Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/KfwWu_bZv6jcFPijUVmfvRgWPK4.roa
File:                     KfwWu_bZv6jcFPijUVmfvRgWPK4.roa (raw, json)
Hash identifier:          ImKTsLV3CVmS9ztMkwxC6jKS6Rd/AqZlt5mj00Bg+EU=
Subject key identifier:   29:FC:16:BB:F6:D9:BF:A8:DC:14:F8:A3:51:59:9F:BD:18:16:3C:AE
Certificate issuer:       /CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
Certificate serial:       0772
Authority key identifier: 6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/KfwWu_bZv6jcFPijUVmfvRgWPK4.roa
Signing time:             Tue 29 Sep 2020 10:00:52 +0000
ROA not before:           Tue 29 Sep 2020 10:00:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18179
IP address blocks:        103.20.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6C5CBFCECBA7987951112DAA187FFCB6204E26
        Validity
            Not Before: Sep 29 10:00:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=29FC16BBF6D9BFA8DC14F8A351599FBD18163CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:dc:d2:22:86:16:cc:23:db:0d:f0:20:77:
                    39:d1:35:20:a2:2f:60:8e:f3:12:72:04:bf:2b:d2:
                    aa:65:93:fe:94:34:6e:a5:ac:fa:74:9b:0d:37:0e:
                    6a:7a:2e:63:64:e2:e5:92:a9:e4:d6:14:14:b9:c2:
                    2f:19:48:cc:dd:e3:0e:1c:c3:e5:92:46:47:32:3d:
                    0e:f2:b3:92:6b:46:82:58:12:74:de:d9:28:2b:e3:
                    2a:32:a0:90:de:d4:89:a0:dc:99:ac:1f:c1:8e:ea:
                    a9:c9:c8:6f:84:7b:67:70:ff:fc:11:12:42:59:d1:
                    1a:7b:2e:66:8b:5f:da:e0:f4:c4:02:44:ac:0f:f1:
                    79:e7:91:e2:4a:b7:bd:d1:50:c9:7e:12:c3:ba:7f:
                    f0:07:cb:fb:d8:3d:d2:9b:64:c7:86:b2:61:63:93:
                    75:b8:d3:29:0a:d2:4b:df:b2:0e:a7:7b:e6:74:48:
                    32:b9:06:4c:a2:a5:fe:aa:c8:94:04:c8:34:39:9e:
                    a4:de:06:6a:a0:f8:53:c9:9f:b8:ff:88:25:52:67:
                    4a:ba:48:f3:94:ae:22:95:3d:10:5c:c6:d4:64:14:
                    c1:b1:0e:6e:2f:d3:58:42:2e:4f:e2:b5:c0:51:4e:
                    eb:d0:e5:d5:91:63:db:88:31:bb:bb:ea:31:c3:9c:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:16:BB:F6:D9:BF:A8:DC:14:F8:A3:51:59:9F:BD:18:16:3C:AE
            X509v3 Authority Key Identifier:
                keyid:6D:6C:5C:BF:CE:CB:A7:98:79:51:11:2D:AA:18:7F:FC:B6:20:4E:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/bWxcv87Lp5h5UREtqhh__LYgTiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bWxcv87Lp5h5UREtqhh__LYgTiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MITACMDC/KfwWu_bZv6jcFPijUVmfvRgWPK4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:84:82:90:c2:e7:fc:b4:7b:1a:c2:71:3e:81:32:fb:3d:
         a1:24:8c:22:0c:46:9d:97:46:9e:cc:bd:ec:f9:25:75:6f:1a:
         be:80:f4:5b:a2:b3:29:7f:9a:9c:9d:b0:47:7d:72:e1:51:cd:
         e7:d6:18:f6:83:b4:3d:03:92:cc:0a:5f:29:d7:de:c1:23:85:
         39:a6:14:88:b1:14:34:b6:77:75:27:f2:8e:ed:27:fe:31:8b:
         cb:ec:18:04:48:2a:8c:ce:64:b6:52:3e:74:d2:71:74:b8:f5:
         2b:f3:7d:db:aa:f0:28:f7:30:07:1d:7c:62:86:80:97:e2:36:
         c4:c6:f9:95:ff:d7:23:1d:2d:04:b7:16:59:c0:07:ed:5c:28:
         3b:45:8c:96:f2:e6:5c:bd:2e:e2:7b:b9:40:5e:e6:a1:e5:6e:
         69:fd:2d:19:be:c6:4b:5b:d6:d9:0a:f4:de:1c:43:b4:1d:63:
         6a:0e:d0:43:9a:2f:5c:23:96:d5:f1:c6:02:a9:06:ff:f8:13:
         6e:8d:a6:81:62:d5:f8:ee:6f:73:1c:51:5a:c1:9b:a4:cd:26:
         3b:12:fb:6b:04:39:2a:56:5b:84:a5:bf:78:d1:2d:43:1e:a5:
         e0:04:85:5a:dd:59:c9:9b:92:9a:4d:b2:8d:fc:b2:0c:f1:07:
         ca:cc:70:a1
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkQ2
QzVDQkZDRUNCQTc5ODc5NTExMTJEQUExODdGRkNCNjIwNEUyNjAeFw0yMDA5Mjkx
MDAwNTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI5RkMxNkJCRjZEOUJG
QThEQzE0RjhBMzUxNTk5RkJEMTgxNjNDQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIJtzSIoYWzCPbDfAgdznRNSCiL2CO8xJyBL8r0qplk/6UNG6l
rPp0mw03Dmp6LmNk4uWSqeTWFBS5wi8ZSMzd4w4cw+WSRkcyPQ7ys5JrRoJYEnTe
2Sgr4yoyoJDe1Img3JmsH8GO6qnJyG+Ee2dw//wREkJZ0Rp7LmaLX9rg9MQCRKwP
8XnnkeJKt73RUMl+EsO6f/AHy/vYPdKbZMeGsmFjk3W40ykK0kvfsg6ne+Z0SDK5
Bkyipf6qyJQEyDQ5nqTeBmqg+FPJn7j/iCVSZ0q6SPOUriKVPRBcxtRkFMGxDm4v
01hCLk/itcBRTuvQ5dWRY9uIMbu76jHDnPyZAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUKfwWu/bZv6jcFPijUVmfvRgWPK4wHwYDVR0jBBgwFoAUbWxcv87Lp5h5UREt
qhh//LYgTiYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlUQUNN
REMvYld4Y3Y4N0xwNWg1VVJFdHFoaF9fTFlnVGlZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9iV3hjdjg3THA1aDVVUkV0cWhoX19MWWdUaVkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSVRBQ01EQy9LZndXdV9iWnY2amNG
UGlqVVZtZnZSZ1dQSzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZxSwMA0GCSqGSIb3DQEBCwUAA4IBAQCY1oSCkMLn/LR7GsJxPoEy+z2hJIwi
DEadl0aezL3s+SV1bxq+gPRborMpf5qcnbBHfXLhUc3n1hj2g7Q9A5LMCl8p197B
I4U5phSIsRQ0tnd1J/KO7Sf+MYvL7BgESCqMzmS2Uj500nF0uPUr833bqvAo9zAH
HXxihoCX4jbExvmV/9cjHS0EtxZZwAftXCg7RYyW8uZcvS7ie7lAXuah5W5p/S0Z
vsZLW9bZCvTeHEO0HWNqDtBDmi9cI5bV8cYCqQb/+BNujaaBYtX47m9zHFFawZuk
zSY7EvtrBDkqVluEpb940S1DHqXgBIVa3VnJm5KaTbKN/LIM8QfKzHCh
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org