Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/eaOmkPjmpnt5jr8D4MKggLkfEsU.roa
File:                     eaOmkPjmpnt5jr8D4MKggLkfEsU.roa (raw, json)
Hash identifier:          N1HqYmyCQwm3P2ZPiLVDQjegQp/7iIBsn3bRWfYNw2o=
Subject key identifier:   79:A3:A6:90:F8:E6:A6:7B:79:8E:BF:03:E0:C2:A0:80:B9:1F:12:C5
Certificate issuer:       /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial:       0E80
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/eaOmkPjmpnt5jr8D4MKggLkfEsU.roa
Signing time:             Sun 07 Feb 2021 13:16:18 +0000
ROA not before:           Sun 07 Feb 2021 13:16:18 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     63199
IP address blocks:        103.124.150.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3712 (0xe80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
        Validity
            Not Before: Feb  7 13:16:18 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=79A3A690F8E6A67B798EBF03E0C2A080B91F12C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:2e:59:3e:2d:5d:56:96:7f:9d:4c:02:b3:
                    1a:74:25:4c:e7:b6:dc:97:e2:98:47:7a:6b:59:be:
                    5c:7b:6d:e2:1e:e7:b9:55:1f:b1:25:47:73:df:9e:
                    dd:32:27:aa:95:5e:6c:e7:c6:66:54:58:37:eb:d2:
                    6b:6e:c5:f1:e4:35:ab:6c:90:8b:08:24:7f:73:b0:
                    98:1e:6a:ee:62:5a:22:e8:d6:c1:ab:27:2e:c2:02:
                    8f:72:af:67:09:c0:22:1f:07:82:fa:b6:db:49:2e:
                    52:b9:f8:dd:d8:96:d0:d5:e4:11:66:6c:ae:33:52:
                    5b:1a:60:4e:8e:b5:fc:78:ea:22:8e:75:6f:5d:42:
                    03:77:4d:7d:db:f6:05:be:8c:9c:50:38:46:49:3f:
                    47:dd:50:c5:28:9e:ea:ca:b5:b4:9f:41:4c:1e:7f:
                    34:66:49:3f:c2:da:9c:13:cd:24:f1:92:73:6b:6d:
                    72:a0:59:e8:72:be:99:b1:5a:88:23:0b:63:74:8e:
                    e1:1c:6e:36:60:dc:71:f9:56:d0:04:3b:1c:49:af:
                    96:05:65:f9:af:14:7f:33:b8:a1:d9:ac:6e:a9:22:
                    d9:75:6a:ec:36:d8:98:1c:24:54:a1:18:6e:b2:ee:
                    62:89:c5:9c:b8:36:de:2d:8c:57:0e:cc:98:a3:b0:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A3:A6:90:F8:E6:A6:7B:79:8E:BF:03:E0:C2:A0:80:B9:1F:12:C5
            X509v3 Authority Key Identifier:
                keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/eaOmkPjmpnt5jr8D4MKggLkfEsU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:f9:8b:e3:17:47:6d:98:cc:b0:a0:66:ea:21:45:9d:e0:ce:
         a6:5b:da:f1:78:58:c4:11:c4:da:d6:62:66:c3:91:5c:80:6f:
         a3:ac:02:1b:65:f3:32:bb:cc:1f:48:33:cb:27:e8:4a:12:33:
         32:e0:02:17:94:57:ad:2a:4e:af:89:36:a6:17:b4:be:83:fc:
         f9:ba:67:59:fe:4b:64:20:f7:10:98:ad:a9:a9:1c:9b:7f:28:
         75:d2:26:ee:66:a1:c6:0c:7c:23:ab:5d:84:32:37:2e:d5:c4:
         e7:dc:cb:29:ca:a9:ae:d1:52:1e:b4:a5:58:60:cf:66:38:80:
         29:d3:8f:2a:c0:83:56:54:dc:14:49:f9:73:e4:a7:5e:72:de:
         bb:3b:d5:28:b8:d8:c3:9b:88:80:7c:2c:1f:7d:cb:f3:23:d1:
         e7:0d:a4:45:76:71:9e:ac:50:91:af:a3:e7:85:95:6d:b0:f1:
         29:e2:4b:a3:1d:52:7c:dc:c0:30:95:d9:4c:13:ea:62:89:c0:
         da:b1:95:fa:58:1c:89:74:c4:d4:d8:f6:c2:5e:ec:0a:3a:d9:
         1f:5d:cf:c2:d8:7a:d2:ab:be:db:06:33:14:03:2e:14:03:2e:
         12:27:3c:58:14:85:7f:69:82:5e:6b:47:0f:40:b1:5c:68:9a:
         0b:b7:c9:dc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDoAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDM5
QTAyQUUxNTA4NjJEMTVGQjcyN0M1MTFCMTA0RDYzRUZCNDY4NjAeFw0yMTAyMDcx
MzE2MThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDc5QTNBNjkwRjhFNkE2
N0I3OThFQkYwM0UwQzJBMDgwQjkxRjEyQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkbS5ZPi1dVpZ/nUwCsxp0JUznttyX4phHemtZvlx7beIe57lV
H7ElR3Pfnt0yJ6qVXmznxmZUWDfr0mtuxfHkNatskIsIJH9zsJgeau5iWiLo1sGr
Jy7CAo9yr2cJwCIfB4L6tttJLlK5+N3YltDV5BFmbK4zUlsaYE6Otfx46iKOdW9d
QgN3TX3b9gW+jJxQOEZJP0fdUMUonurKtbSfQUwefzRmST/C2pwTzSTxknNrbXKg
WehyvpmxWogjC2N0juEcbjZg3HH5VtAEOxxJr5YFZfmvFH8zuKHZrG6pItl1auw2
2JgcJFShGG6y7mKJxZy4Nt4tjFcOzJijsFOBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeaOmkPjmpnt5jr8D4MKggLkfEsUwHwYDVR0jBBgwFoAU05oCrhUIYtFftyfF
EbEE1j77RoYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdBQ09N
LzA1b0NyaFVJWXRGZnR5ZkZFYkVFMWo3N1JvWS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvMDVvQ3JoVUlZdEZmdHlmRkViRUUxajc3Um9ZLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFdBQ09NL2VhT21rUGptcG50NWpyOEQ0
TUtnZ0xrZkVzVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn
fJYwDQYJKoZIhvcNAQELBQADggEBALD5i+MXR22YzLCgZuohRZ3gzqZb2vF4WMQR
xNrWYmbDkVyAb6OsAhtl8zK7zB9IM8sn6EoSMzLgAheUV60qTq+JNqYXtL6D/Pm6
Z1n+S2Qg9xCYrampHJt/KHXSJu5mocYMfCOrXYQyNy7VxOfcyynKqa7RUh60pVhg
z2Y4gCnTjyrAg1ZU3BRJ+XPkp15y3rs71Si42MObiIB8LB99y/Mj0ecNpEV2cZ6s
UJGvo+eFlW2w8SniS6MdUnzcwDCV2UwT6mKJwNqxlfpYHIl0xNTY9sJe7Ao62R9d
z8LYetKrvtsGMxQDLhQDLhInPFgUhX9pgl5rRw9AsVxomgu3ydw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org