Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TL03-TzjQP9vZoyN07cPwaUb-vA.roa
File:                     TL03-TzjQP9vZoyN07cPwaUb-vA.roa (raw, json)
Hash identifier:          qMyeQCNvuHwMhFIpRTXmLNaPfcS2bXiYCv7/gKd2k9k=
Subject key identifier:   4C:BD:37:F9:3C:E3:40:FF:6F:66:8C:8D:D3:B7:0F:C1:A5:1B:FA:F0
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0C7F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TL03-TzjQP9vZoyN07cPwaUb-vA.roa
Signing time:             Sun 07 Feb 2021 11:43:39 +0000
ROA not before:           Sun 07 Feb 2021 11:43:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131584
IP address blocks:        106.105.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3199 (0xc7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:43:39 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4CBD37F93CE340FF6F668C8DD3B70FC1A51BFAF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:9d:ff:b5:65:07:2a:cc:fc:c8:50:60:a2:
                    5b:c4:f8:a0:ec:70:ce:49:14:bc:2a:98:72:d8:d4:
                    27:97:14:b2:87:67:b7:18:1e:7f:ce:4a:e0:43:81:
                    45:5b:19:42:a5:ca:83:bb:e4:4d:b0:91:f6:84:36:
                    74:9f:e7:d6:b9:72:8d:5c:ea:cf:b2:f6:2e:39:17:
                    7b:9c:58:57:78:ff:61:22:27:5b:76:83:6b:3e:83:
                    a3:75:32:d5:15:41:91:01:bb:9b:9e:74:bc:50:a3:
                    8b:c9:1b:0c:6f:20:8a:0e:31:ba:4b:92:5d:28:24:
                    9c:8b:2b:c6:ec:8f:b5:52:fa:05:60:46:d6:d1:26:
                    82:a8:73:4a:cc:75:ba:2b:49:ce:b8:45:49:3b:8d:
                    8f:33:6a:1a:6d:14:0d:e0:63:a9:39:24:85:60:ad:
                    c6:e8:df:ca:6d:1f:45:77:87:57:10:36:23:e5:2d:
                    0a:42:d4:77:e8:3e:a5:48:8d:dd:42:25:c7:b3:eb:
                    df:f5:bf:b9:24:bc:4c:34:a0:22:5d:a9:dc:a5:dc:
                    d8:d2:02:1f:3a:c1:e1:4c:ca:3b:c4:57:c3:14:65:
                    a6:88:ed:b4:4c:f4:e3:c9:37:a6:11:b0:22:01:b6:
                    ed:d5:f7:60:10:22:13:34:8b:d2:7f:61:8b:42:6f:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BD:37:F9:3C:E3:40:FF:6F:66:8C:8D:D3:B7:0F:C1:A5:1B:FA:F0
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TL03-TzjQP9vZoyN07cPwaUb-vA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:85:e2:da:cf:64:dd:9f:40:bd:7a:cc:6d:0b:af:3e:ae:5f:
         1d:af:f5:26:19:a1:a0:9c:d9:8b:05:8d:69:ca:b7:03:dc:5d:
         19:40:b6:61:d5:b1:2b:ba:b7:f3:7b:2c:be:2e:38:0c:21:29:
         95:a2:e8:36:2a:fc:91:3f:78:04:4e:e1:eb:e0:22:79:d2:76:
         7b:7d:93:8b:40:3c:a4:7d:20:aa:27:0c:26:fb:ab:54:14:ed:
         e6:0b:b9:d9:30:3f:b4:fe:47:7d:1e:80:d4:59:f8:f7:cb:82:
         e6:a8:62:fe:d9:48:f5:56:f6:17:bc:7e:9a:38:3c:11:ca:d2:
         72:6f:c8:8d:93:9f:cc:a3:29:c2:52:de:b3:75:e7:83:6c:18:
         cd:16:e4:ff:73:ce:cb:5b:d5:e3:44:1d:86:6a:c6:3c:18:c0:
         0c:76:3e:25:0b:0a:2d:ed:d0:9a:b2:54:3f:6a:55:81:6f:a7:
         4c:8c:05:cf:8e:66:ee:40:69:eb:d9:42:2c:7a:67:a8:ab:ac:
         dc:f4:88:c7:ba:31:9b:bc:3b:62:13:b8:62:66:bb:d5:52:fb:
         8b:79:9b:23:ae:ac:1d:62:d5:72:78:bd:6c:0d:e2:d7:12:9c:
         e5:c3:d6:b5:43:e9:e2:cc:c0:0d:c3:66:a0:06:c2:ac:d2:a0:
         86:60:65:b0
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQzMzlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRDQkQzN0Y5M0NFMzQw
RkY2RjY2OEM4REQzQjcwRkMxQTUxQkZBRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwFp3/tWUHKsz8yFBgolvE+KDscM5JFLwqmHLY1CeXFLKHZ7cY
Hn/OSuBDgUVbGUKlyoO75E2wkfaENnSf59a5co1c6s+y9i45F3ucWFd4/2EiJ1t2
g2s+g6N1MtUVQZEBu5uedLxQo4vJGwxvIIoOMbpLkl0oJJyLK8bsj7VS+gVgRtbR
JoKoc0rMdborSc64RUk7jY8zahptFA3gY6k5JIVgrcbo38ptH0V3h1cQNiPlLQpC
1HfoPqVIjd1CJcez69/1v7kkvEw0oCJdqdyl3NjSAh86weFMyjvEV8MUZaaI7bRM
9OPJN6YRsCIBtu3V92AQIhM0i9J/YYtCb3hXAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUTL03+TzjQP9vZoyN07cPwaUb+vAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVEwwMy1UempRUDl2Wm95TjA3Y1B3
YVViLXZBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpptjAN
BgkqhkiG9w0BAQsFAAOCAQEAhoXi2s9k3Z9AvXrMbQuvPq5fHa/1JhmhoJzZiwWN
acq3A9xdGUC2YdWxK7q383ssvi44DCEplaLoNir8kT94BE7h6+AiedJ2e32Ti0A8
pH0gqicMJvurVBTt5gu52TA/tP5HfR6A1Fn498uC5qhi/tlI9Vb2F7x+mjg8EcrS
cm/IjZOfzKMpwlLes3Xng2wYzRbk/3POy1vV40QdhmrGPBjADHY+JQsKLe3QmrJU
P2pVgW+nTIwFz45m7kBp69lCLHpnqKus3PSIx7oxm7w7YhO4Yma71VL7i3mbI66s
HWLVcni9bA3i1xKc5cPWtUPp4szADcNmoAbCrNKghmBlsA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org