Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/E9YlCq5xslO-UItgj07FOdd-K7Y.roa
File:                     E9YlCq5xslO-UItgj07FOdd-K7Y.roa (raw, json)
Hash identifier:          ZUYitUH1ivTgaZ+k9CquHu3doUnJwYA1h/MdBmAeKpY=
Subject key identifier:   13:D6:25:0A:AE:71:B2:53:BE:50:8B:60:8F:4E:C5:39:D7:7E:2B:B6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       09FF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E9YlCq5xslO-UItgj07FOdd-K7Y.roa
Signing time:             Fri 13 Nov 2020 02:07:07 +0000
ROA not before:           Fri 13 Nov 2020 02:07:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        42.0.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2559 (0x9ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Nov 13 02:07:07 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=13D6250AAE71B253BE508B608F4EC539D77E2BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:23:4b:05:9e:e2:c1:a8:73:d0:4b:eb:72:
                    8e:03:5b:51:7d:cf:15:e1:19:66:1c:42:6c:53:d4:
                    f5:d6:74:76:d9:3d:02:72:bf:4a:c8:7c:4e:f1:98:
                    95:86:28:3c:50:a2:b8:44:1a:41:ec:99:ab:61:df:
                    65:86:63:23:3a:85:b9:3b:b9:31:5a:a3:1d:a1:d3:
                    5a:bc:ff:6d:18:e0:c0:a1:08:e6:80:fd:21:af:e5:
                    99:2d:8b:e6:25:c9:05:dd:9f:bc:d6:b4:a5:3b:c7:
                    d8:6e:be:7d:c9:4b:cc:2d:8a:6a:bd:b1:59:1b:b9:
                    74:79:d6:a0:39:30:b9:03:b0:47:79:16:29:f3:28:
                    81:0c:5e:b6:40:d2:fc:f0:87:19:9a:de:2f:f6:77:
                    41:a0:be:ff:dd:c7:bf:c4:bc:ab:b3:ad:6c:c6:4d:
                    5d:28:1a:5a:7e:bc:9b:ef:b1:b4:84:56:e4:26:c2:
                    52:3f:cd:0b:3d:58:05:55:29:9c:23:d6:d8:7f:09:
                    01:09:d5:79:52:4f:28:62:23:2c:22:bf:71:93:cb:
                    a3:bc:58:e8:95:87:c5:84:6d:43:8c:4d:e1:3e:55:
                    81:da:a0:cf:fb:b2:f6:df:3a:43:09:ce:e1:86:6f:
                    75:0c:ef:f6:05:60:8b:ba:d9:8f:72:95:86:e6:fa:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D6:25:0A:AE:71:B2:53:BE:50:8B:60:8F:4E:C5:39:D7:7E:2B:B6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E9YlCq5xslO-UItgj07FOdd-K7Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.0.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         69:2d:0d:e2:9e:8b:31:72:78:02:4c:49:19:b4:1a:bc:e7:bb:
         e5:fc:f4:b9:ea:e8:db:82:e6:84:6f:c8:40:31:56:91:1b:28:
         af:49:ef:fc:58:72:b8:00:d7:19:58:2f:f3:86:b2:35:05:85:
         b1:56:42:c5:9c:f3:bb:09:53:e4:d6:c0:cd:1c:dd:a1:e0:14:
         0f:0e:f1:f0:ff:c2:b8:2c:dc:b1:46:41:67:6c:84:35:92:82:
         02:e9:33:5c:76:89:90:a7:9d:d3:21:f6:81:26:e4:ba:2c:f5:
         b8:29:72:14:45:03:e2:9d:5e:b3:ed:f9:66:4c:c7:c5:36:3e:
         3e:45:99:ad:0f:d0:48:37:47:1d:28:43:87:00:89:36:22:4d:
         14:eb:67:4a:1a:ad:a1:bf:fe:1d:2b:91:fc:9a:20:49:74:03:
         5a:2c:d3:e2:50:18:4e:7e:a9:b4:52:ca:50:68:d5:ab:a1:83:
         36:81:b7:d5:d8:50:59:51:7a:b6:4c:2b:70:a5:79:a1:ce:a9:
         cb:e0:a9:65:dc:5f:38:c8:a0:47:e9:48:bb:23:a7:4d:3f:58:
         bc:38:f3:8a:fa:61:06:c0:20:88:92:34:c3:92:61:5f:24:b5:
         3e:8f:5a:94:2a:a3:61:62:9f:3e:81:e3:d0:62:0d:e7:c7:74:
         83:48:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org