Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/SIDrE0i6GwLO00QqX3lkJo2m-i4.roa
File:                     SIDrE0i6GwLO00QqX3lkJo2m-i4.roa (raw, json)
Hash identifier:          V5zJHze//g8F1K3Nu5pyxJ9m6b5D2aSeHx5+1NksyGc=
Subject key identifier:   48:80:EB:13:48:BA:1B:02:CE:D3:44:2A:5F:79:64:26:8D:A6:FA:2E
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0C65
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/SIDrE0i6GwLO00QqX3lkJo2m-i4.roa
Signing time:             Thu 15 Sep 2022 02:50:49 +0000
ROA not before:           Thu 15 Sep 2022 02:50:49 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131642
IP address blocks:        103.137.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3173 (0xc65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep 15 02:50:49 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=4880EB1348BA1B02CED3442A5F7964268DA6FA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:c1:d0:2c:9b:37:26:46:18:c7:f3:f2:b8:
                    f5:62:e7:76:d3:f0:61:d2:23:5d:0a:1b:cf:de:3f:
                    94:ee:74:fa:1c:83:1c:40:af:19:2f:b3:d1:53:67:
                    e3:97:26:d1:a4:68:f3:7f:cc:b1:36:d8:5d:16:62:
                    84:67:c7:1f:30:fb:ba:bc:9a:22:9b:37:97:ea:05:
                    5f:1b:7b:48:69:67:e4:66:9b:ae:73:56:54:61:ea:
                    c3:86:24:33:68:1f:92:25:8a:37:0a:5a:d5:f0:49:
                    66:ad:6c:63:3a:92:2d:ef:f7:e6:36:75:4e:f7:02:
                    2f:64:07:f4:1e:f5:23:8c:a0:b6:3e:70:fc:98:97:
                    e8:6d:ea:1e:90:82:e6:fa:2a:ce:3e:49:57:28:d8:
                    d9:c0:80:25:6f:f6:02:d5:9b:7c:9c:ab:69:57:77:
                    25:c4:99:8c:2c:3b:18:e0:83:ac:7e:b4:89:f3:bb:
                    c2:fb:c7:b5:04:95:a8:3b:67:47:14:66:6e:86:6c:
                    20:cb:2f:b3:33:0f:ec:25:f1:60:ae:9e:04:59:61:
                    77:e5:6b:ef:09:b6:69:64:57:d0:6c:32:ba:55:07:
                    de:ed:55:83:17:cc:3d:70:e3:b0:5b:ac:7b:fa:79:
                    6c:a1:4e:70:2b:a9:de:9b:80:33:72:32:8c:c7:f3:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:80:EB:13:48:BA:1B:02:CE:D3:44:2A:5F:79:64:26:8D:A6:FA:2E
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/SIDrE0i6GwLO00QqX3lkJo2m-i4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:e0:7e:c5:57:ff:aa:76:92:67:3b:4d:8b:75:56:cc:85:
         27:25:7f:e9:50:5f:8c:53:09:67:a7:7a:6b:27:30:72:55:5d:
         71:4a:d4:f6:fc:d8:e0:fe:2b:a6:ea:1e:f7:3e:af:8d:46:d3:
         ec:46:ae:f4:e1:bf:34:47:12:f9:57:72:2a:4b:bd:62:8a:ed:
         38:dc:3f:0d:7e:3b:05:b2:f7:6b:45:3d:3c:00:a0:70:43:ff:
         fa:11:0b:a3:a2:af:8e:38:14:4d:aa:40:c9:9f:f8:b5:3c:6a:
         69:21:9b:f6:33:18:76:7f:02:d8:c8:34:76:5e:56:ae:66:2e:
         88:4e:37:2a:ab:f9:cd:7d:c1:30:02:54:51:f4:b5:13:fa:0e:
         67:ef:b5:7b:55:36:82:4f:30:25:55:24:0e:61:99:31:8f:03:
         3c:5b:0e:2a:62:2e:5e:2f:fd:03:54:cb:30:02:eb:a5:31:62:
         c4:fb:23:4e:ec:ba:94:ad:f7:2a:5f:d2:e0:d3:f5:3a:e2:bc:
         9d:93:9b:ed:c7:ff:aa:49:5d:19:96:80:fc:73:33:60:8e:fc:
         6c:95:1e:ad:80:41:d6:cb:31:2b:c1:62:5a:6a:7f:e0:50:ce:
         a0:84:4e:c1:88:5f:ef:9f:a5:cf:d5:da:a0:ae:cb:35:60:d8:
         31:59:c5:38
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1
NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yMjA5MTUw
MjUwNDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ4ODBFQjEzNDhCQTFC
MDJDRUQzNDQyQTVGNzk2NDI2OERBNkZBMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4YsHQLJs3JkYYx/PyuPVi53bT8GHSI10KG8/eP5TudPocgxxA
rxkvs9FTZ+OXJtGkaPN/zLE22F0WYoRnxx8w+7q8miKbN5fqBV8be0hpZ+Rmm65z
VlRh6sOGJDNoH5IlijcKWtXwSWatbGM6ki3v9+Y2dU73Ai9kB/Qe9SOMoLY+cPyY
l+ht6h6Qgub6Ks4+SVco2NnAgCVv9gLVm3ycq2lXdyXEmYwsOxjgg6x+tInzu8L7
x7UElag7Z0cUZm6GbCDLL7MzD+wl8WCungRZYXfla+8JtmlkV9BsMrpVB97tVYMX
zD1w47BbrHv6eWyhTnArqd6bgDNyMozH86nVAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUSIDrE0i6GwLO00QqX3lkJo2m+i4wHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD
jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP
VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC9TSURyRTBpNkd3TE8w
MFFxWDNsa0pvMm0taTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQB36eB+xVf/qnaSZztNi3VWzIUnJX/p
UF+MUwlnp3prJzByVV1xStT2/Njg/ium6h73Pq+NRtPsRq704b80RxL5V3IqS71i
iu043D8NfjsFsvdrRT08AKBwQ//6EQujoq+OOBRNqkDJn/i1PGppIZv2Mxh2fwLY
yDR2XlauZi6ITjcqq/nNfcEwAlRR9LUT+g5n77V7VTaCTzAlVSQOYZkxjwM8Ww4q
Yi5eL/0DVMswAuulMWLE+yNO7LqUrfcqX9Lg0/U64rydk5vtx/+qSV0ZloD8czNg
jvxslR6tgEHWyzErwWJaan/gUM6ghE7BiF/vn6XP1dqgrss1YNgxWcU4
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:07 2024 by rpki-client on console-ams.rpki-client.org