Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/H_P6Txqw_ZGSftyQ6bFgKteA4KI.roa
File:                     H_P6Txqw_ZGSftyQ6bFgKteA4KI.roa (raw, json)
Hash identifier:          mqGhLjYWovhF7Al+E5AlgTYp8jlAqAELAs/+TRx//xU=
Subject key identifier:   1F:F3:FA:4F:1A:B0:FD:91:92:7E:DC:90:E9:B1:60:2A:D7:80:E0:A2
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0C65
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/H_P6Txqw_ZGSftyQ6bFgKteA4KI.roa
Signing time:             Thu 15 Sep 2022 02:50:51 +0000
ROA not before:           Thu 15 Sep 2022 02:50:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     138145
IP address blocks:        103.137.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3173 (0xc65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep 15 02:50:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1FF3FA4F1AB0FD91927EDC90E9B1602AD780E0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:7b:cb:2f:32:03:42:7e:42:3d:e4:92:ed:
                    86:76:3c:11:5b:84:b4:02:39:c2:ba:c2:64:77:72:
                    e6:a7:f2:a2:ca:7b:bd:eb:01:d2:e2:f1:b0:8e:20:
                    de:d5:c6:10:ef:5a:76:3d:3b:c8:99:d2:fc:42:67:
                    e4:f8:d5:5c:93:9f:e0:9e:f3:a9:fb:65:52:53:c6:
                    ae:dd:3a:d6:23:9e:e7:f9:96:31:a4:b8:37:18:e1:
                    d6:97:e0:9e:70:4c:7c:9a:2b:56:e6:ae:13:c9:39:
                    c6:83:24:e2:01:1b:5e:3c:d9:3b:10:6f:a7:5c:6a:
                    49:c4:9c:e7:32:bd:a1:b0:8e:f6:05:eb:9d:ae:d4:
                    ac:83:a0:5c:dd:14:63:79:a7:7a:11:75:fd:71:f3:
                    f6:32:40:92:b2:ee:69:86:7e:7b:09:e6:bb:ce:78:
                    63:ed:3b:ef:e3:3c:b5:a7:41:d2:09:5e:e0:52:44:
                    e2:12:40:e2:1a:88:52:85:86:b4:64:df:71:a3:98:
                    2e:e9:44:1f:6d:4a:72:76:91:66:18:34:5c:5b:f2:
                    40:13:c0:dd:46:4c:a1:f2:13:11:49:1c:c2:31:6e:
                    53:92:c8:ee:4f:b4:2d:49:8e:fa:35:36:8a:aa:3a:
                    a1:85:3b:72:4d:fd:4e:e2:d3:03:0f:69:f0:e5:59:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F3:FA:4F:1A:B0:FD:91:92:7E:DC:90:E9:B1:60:2A:D7:80:E0:A2
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/H_P6Txqw_ZGSftyQ6bFgKteA4KI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:53:9d:5e:4c:27:15:60:d6:47:18:b4:eb:90:90:ce:52:00:
         1c:db:2a:d1:7d:95:18:aa:1d:9d:a0:b2:69:45:c4:c3:42:f7:
         91:fd:a5:49:9e:d2:6a:a8:5a:4d:af:08:22:b2:2c:83:cf:e2:
         e5:b0:b7:91:96:58:31:3d:3c:e3:13:e1:2f:97:b5:ce:9a:88:
         b3:e3:12:1b:41:29:c2:87:ee:e0:bb:2a:80:19:98:7d:c0:ab:
         d6:f0:c0:fb:f1:cc:fe:56:67:37:a0:75:17:98:c6:25:8a:54:
         05:ed:a8:74:4c:a5:21:9f:3b:4b:9a:9e:9a:a6:d1:20:68:18:
         57:ce:d8:8c:14:28:23:49:00:30:36:86:89:48:27:09:e4:38:
         5a:6a:67:74:96:31:85:fa:48:f2:f1:4a:35:4f:11:6e:be:46:
         15:27:65:18:41:f3:d3:df:93:9e:d9:42:f5:f7:de:21:1b:51:
         01:ca:ad:8e:08:52:c1:54:90:e2:37:a5:c3:f0:34:49:fc:cb:
         68:71:11:cf:36:62:c5:eb:19:64:3d:57:d7:70:4a:30:ac:34:
         4f:4a:95:83:b2:03:75:a8:67:bb:f4:34:4a:0c:07:3d:df:64:
         99:fb:74:a9:2d:57:2c:10:fb:ce:d0:f1:11:38:5f:0d:2c:e2:
         13:9f:df:b5
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1
NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yMjA5MTUw
MjUwNTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDFGRjNGQTRGMUFCMEZE
OTE5MjdFREM5MEU5QjE2MDJBRDc4MEUwQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCovHvLLzIDQn5CPeSS7YZ2PBFbhLQCOcK6wmR3cuan8qLKe73r
AdLi8bCOIN7VxhDvWnY9O8iZ0vxCZ+T41VyTn+Ce86n7ZVJTxq7dOtYjnuf5ljGk
uDcY4daX4J5wTHyaK1bmrhPJOcaDJOIBG1482TsQb6dcaknEnOcyvaGwjvYF652u
1KyDoFzdFGN5p3oRdf1x8/YyQJKy7mmGfnsJ5rvOeGPtO+/jPLWnQdIJXuBSROIS
QOIaiFKFhrRk33GjmC7pRB9tSnJ2kWYYNFxb8kATwN1GTKHyExFJHMIxblOSyO5P
tC1Jjvo1NoqqOqGFO3JN/U7i0wMPafDlWXR7AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUH/P6Txqw/ZGSftyQ6bFgKteA4KIwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD
jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP
VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC9IX1A2VHhxd19aR1Nm
dHlRNmJGZ0t0ZUE0S0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQCUU51eTCcVYNZHGLTrkJDOUgAc2yrR
fZUYqh2doLJpRcTDQveR/aVJntJqqFpNrwgisiyDz+LlsLeRllgxPTzjE+Evl7XO
moiz4xIbQSnCh+7guyqAGZh9wKvW8MD78cz+Vmc3oHUXmMYlilQF7ah0TKUhnztL
mp6aptEgaBhXztiMFCgjSQAwNoaJSCcJ5Dhaamd0ljGF+kjy8Uo1TxFuvkYVJ2UY
QfPT35Oe2UL1994hG1EByq2OCFLBVJDiN6XD8DRJ/MtocRHPNmLF6xlkPVfXcEow
rDRPSpWDsgN1qGe79DRKDAc932SZ+3SpLVcsEPvO0PEROF8NLOITn9+1
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org