dFPZw1DHQd37xG6EkH36Ao2TBk6Vd2J9DoXYKDTI8U07ambtBy7P
DqIlJ38FvkvP+rShgWceAFWrgIds96f85LnRBBWYxgxTbpL1z8VxNWc2OmDMJoO+
GRZWDN1tKVQNUMziUDKNiZsizPhvYVP8xQ5n2ybCNtYP5cmi+7iwwSTRnerSZT6e
/AqDIU63+4B7LmtFJRNp9dedJPlqFeK6EOgmBV1ugd5eTnZyrN6lziwlYek9K5OB
/S5OzA88RSgPSN7FodazoObS3CwTOAH2AdfSe7SskQcU8IxSHTBUKJN3
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org