Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xk6wTCDGw60bpo5BCCBS354ch-8.roa
File:                     Xk6wTCDGw60bpo5BCCBS354ch-8.roa (raw, json)
Hash identifier:          OkZPLphCknyVGlPg2rn5Y6/ueLepSXO6W+VrQ3KNvcs=
Subject key identifier:   5E:4E:B0:4C:20:C6:C3:AD:1B:A6:8E:41:08:20:52:DF:9E:1C:87:EF
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0C75
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xk6wTCDGw60bpo5BCCBS354ch-8.roa
Signing time:             Sun 07 Feb 2021 11:43:29 +0000
ROA not before:           Sun 07 Feb 2021 11:43:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131584
IP address blocks:        106.105.176.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3189 (0xc75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:43:29 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5E4EB04C20C6C3AD1BA68E41082052DF9E1C87EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:69:0e:ef:6f:3c:4a:e2:d1:33:5a:74:71:
                    8e:f9:5b:fc:63:87:f1:d6:cb:ca:c7:42:5c:ac:19:
                    22:8f:f2:0c:06:74:0b:81:19:31:d8:40:01:3a:51:
                    c3:ea:ee:b4:dc:92:72:cf:18:35:ab:a7:88:12:e5:
                    8b:49:4e:9b:40:2a:eb:d2:d2:9f:58:47:83:64:35:
                    f1:a2:01:c7:80:0d:37:d0:84:da:ee:83:f2:68:c5:
                    c8:c7:ed:4b:c1:87:ec:2b:84:49:ea:32:0d:75:20:
                    2f:56:5e:fa:db:d3:a1:57:e5:35:67:5d:26:45:cb:
                    cb:51:ad:77:ba:58:20:e0:b0:84:b0:7d:2a:c8:25:
                    84:a9:08:9b:10:de:41:55:33:84:c3:88:c4:60:07:
                    3e:30:34:94:c6:b3:fb:28:c5:45:39:99:d3:cc:db:
                    30:df:9f:d2:b4:59:14:98:ec:06:35:66:92:94:9d:
                    81:08:b5:e1:f9:65:f5:2b:ca:86:d0:ab:4c:2b:9b:
                    95:32:12:92:80:ef:cf:c9:7f:42:2a:ce:1a:aa:77:
                    00:2b:25:a1:bf:92:e7:1f:5a:d7:22:38:51:26:e1:
                    9e:a2:7f:70:10:16:9a:1d:f0:95:cb:5c:b8:e9:71:
                    64:a1:dd:c2:82:e6:9f:2c:64:bb:67:d2:cd:5d:ed:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4E:B0:4C:20:C6:C3:AD:1B:A6:8E:41:08:20:52:DF:9E:1C:87:EF
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xk6wTCDGw60bpo5BCCBS354ch-8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:52:39:6a:34:22:c5:c4:6f:99:1c:ee:33:c9:8a:69:27:7a:
         c6:d8:cf:b5:68:0d:88:4b:c3:d2:43:3a:28:1a:bd:e9:df:f7:
         3b:2c:1f:18:e8:7b:d4:e8:45:e8:03:32:12:e8:3a:76:f3:4a:
         5a:aa:2f:d6:a3:22:15:ee:d1:05:f6:f5:6f:bc:77:c5:8a:16:
         b9:f7:cc:3e:55:91:2c:7f:28:64:19:94:f4:a5:77:2c:ea:f1:
         e5:96:be:ec:db:8b:7d:47:b2:cd:dd:e4:ec:21:10:ac:33:61:
         2e:30:7e:1b:07:9f:bb:74:ee:c3:58:ba:c9:f4:f5:08:04:b3:
         c2:df:fb:04:e6:4a:d8:8c:d2:11:43:b2:0b:50:20:c0:de:ef:
         00:bf:9e:f5:8d:8c:60:9f:1c:09:af:d3:79:f7:87:f1:2b:65:
         e1:73:72:c6:8d:75:9c:8c:94:47:ff:70:00:04:f4:bd:d4:a5:
         76:f3:f6:b2:f0:aa:0c:d0:7a:44:fb:d4:92:81:91:4f:d3:16:
         a6:b1:bb:29:c0:ff:2a:4b:b0:4e:7e:bb:10:e7:fb:ed:6b:c9:
         c9:9a:33:9a:d2:c5:1c:4b:90:3d:5a:d8:ea:c6:87:65:bf:2a:
         eb:bb:99:2f:5d:48:26:13:61:6e:b3:5b:17:f0:6f:87:54:3d:
         a0:c8:24:fa
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQzMjlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDVFNEVCMDRDMjBDNkMz
QUQxQkE2OEU0MTA4MjA1MkRGOUUxQzg3RUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2ZWkO7288SuLRM1p0cY75W/xjh/HWy8rHQlysGSKP8gwGdAuB
GTHYQAE6UcPq7rTcknLPGDWrp4gS5YtJTptAKuvS0p9YR4NkNfGiAceADTfQhNru
g/JoxcjH7UvBh+wrhEnqMg11IC9WXvrb06FX5TVnXSZFy8tRrXe6WCDgsISwfSrI
JYSpCJsQ3kFVM4TDiMRgBz4wNJTGs/soxUU5mdPM2zDfn9K0WRSY7AY1ZpKUnYEI
teH5ZfUryobQq0wrm5UyEpKA78/Jf0IqzhqqdwArJaG/kucfWtciOFEm4Z6if3AQ
Fpod8JXLXLjpcWSh3cKC5p8sZLtn0s1d7X9ZAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUXk6wTCDGw60bpo5BCCBS354ch+8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWGs2d1RDREd3NjBicG81QkNDQlMz
NTRjaC04LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWppsDAN
BgkqhkiG9w0BAQsFAAOCAQEAyFI5ajQixcRvmRzuM8mKaSd6xtjPtWgNiEvD0kM6
KBq96d/3OywfGOh71OhF6AMyEug6dvNKWqov1qMiFe7RBfb1b7x3xYoWuffMPlWR
LH8oZBmU9KV3LOrx5Za+7NuLfUeyzd3k7CEQrDNhLjB+Gwefu3Tuw1i6yfT1CASz
wt/7BOZK2IzSEUOyC1AgwN7vAL+e9Y2MYJ8cCa/TefeH8Stl4XNyxo11nIyUR/9w
AAT0vdSldvP2svCqDNB6RPvUkoGRT9MWprG7KcD/KkuwTn67EOf77WvJyZozmtLF
HEuQPVrY6saHZb8q67uZL11IJhNhbrNbF/Bvh1Q9oMgk+g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org