Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/SCfTuEvjUsbs9vBko1sqVLURYSc.roa
File:                     SCfTuEvjUsbs9vBko1sqVLURYSc.roa (raw, json)
Hash identifier:          dKNG79S7nfzvDF9+t2WFn2XFCFnvhBcWxUwnhnxJTCw=
Subject key identifier:   48:27:D3:B8:4B:E3:52:C6:EC:F6:F0:64:A3:5B:2A:54:B5:11:61:27
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C6E
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SCfTuEvjUsbs9vBko1sqVLURYSc.roa
Signing time:             Wed 29 Sep 2021 02:51:16 +0000
ROA not before:           Wed 29 Sep 2021 02:51:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     198949
IP address blocks:        210.242.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3182 (0xc6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:51:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4827D3B84BE352C6ECF6F064A35B2A54B5116127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:91:eb:2e:90:05:da:d2:b6:44:89:f4:69:
                    0e:a8:5f:76:72:b9:50:a4:3f:2c:9e:2f:cf:52:49:
                    4a:4d:c2:5a:b1:85:21:70:9b:08:cb:b2:94:7c:f9:
                    a1:d3:d1:24:76:37:17:49:9b:2d:34:43:2e:1a:ee:
                    95:24:51:f4:13:a7:41:3c:2a:30:4b:f0:5f:79:70:
                    99:c4:79:90:06:3c:4f:f3:41:98:32:2e:16:02:d7:
                    4f:ad:e0:f7:fa:67:c6:d6:e3:70:ad:d1:09:1d:f4:
                    e8:fb:7a:a7:3c:26:f3:df:7d:a9:87:cf:fa:67:12:
                    60:36:c5:f0:12:14:5f:72:27:9d:ee:0f:40:cf:08:
                    03:2b:18:79:ee:d5:7f:55:e7:70:ac:88:67:9b:3f:
                    23:23:50:65:b6:c9:0f:0a:5b:62:ff:f4:7b:11:6a:
                    01:0c:56:48:4c:ba:64:a2:f7:0a:3c:a2:16:d2:89:
                    0a:b0:b1:05:16:8c:ce:f9:fd:8a:45:e9:09:30:f6:
                    87:96:1b:32:dd:28:29:76:48:ea:4d:cb:f5:c9:30:
                    59:e4:c0:7a:85:7e:70:2e:34:85:67:4c:20:59:72:
                    b5:52:a9:eb:ef:cb:65:79:48:cc:b8:dd:8c:0a:73:
                    0e:3a:1c:18:c4:ab:f1:fe:c8:a9:65:b8:da:22:18:
                    96:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:27:D3:B8:4B:E3:52:C6:EC:F6:F0:64:A3:5B:2A:54:B5:11:61:27
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/SCfTuEvjUsbs9vBko1sqVLURYSc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.242.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:46:4e:c4:d2:78:b8:7b:6c:0a:84:12:7e:a3:69:b2:75:
         a1:8b:ab:44:f0:f6:0d:f9:81:84:1a:be:ca:32:ad:ca:b9:ac:
         0a:24:e0:3e:fc:a0:99:36:90:4b:ad:4c:8a:71:7f:9a:4f:33:
         1d:de:38:e3:1a:c5:2d:a7:9d:e7:dc:39:81:0a:34:34:1a:bd:
         e5:ec:60:fc:47:82:10:db:45:68:6c:37:f7:8f:57:21:9b:88:
         d6:5e:a4:ab:54:c8:f3:80:cb:6d:aa:c8:1e:8e:27:d8:85:30:
         ee:f9:7d:a3:de:d9:47:eb:8d:f2:53:b4:d9:7e:9d:a3:2f:a1:
         51:e5:30:53:1a:e3:96:4d:5b:16:6e:b9:1e:de:58:fa:ac:75:
         b4:88:33:3d:c8:ff:51:73:4f:bd:cd:15:d9:c4:68:20:e9:29:
         40:30:e8:30:38:e4:db:2c:b0:54:05:4d:98:d1:35:43:6d:19:
         e2:f6:53:5b:ae:f5:4a:9a:f8:3a:0c:6c:54:93:48:ce:1b:dd:
         28:85:44:c5:a9:c4:9d:52:19:13:5c:d8:a2:6c:12:28:2b:14:
         e6:ac:09:4f:a9:49:22:51:7e:34:00:37:01:60:15:86:f5:58:
         10:90:fc:ff:32:f9:24:c1:80:94:7a:2e:30:5b:4f:b7:1e:a0:
         7f:51:2e:7b
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMTA5Mjkw
MjUxMTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDQ4MjdEM0I4NEJFMzUy
QzZFQ0Y2RjA2NEEzNUIyQTU0QjUxMTYxMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyFpHrLpAF2tK2RIn0aQ6oX3ZyuVCkPyyeL89SSUpNwlqxhSFw
mwjLspR8+aHT0SR2NxdJmy00Qy4a7pUkUfQTp0E8KjBL8F95cJnEeZAGPE/zQZgy
LhYC10+t4Pf6Z8bW43Ct0Qkd9Oj7eqc8JvPffamHz/pnEmA2xfASFF9yJ53uD0DP
CAMrGHnu1X9V53CsiGebPyMjUGW2yQ8KW2L/9HsRagEMVkhMumSi9wo8ohbSiQqw
sQUWjM75/YpF6Qkw9oeWGzLdKCl2SOpNy/XJMFnkwHqFfnAuNIVnTCBZcrVSqevv
y2V5SMy43YwKcw46HBjEq/H+yKlluNoiGJZnAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUSCfTuEvjUsbs9vBko1sqVLURYScwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9TQ2ZUdUV2alVzYnM5dkJrbzFz
cVZMVVJZU2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJ7
MA0GCSqGSIb3DQEBCwUAA4IBAQCLu0ZOxNJ4uHtsCoQSfqNpsnWhi6tE8PYN+YGE
Gr7KMq3KuawKJOA+/KCZNpBLrUyKcX+aTzMd3jjjGsUtp53n3DmBCjQ0Gr3l7GD8
R4IQ20VobDf3j1chm4jWXqSrVMjzgMttqsgejifYhTDu+X2j3tlH643yU7TZfp2j
L6FR5TBTGuOWTVsWbrke3lj6rHW0iDM9yP9Rc0+9zRXZxGgg6SlAMOgwOOTbLLBU
BU2Y0TVDbRni9lNbrvVKmvg6DGxUk0jOG90ohUTFqcSdUhkTXNiibBIoKxTmrAlP
qUkiUX40ADcBYBWG9VgQkPz/MvkkwYCUei4wW0+3HqB/US57
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:55 2023 by rpki-client on console-ams.rpki-client.org