Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2JBbKrZIs72PzDL0T5iZoQE-ZBM.roa
File:                     2JBbKrZIs72PzDL0T5iZoQE-ZBM.roa (raw, json)
Hash identifier:          K4yEJGssiK3CQ9zeaNOxbKwQQJqFHbDLJHLF86wKB5Q=
Subject key identifier:   D8:90:5B:2A:B6:48:B3:BD:8F:CC:32:F4:4F:98:99:A1:01:3E:64:13
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       082E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2JBbKrZIs72PzDL0T5iZoQE-ZBM.roa
Signing time:             Tue 29 Sep 2020 09:58:26 +0000
ROA not before:           Tue 29 Sep 2020 09:58:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        122.118.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D8905B2AB648B3BD8FCC32F44F9899A1013E6413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:0c:63:4f:8b:92:2c:7d:ff:97:28:c9:22:
                    55:12:3d:20:62:c3:9f:65:9c:15:cd:e7:4f:f5:2b:
                    b0:d5:68:34:ae:b4:ca:80:fb:6d:4f:77:c3:fa:6d:
                    0d:5f:52:54:7d:b6:16:f4:6d:68:0f:35:1c:ee:7d:
                    1c:f3:cb:01:dc:b6:35:fb:fd:ea:83:4f:4d:2e:31:
                    6b:e2:65:84:d9:30:81:b4:f7:1f:68:6e:a6:b6:46:
                    94:87:b5:2a:2f:ed:2c:b3:c1:ae:1a:e8:63:ed:e3:
                    72:8d:4b:26:2f:65:fe:4c:d1:fc:3b:1d:61:05:cd:
                    56:8b:1d:c8:e5:57:dd:f8:d8:75:90:10:10:38:59:
                    18:0b:96:d0:5d:ba:fe:d8:c9:f6:1b:77:02:d3:54:
                    4f:ae:41:b3:83:29:33:18:a8:57:20:84:52:50:50:
                    d9:bc:bf:4c:06:a9:1b:ad:f3:e2:f3:99:d3:ee:5e:
                    fb:72:06:83:11:e5:9c:89:ac:6e:e0:65:03:95:d0:
                    82:42:ca:ee:a7:06:be:7f:10:be:7b:9e:22:6a:35:
                    d3:24:71:08:18:c9:f0:92:b1:8a:22:ef:33:25:e8:
                    ef:cb:cc:10:e7:48:c6:88:4b:09:5a:70:bd:1a:20:
                    1d:35:2b:a0:82:42:1a:d4:22:b4:a5:51:f8:e7:af:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:90:5B:2A:B6:48:B3:BD:8F:CC:32:F4:4F:98:99:A1:01:3E:64:13
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2JBbKrZIs72PzDL0T5iZoQE-ZBM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.118.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:88:65:87:d2:c8:8d:6f:bb:72:bf:63:7f:aa:a0:e1:3d:d9:
         bb:70:d8:9d:13:7e:09:25:61:8b:d2:13:51:7d:22:3b:2b:f6:
         cf:2a:9f:0d:2e:34:8d:3b:71:5d:4a:47:16:d2:1a:3f:4e:10:
         ae:ed:53:90:5b:e6:3c:28:7c:33:18:67:bc:71:6f:8e:6d:b1:
         1c:25:40:0d:6f:34:19:01:f7:6f:41:66:8b:da:6f:11:1d:33:
         36:6e:50:46:5f:48:cd:3e:5d:63:03:7d:60:e4:b2:de:53:35:
         a8:5b:ba:2a:5a:c0:c5:5a:90:7b:46:8d:ba:1f:cb:71:f4:7e:
         fb:fd:bd:78:d5:d2:e2:e3:f3:99:7d:08:a1:17:0b:e4:a1:c5:
         7d:a3:c4:fe:7f:31:ca:6f:a8:60:cc:d5:26:d7:7e:42:6f:d8:
         37:a1:9e:57:e2:db:b3:35:6f:c3:f7:22:39:17:e9:f4:45:fc:
         9e:86:9d:08:9f:8a:92:bb:ab:f4:6d:95:c4:cb:4b:41:bc:cf:
         97:ed:0a:ec:4b:88:55:cd:e3:8f:c9:39:7a:dc:37:59:d0:0e:
         79:b3:24:da:0a:3f:a4:7a:a6:cf:39:33:52:83:2a:cb:71:a0:
         6e:ed:be:7f:2f:06:e5:63:b6:89:ef:c0:07:9d:93:fa:75:30:
         90:49:1e:21
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMDA5Mjkw
OTU4MjZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ4OTA1QjJBQjY0OEIz
QkQ4RkNDMzJGNDRGOTg5OUExMDEzRTY0MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiPAxjT4uSLH3/lyjJIlUSPSBiw59lnBXN50/1K7DVaDSutMqA
+21Pd8P6bQ1fUlR9thb0bWgPNRzufRzzywHctjX7/eqDT00uMWviZYTZMIG09x9o
bqa2RpSHtSov7Syzwa4a6GPt43KNSyYvZf5M0fw7HWEFzVaLHcjlV9342HWQEBA4
WRgLltBduv7YyfYbdwLTVE+uQbODKTMYqFcghFJQUNm8v0wGqRut8+LzmdPuXvty
BoMR5ZyJrG7gZQOV0IJCyu6nBr5/EL57niJqNdMkcQgYyfCSsYoi7zMl6O/LzBDn
SMaISwlacL0aIB01K6CCQhrUIrSlUfjnr4YlAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU2JBbKrZIs72PzDL0T5iZoQE+ZBMwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC8ySkJiS3JaSXM3MlB6REwwVDVp
Wm9RRS1aQk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAenYw
DQYJKoZIhvcNAQELBQADggEBAL2IZYfSyI1vu3K/Y3+qoOE92btw2J0TfgklYYvS
E1F9Ijsr9s8qnw0uNI07cV1KRxbSGj9OEK7tU5Bb5jwofDMYZ7xxb45tsRwlQA1v
NBkB929BZovabxEdMzZuUEZfSM0+XWMDfWDkst5TNahbuipawMVakHtGjbofy3H0
fvv9vXjV0uLj85l9CKEXC+ShxX2jxP5/McpvqGDM1SbXfkJv2Dehnlfi27M1b8P3
IjkX6fRF/J6GnQifipK7q/RtlcTLS0G8z5ftCuxLiFXN44/JOXrcN1nQDnmzJNoK
P6R6ps85M1KDKstxoG7tvn8vBuVjtonvwAedk/p1MJBJHiE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:36 2024 by rpki-client on console-fra.rpki-client.org