Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/-mT9Ioak9McMPXc_geeEADCa28Q.roa
File:                     -mT9Ioak9McMPXc_geeEADCa28Q.roa (raw, json)
Hash identifier:          7RVFIOFOIAjiCBltQaN4L7cPOCN2c8Ej/LNOJqf2PUY=
Subject key identifier:   FA:64:FD:22:86:A4:F4:C7:0C:3D:77:3F:81:E7:84:00:30:9A:DB:C4
Certificate issuer:       /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial:       09FC
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/-mT9Ioak9McMPXc_geeEADCa28Q.roa
Signing time:             Wed 29 Sep 2021 02:40:39 +0000
ROA not before:           Wed 29 Sep 2021 02:40:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9416
IP address blocks:        119.14.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556 (0x9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
        Validity
            Not Before: Sep 29 02:40:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FA64FD2286A4F4C70C3D773F81E78400309ADBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:e3:65:8e:8f:0e:5d:21:5a:d7:e8:fc:24:
                    54:85:48:0a:c5:47:5c:20:e1:e6:f6:ee:ca:16:42:
                    50:0b:bc:03:9b:9d:6a:7b:39:f4:ec:a7:43:da:23:
                    9f:69:ae:55:85:34:2b:3f:78:cc:56:91:5a:a2:cc:
                    9b:78:e4:04:3f:1a:bb:d7:73:4b:5b:f1:96:5a:9a:
                    59:12:f8:cd:8f:7f:53:0f:e8:ee:c7:fd:62:91:aa:
                    25:fc:24:36:59:e1:e1:2b:10:6a:54:9b:e7:8f:6f:
                    41:a1:8e:af:4b:da:82:04:9e:8b:9f:64:cd:e2:8a:
                    4a:bc:f0:bc:fa:b5:64:ab:2e:b6:ab:1f:67:96:f2:
                    b4:fb:fe:eb:5b:92:34:4c:f8:31:9a:24:91:09:04:
                    81:be:d6:cc:11:e8:48:48:53:18:8c:16:a6:28:16:
                    e4:b8:de:f4:db:57:e6:d3:16:58:6f:b1:08:9f:11:
                    e1:d7:bf:ac:20:f6:4a:ff:ee:82:9e:19:71:43:2d:
                    73:79:79:c2:e2:49:5f:d4:8a:3e:ef:7f:02:96:e6:
                    97:d8:d0:fe:ae:f7:25:5c:b1:4e:91:26:ad:4d:fa:
                    21:54:4e:6c:28:eb:71:12:77:c5:07:8d:18:29:bb:
                    9f:94:b6:15:b2:29:d6:5c:07:5e:54:f4:90:ba:bf:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:64:FD:22:86:A4:F4:C7:0C:3D:77:3F:81:E7:84:00:30:9A:DB:C4
            X509v3 Authority Key Identifier:
                keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/-mT9Ioak9McMPXc_geeEADCa28Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.14.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         29:93:be:38:25:e3:fb:3e:fb:9b:1f:b8:ac:4e:2e:3b:79:44:
         89:1d:8f:9e:2e:16:e9:19:fa:41:69:75:0a:2b:ca:de:9a:a1:
         25:7c:6c:52:88:7a:b7:80:d0:82:21:61:9c:ee:51:07:7e:b2:
         e7:de:af:3b:51:82:f5:17:f9:54:3a:60:e9:9a:f4:09:f7:bd:
         19:bf:49:a5:9c:93:f1:22:89:50:77:5d:ad:c7:72:fa:e2:90:
         bf:ab:1c:f1:9b:5e:f0:a8:20:a6:04:f7:64:94:7d:a3:2a:de:
         15:86:b8:ce:57:0a:15:41:8b:d3:84:7a:2c:ef:5c:c6:61:68:
         5a:38:cb:75:58:18:8d:cb:21:67:a1:44:42:ac:58:04:46:f6:
         b7:89:2d:06:b8:5b:08:76:c5:31:e2:7c:95:24:34:e3:81:41:
         bb:e8:57:df:7e:78:4c:da:de:ee:fd:e6:df:74:62:82:d2:7a:
         d6:4e:83:78:4f:2a:e3:a6:18:41:5b:9c:aa:56:e5:74:ee:c8:
         4d:50:11:28:4e:90:53:9d:b6:f7:fa:bc:d4:98:d2:2f:66:88:
         7f:97:3b:d4:5d:bc:ee:c9:e5:01:5b:f4:92:a1:4d:f2:f1:2c:
         98:56:fc:01:04:05:4b:3e:0f:62:1c:bb:33:4c:80:78:4d:2c:
         16:9c:12:38
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5
QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yMTA5Mjkw
MjQwMzlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEZBNjRGRDIyODZBNEY0
QzcwQzNENzczRjgxRTc4NDAwMzA5QURCQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCkuNljo8OXSFa1+j8JFSFSArFR1wg4eb27soWQlALvAObnWp7
OfTsp0PaI59prlWFNCs/eMxWkVqizJt45AQ/GrvXc0tb8ZZamlkS+M2Pf1MP6O7H
/WKRqiX8JDZZ4eErEGpUm+ePb0Ghjq9L2oIEnoufZM3iikq88Lz6tWSrLrarH2eW
8rT7/utbkjRM+DGaJJEJBIG+1swR6EhIUxiMFqYoFuS43vTbV+bTFlhvsQifEeHX
v6wg9kr/7oKeGXFDLXN5ecLiSV/Uij7vfwKW5pfY0P6u9yVcsU6RJq1N+iFUTmwo
63ESd8UHjRgpu5+UthWyKdZcB15U9JC6v3bpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+mT9Ioak9McMPXc/geeEADCa28QwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM
T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H
L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HLy1tVDlJb2FrOU1jTVBYY19n
ZWVFQURDYTI4US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3
DgAwDQYJKoZIhvcNAQELBQADggEBACmTvjgl4/s++5sfuKxOLjt5RIkdj54uFukZ
+kFpdQoryt6aoSV8bFKIereA0IIhYZzuUQd+suferztRgvUX+VQ6YOma9An3vRm/
SaWck/EiiVB3Xa3HcvrikL+rHPGbXvCoIKYE92SUfaMq3hWGuM5XChVBi9OEeizv
XMZhaFo4y3VYGI3LIWehREKsWARG9reJLQa4Wwh2xTHifJUkNOOBQbvoV99+eEza
3u795t90YoLSetZOg3hPKuOmGEFbnKpW5XTuyE1QEShOkFOdtvf6vNSY0i9miH+X
O9RdvO7J5QFb9JKhTfLxLJhW/AEEBUs+D2IcuzNMgHhNLBacEjg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:38 2024 by rpki-client on console-fra.rpki-client.org