Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/OFZSptPA9J_tEwhtsIaT-YqNKUg.roa
File:                     OFZSptPA9J_tEwhtsIaT-YqNKUg.roa (raw, json)
Hash identifier:          tePWEy7ulH21MWimN6rmzZrUG5082DlY2mU+iPOjKzA=
Subject key identifier:   38:56:52:A6:D3:C0:F4:9F:ED:13:08:6D:B0:86:93:F9:8A:8D:29:48
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0BB8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/OFZSptPA9J_tEwhtsIaT-YqNKUg.roa
Signing time:             Sun 07 Feb 2021 06:31:33 +0000
ROA not before:           Sun 07 Feb 2021 06:31:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        113.196.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3000 (0xbb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 06:31:33 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=385652A6D3C0F49FED13086DB08693F98A8D2948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:6f:e6:4e:9e:03:9c:04:39:6f:6d:d0:6a:
                    2f:bb:9a:2a:76:92:74:d4:f7:3e:f0:d6:da:51:0b:
                    ee:b9:ff:f6:7f:01:97:f6:db:55:50:18:04:12:8f:
                    b8:4a:1d:e7:3f:ab:7a:55:94:b9:6c:73:8c:d2:da:
                    0f:db:a3:62:6c:30:cd:20:48:e5:62:0b:59:1c:65:
                    10:49:1a:df:4d:2e:b9:f9:6a:4c:84:57:b3:51:5b:
                    e6:c1:9e:98:16:c0:48:b3:56:20:ac:ac:d8:a5:30:
                    7a:c0:87:ab:64:08:30:33:63:5a:e7:a1:65:17:ec:
                    0a:b8:33:b0:7f:e4:88:29:9e:0a:f1:e0:ea:be:69:
                    be:ba:56:67:c6:83:0c:2a:87:07:ff:7d:d0:50:10:
                    07:ea:30:2d:48:94:45:4a:8c:ed:e1:e8:b1:27:8e:
                    0a:bb:fa:92:aa:0d:f4:2d:b2:97:a8:a9:ab:90:06:
                    2b:7c:7a:3d:6e:a9:fd:73:66:98:27:ab:a6:54:ff:
                    24:d3:7f:62:1a:eb:c7:e9:14:63:41:d7:90:c6:90:
                    11:3c:2b:5a:33:21:02:9f:7a:c2:c2:c4:12:29:57:
                    1b:83:37:ca:ac:58:ba:ee:eb:fe:38:be:93:d5:c4:
                    60:6d:06:c2:39:a8:5d:2f:45:6b:43:46:83:bc:e1:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:52:A6:D3:C0:F4:9F:ED:13:08:6D:B0:86:93:F9:8A:8D:29:48
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/OFZSptPA9J_tEwhtsIaT-YqNKUg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:66:cc:32:9b:95:8f:01:96:44:1e:c9:f5:a4:67:a6:03:
         24:3b:a6:e2:86:4b:9b:71:4b:f5:c3:04:ba:26:e8:2b:f7:14:
         09:8a:2f:2c:ee:fd:c0:8c:72:7f:b6:d8:a3:a9:29:d4:e6:41:
         7f:2a:82:19:1a:05:a4:7c:d0:36:ab:52:58:b7:e1:25:c3:5a:
         01:83:c8:f4:24:51:5e:86:09:93:f0:d4:39:ab:a2:fd:6a:b2:
         35:2b:83:fd:d8:d3:cc:f9:95:fd:7a:14:2c:09:ef:90:e0:87:
         9e:7d:bb:4d:7a:bc:71:d2:4e:75:d6:d8:80:66:33:95:2a:0f:
         cf:8b:74:80:15:93:f6:25:1f:4e:7b:b6:d7:44:48:2c:c1:06:
         87:d0:4f:b2:1c:ad:8b:50:cf:8d:f3:e6:f4:1e:53:7f:c4:c3:
         87:b7:3e:18:78:02:70:04:a1:c2:5c:6e:14:ca:b8:e1:5e:03:
         8b:3c:9a:3c:ff:4f:db:28:f8:14:59:1c:3c:80:33:ed:c1:da:
         d3:e5:85:13:41:c2:12:f1:ea:19:35:8f:af:42:d2:ce:9c:a5:
         e9:fa:f0:c9:9b:29:7c:b5:b2:84:8e:63:e1:13:33:f2:65:98:
         dd:03:f8:40:11:ab:d5:3f:ea:fd:2b:8d:6a:65:40:c8:99:00:
         31:57:1b:f2
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcw
NjMxMzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM4NTY1MkE2RDNDMEY0
OUZFRDEzMDg2REIwODY5M0Y5OEE4RDI5NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1XG/mTp4DnAQ5b23Qai+7mip2knTU9z7w1tpRC+65//Z/AZf2
21VQGAQSj7hKHec/q3pVlLlsc4zS2g/bo2JsMM0gSOViC1kcZRBJGt9NLrn5akyE
V7NRW+bBnpgWwEizViCsrNilMHrAh6tkCDAzY1rnoWUX7Aq4M7B/5Igpngrx4Oq+
ab66VmfGgwwqhwf/fdBQEAfqMC1IlEVKjO3h6LEnjgq7+pKqDfQtspeoqauQBit8
ej1uqf1zZpgnq6ZU/yTTf2Ia68fpFGNB15DGkBE8K1ozIQKfesLCxBIpVxuDN8qs
WLru6/44vpPVxGBtBsI5qF0vRWtDRoO84dQVAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUOFZSptPA9J/tEwhtsIaT+YqNKUgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvT0ZaU3B0UEE5Sl90RXdodHNJYVQt
WXFOS1VnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHHEMA0G
CSqGSIb3DQEBCwUAA4IBAQCe82bMMpuVjwGWRB7J9aRnpgMkO6bihkubcUv1wwS6
Jugr9xQJii8s7v3AjHJ/ttijqSnU5kF/KoIZGgWkfNA2q1JYt+Elw1oBg8j0JFFe
hgmT8NQ5q6L9arI1K4P92NPM+ZX9ehQsCe+Q4IeefbtNerxx0k511tiAZjOVKg/P
i3SAFZP2JR9Oe7bXREgswQaH0E+yHK2LUM+N8+b0HlN/xMOHtz4YeAJwBKHCXG4U
yrjhXgOLPJo8/0/bKPgUWRw8gDPtwdrT5YUTQcIS8eoZNY+vQtLOnKXp+vDJmyl8
tbKEjmPhEzPyZZjdA/hAEavVP+r9K41qZUDImQAxVxvy
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org