Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vaRRxgwbLDsBqGreNJKE0gzSbJU.roa
File:                     vaRRxgwbLDsBqGreNJKE0gzSbJU.roa (raw, json)
Hash identifier:          CaIJQLjWFSBaC55w4cJaj7Zw0tfKpxlYXgu14Sjmr5s=
Subject key identifier:   BD:A4:51:C6:0C:1B:2C:3B:01:A8:6A:DE:34:92:84:D2:0C:D2:6C:95
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0CA7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vaRRxgwbLDsBqGreNJKE0gzSbJU.roa
Signing time:             Sun 07 Feb 2021 11:44:26 +0000
ROA not before:           Sun 07 Feb 2021 11:44:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18049
IP address blocks:        175.183.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3239 (0xca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb  7 11:44:26 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BDA451C60C1B2C3B01A86ADE349284D20CD26C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:9c:b7:27:8e:df:bb:18:b2:ee:4a:dd:6b:
                    a2:6d:0f:3b:4f:55:2f:7d:e4:e7:c7:34:15:94:13:
                    2a:85:42:b8:c2:e6:ef:a7:f2:8e:e8:b8:fa:57:c1:
                    cd:fe:f5:d5:88:2e:6a:2b:6f:50:40:23:ac:4f:68:
                    b1:68:fe:0c:c9:6f:c2:f6:ac:12:c9:32:5a:89:16:
                    45:65:6f:12:43:0d:d9:68:08:8d:a0:04:09:e9:b5:
                    98:5b:88:2e:fa:e4:48:38:22:e2:a9:55:95:c1:8f:
                    d9:86:81:d2:e3:cc:3e:67:86:51:7e:9f:c7:1a:06:
                    de:b2:07:f5:a4:b4:ad:18:fb:1a:66:d1:09:c1:65:
                    11:f4:2b:50:77:5b:c5:8b:1d:68:18:f5:24:2f:3a:
                    10:1a:1b:fe:05:0f:59:2b:5a:cf:12:4b:7b:e8:32:
                    17:e7:77:47:96:58:72:62:15:42:ef:c6:0c:9b:cf:
                    68:54:f7:91:37:2f:61:95:0a:8b:eb:6e:a1:78:e5:
                    1c:8b:dc:a3:db:28:ea:e9:2b:ee:26:62:d3:e8:b8:
                    cf:88:15:6f:d2:a9:5b:68:a0:7d:48:51:e8:90:7f:
                    64:23:76:9f:f2:3b:92:33:62:95:07:04:88:49:36:
                    b6:08:d7:a6:bc:ba:7f:61:0d:de:62:fb:bb:1d:6f:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A4:51:C6:0C:1B:2C:3B:01:A8:6A:DE:34:92:84:D2:0C:D2:6C:95
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vaRRxgwbLDsBqGreNJKE0gzSbJU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.183.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:6b:2a:2f:c8:70:98:f3:83:3f:78:ad:13:aa:ae:31:dc:
         f0:25:68:60:27:91:41:bc:ff:a2:50:b7:68:c3:8a:a7:ec:55:
         d0:38:39:b0:7d:36:52:6a:c5:61:93:12:46:93:70:b9:88:0c:
         c8:50:6a:48:91:ea:ee:f6:fb:13:f9:a0:30:27:67:81:05:2e:
         51:be:bb:2c:e0:9a:b6:0e:99:7f:89:6f:0f:c4:2a:75:72:9d:
         6a:67:ef:fe:36:99:7e:b9:9c:eb:df:49:af:a3:ff:6b:db:80:
         d5:5b:8d:82:0f:54:51:d9:39:76:c1:56:d1:f3:9c:59:43:bf:
         a0:43:b9:0d:b2:3b:b4:1d:e1:3d:ff:f0:dc:7e:d8:cb:4f:30:
         3a:99:ca:40:a7:06:38:61:36:b1:e2:63:86:e2:93:d6:d0:71:
         5b:a3:67:3a:dd:2b:6e:ca:e4:36:59:cf:95:5e:d3:16:2d:01:
         b7:dc:3f:c8:dd:a0:c1:2b:ff:99:48:37:d0:b5:ca:ef:22:11:
         93:bb:79:9f:71:14:f4:8c:55:f2:18:98:fd:4e:f6:ca:25:23:
         24:33:73:5d:d1:84:e2:9f:02:26:50:43:5e:ac:3b:1e:c1:be:
         41:c5:36:3a:6d:6b:0d:f2:16:0b:99:8e:7b:1f:d8:ca:9e:9b:
         a5:a9:fc:d7
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ0MjZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJEQTQ1MUM2MEMxQjJD
M0IwMUE4NkFERTM0OTI4NEQyMENEMjZDOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTXJy3J47fuxiy7krda6JtDztPVS995OfHNBWUEyqFQrjC5u+n
8o7ouPpXwc3+9dWILmorb1BAI6xPaLFo/gzJb8L2rBLJMlqJFkVlbxJDDdloCI2g
BAnptZhbiC765Eg4IuKpVZXBj9mGgdLjzD5nhlF+n8caBt6yB/WktK0Y+xpm0QnB
ZRH0K1B3W8WLHWgY9SQvOhAaG/4FD1krWs8SS3voMhfnd0eWWHJiFULvxgybz2hU
95E3L2GVCovrbqF45RyL3KPbKOrpK+4mYtPouM+IFW/SqVtooH1IUeiQf2Qjdp/y
O5IzYpUHBIhJNrYI16a8un9hDd5i+7sdb3xPAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUvaRRxgwbLDsBqGreNJKE0gzSbJUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdmFSUnhnd2JMRHNCcUdyZU5KS0Uw
Z3pTYkpVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBa+3QDAN
BgkqhkiG9w0BAQsFAAOCAQEAsEBrKi/IcJjzgz94rROqrjHc8CVoYCeRQbz/olC3
aMOKp+xV0Dg5sH02UmrFYZMSRpNwuYgMyFBqSJHq7vb7E/mgMCdngQUuUb67LOCa
tg6Zf4lvD8QqdXKdamfv/jaZfrmc699Jr6P/a9uA1VuNgg9UUdk5dsFW0fOcWUO/
oEO5DbI7tB3hPf/w3H7Yy08wOpnKQKcGOGE2seJjhuKT1tBxW6NnOt0rbsrkNlnP
lV7TFi0Bt9w/yN2gwSv/mUg30LXK7yIRk7t5n3EU9IxV8hiY/U72yiUjJDNzXdGE
4p8CJlBDXqw7HsG+QcU2Om1rDfIWC5mOex/Yyp6bpan81w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org