Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/RUhEvs49S6xBkt8ihz_nvgkkKac.roa
File:                     RUhEvs49S6xBkt8ihz_nvgkkKac.roa (raw, json)
Hash identifier:          wAXx+DKKSMXTU419OQVKQMhe3Hoq0AO1B7OqQIJKrq0=
Subject key identifier:   45:48:44:BE:CE:3D:4B:AC:41:92:DF:22:87:3F:E7:BE:09:24:29:A7
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0AD4
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/RUhEvs49S6xBkt8ihz_nvgkkKac.roa
Signing time:             Sun 07 Feb 2021 12:40:56 +0000
ROA not before:           Sun 07 Feb 2021 12:40:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18178
IP address blocks:        103.137.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772 (0xad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Feb  7 12:40:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=454844BECE3D4BAC4192DF22873FE7BE092429A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1c:77:75:06:7d:5e:ad:ad:6b:b6:a6:61:b7:
                    6d:55:7a:27:12:3f:a1:48:36:9c:cd:b6:05:00:5e:
                    fe:dc:5b:be:a6:84:77:90:71:6a:06:cf:70:7c:6e:
                    87:2f:f2:69:6b:98:12:4f:21:a1:81:5c:f7:b7:09:
                    36:25:d1:97:62:91:ff:91:00:19:f8:1a:05:72:c7:
                    48:05:79:e6:60:44:ca:f2:0f:43:7b:87:1c:19:ee:
                    f9:06:cd:47:79:7f:c1:0d:a9:c2:7a:7e:20:68:58:
                    1f:1b:ee:9b:cb:f2:9a:ec:aa:b8:0a:e2:ef:10:ed:
                    77:e6:4e:24:a2:dd:fc:81:6b:6a:be:d3:33:64:53:
                    de:41:06:c4:51:b5:31:3e:fb:35:43:a1:99:1e:5d:
                    11:2d:d6:08:df:35:cb:c2:3d:8b:08:78:91:1b:ef:
                    dd:ea:0c:16:9d:39:ea:46:31:09:4b:ce:18:6f:22:
                    91:56:ae:96:fe:8a:c9:f8:99:ff:4e:63:d8:d2:f4:
                    73:83:d7:11:6d:fd:5f:8a:39:7c:bb:c9:91:3c:b4:
                    62:a2:db:f9:98:37:e2:7b:70:9f:f6:58:4f:8e:6f:
                    47:b0:a1:a7:7a:a0:6e:a8:20:0f:93:d4:ed:06:7f:
                    d2:2d:d3:24:9f:51:66:61:6a:59:61:15:b5:83:0e:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:48:44:BE:CE:3D:4B:AC:41:92:DF:22:87:3F:E7:BE:09:24:29:A7
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/RUhEvs49S6xBkt8ihz_nvgkkKac.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:e3:1f:e0:91:86:85:27:cd:86:41:69:a6:f8:42:8f:b0:ea:
         30:ae:9c:cd:16:7f:0c:d2:48:56:e2:e6:58:17:26:62:98:25:
         a2:96:c7:a5:8c:a5:f1:6f:36:af:4e:4d:15:7c:3b:18:c0:4d:
         a3:c0:18:4e:9e:67:09:a9:f3:26:c4:d9:31:0c:cd:54:4f:65:
         44:e2:8e:47:e9:d6:39:5d:1c:0a:b4:e0:52:f0:f6:58:ab:17:
         cb:d3:63:9d:f5:3a:92:5f:b5:d5:b1:bb:d9:47:db:42:94:fa:
         c7:56:89:18:6a:19:8e:a5:a6:5f:f2:f5:5f:73:f3:c8:e9:20:
         95:3c:3e:a3:cc:1d:d2:7d:54:dd:12:75:90:27:ad:ae:96:ef:
         c1:61:c5:50:02:53:5b:88:03:92:7e:07:cd:93:b3:3c:b1:94:
         9b:bb:69:21:42:05:97:45:12:eb:82:84:e9:ed:6a:35:b2:d3:
         e2:7b:2c:cb:d2:3a:61:08:57:0d:c6:2d:4c:88:8d:83:f3:97:
         27:e0:33:13:6c:1a:48:e4:8a:5f:56:af:5f:ca:22:ac:ff:01:
         0a:57:96:39:6f:60:4c:c7:7b:da:79:9f:80:8e:1d:66:2a:dd:
         ce:ce:8a:27:27:4f:dd:59:e6:94:5a:fe:31:a3:2a:3e:a1:22:
         91:22:6f:96
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1
NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yMTAyMDcx
MjQwNTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQ1NDg0NEJFQ0UzRDRC
QUM0MTkyREYyMjg3M0ZFN0JFMDkyNDI5QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgHHd1Bn1era1rtqZht21VeicSP6FINpzNtgUAXv7cW76mhHeQ
cWoGz3B8bocv8mlrmBJPIaGBXPe3CTYl0Zdikf+RABn4GgVyx0gFeeZgRMryD0N7
hxwZ7vkGzUd5f8ENqcJ6fiBoWB8b7pvL8prsqrgK4u8Q7XfmTiSi3fyBa2q+0zNk
U95BBsRRtTE++zVDoZkeXREt1gjfNcvCPYsIeJEb793qDBadOepGMQlLzhhvIpFW
rpb+isn4mf9OY9jS9HOD1xFt/V+KOXy7yZE8tGKi2/mYN+J7cJ/2WE+Ob0ewoad6
oG6oIA+T1O0Gf9It0ySfUWZhallhFbWDDjXbAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQURUhEvs49S6xBkt8ihz/nvgkkKacwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD
jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP
VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC9SVWhFdnM0OVM2eEJr
dDhpaHpfbnZna2tLYWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQBd4x/gkYaFJ82GQWmm+EKPsOowrpzN
Fn8M0khW4uZYFyZimCWilseljKXxbzavTk0VfDsYwE2jwBhOnmcJqfMmxNkxDM1U
T2VE4o5H6dY5XRwKtOBS8PZYqxfL02Od9TqSX7XVsbvZR9tClPrHVokYahmOpaZf
8vVfc/PI6SCVPD6jzB3SfVTdEnWQJ62ulu/BYcVQAlNbiAOSfgfNk7M8sZSbu2kh
QgWXRRLrgoTp7Wo1stPieyzL0jphCFcNxi1MiI2D85cn4DMTbBpI5IpfVq9fyiKs
/wEKV5Y5b2BMx3vaeZ+Ajh1mKt3OzoonJ0/dWeaUWv4xoyo+oSKRIm+W
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:54 2023 by rpki-client on console-ams.rpki-client.org