Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NKBNET/-yxfm_ShHWae_M-zjJCoZY8wlsw.roa
File:                     -yxfm_ShHWae_M-zjJCoZY8wlsw.roa (raw, json)
Hash identifier:          Td+Ggm5SXQBHqH6oOmDBRm4jKCP/uEJnvqFwd8ka6Uc=
Subject key identifier:   FB:2C:5F:9B:F4:A1:1D:66:9E:FC:CF:B3:8C:90:A8:65:8F:30:96:CC
Certificate issuer:       /CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
Certificate serial:       0E3E
Authority key identifier: 80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/-yxfm_ShHWae_M-zjJCoZY8wlsw.roa
Signing time:             Tue 29 Sep 2020 10:05:11 +0000
ROA not before:           Tue 29 Sep 2020 10:05:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7482
IP address blocks:        103.130.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3646 (0xe3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8051F2ECEFC242E9AF9F1E454A4FB796591B8DAB
        Validity
            Not Before: Sep 29 10:05:11 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FB2C5F9BF4A11D669EFCCFB38C90A8658F3096CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:44:7a:20:08:ba:44:24:93:78:3d:55:f8:
                    82:4f:fb:61:34:70:46:09:eb:46:6a:ee:7a:65:66:
                    fb:9b:c7:8f:aa:52:ce:14:9a:65:b4:1f:d5:28:83:
                    9a:cd:18:de:ae:80:44:e9:f6:e9:f3:ac:12:6e:59:
                    3c:ce:cf:05:3d:fe:34:6e:d2:37:21:91:c3:0f:42:
                    8d:7d:cd:58:72:c9:99:f4:a9:d9:3f:e0:06:4e:b0:
                    27:68:9d:8d:9b:30:02:70:55:f7:cb:ef:7e:1a:d8:
                    97:d6:b7:9f:5e:59:e9:1a:f8:e0:ba:6b:b9:1c:54:
                    69:35:4b:e9:fa:d9:d0:19:48:6b:11:86:36:c2:e9:
                    38:95:83:7a:a9:07:c4:55:a5:bc:3d:79:08:f4:4c:
                    7c:dd:94:09:5c:a9:32:5e:70:e5:3a:d9:c9:1c:fb:
                    8c:dc:58:f9:76:17:42:6f:7e:f7:7e:1e:aa:fc:a2:
                    14:b4:76:26:63:a5:31:14:64:37:4a:61:20:7b:8c:
                    21:0b:1f:5b:38:d1:d2:06:e5:f4:a0:4f:c4:ba:31:
                    9c:a3:cd:d2:5f:0e:c5:74:38:fd:10:72:0d:76:1a:
                    d5:f5:8c:55:cf:01:4b:55:fb:26:13:75:b9:d5:6b:
                    5b:ed:bd:04:05:b1:bc:52:e9:d5:a5:e8:c7:2b:64:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2C:5F:9B:F4:A1:1D:66:9E:FC:CF:B3:8C:90:A8:65:8F:30:96:CC
            X509v3 Authority Key Identifier:
                keyid:80:51:F2:EC:EF:C2:42:E9:AF:9F:1E:45:4A:4F:B7:96:59:1B:8D:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/gFHy7O_CQumvnx5FSk-3llkbjas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gFHy7O_CQumvnx5FSk-3llkbjas.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NKBNET/-yxfm_ShHWae_M-zjJCoZY8wlsw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:ef:d3:5f:b9:13:90:a7:e0:d8:4a:03:8f:1e:42:3e:ee:73:
         45:41:ca:a9:4c:f2:76:81:f1:ac:0d:00:2f:ad:d8:d9:dc:3b:
         e5:d7:7f:db:ab:b1:90:2a:95:11:eb:01:c5:11:8d:e1:c2:a1:
         eb:dd:50:87:f4:3c:b2:b4:3b:ba:4b:0e:e0:eb:2a:ce:73:c5:
         4a:91:24:fe:83:07:3a:ce:a8:3b:3c:e4:d4:a3:5c:09:00:24:
         15:eb:a5:a8:ed:5e:50:0b:d0:d3:1e:81:0f:da:fc:39:62:22:
         f3:c8:4f:19:30:21:b1:ef:78:84:8c:1a:21:86:18:05:f2:cf:
         cf:1b:fe:41:1a:1e:a9:27:2e:6b:76:3f:bb:93:19:72:fe:06:
         02:df:72:bf:39:5c:35:35:9b:d7:cf:03:f3:2c:59:af:c6:1e:
         0f:61:63:93:d7:21:91:b6:30:b8:f5:29:9b:fe:89:04:3d:fb:
         ce:cf:7a:f8:27:4e:b8:63:96:6a:c1:9a:24:4c:16:95:e5:f8:
         f0:36:c1:6b:60:62:ef:66:73:40:60:3c:99:06:7c:d9:ed:2a:
         df:fc:7a:f4:c6:26:8f:4c:0e:5d:e1:3d:6a:3b:03:a7:d8:d4:
         d3:a5:99:0e:2f:f3:f3:d5:62:8e:c2:0a:5b:fb:b9:af:ca:2b:
         80:61:ff:b9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDj4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODA1
MUYyRUNFRkMyNDJFOUFGOUYxRTQ1NEE0RkI3OTY1OTFCOERBQjAeFw0yMDA5Mjkx
MDA1MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZCMkM1RjlCRjRBMTFE
NjY5RUZDQ0ZCMzhDOTBBODY1OEYzMDk2Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC42kR6IAi6RCSTeD1V+IJP+2E0cEYJ60Zq7nplZvubx4+qUs4U
mmW0H9Uog5rNGN6ugETp9unzrBJuWTzOzwU9/jRu0jchkcMPQo19zVhyyZn0qdk/
4AZOsCdonY2bMAJwVffL734a2JfWt59eWeka+OC6a7kcVGk1S+n62dAZSGsRhjbC
6TiVg3qpB8RVpbw9eQj0THzdlAlcqTJecOU62ckc+4zcWPl2F0Jvfvd+Hqr8ohS0
diZjpTEUZDdKYSB7jCELH1s40dIG5fSgT8S6MZyjzdJfDsV0OP0Qcg12GtX1jFXP
AUtV+yYTdbnVa1vtvQQFsbxS6dWl6McrZJiTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+yxfm/ShHWae/M+zjJCoZY8wlswwHwYDVR0jBBgwFoAUgFHy7O/CQumvnx5F
Sk+3llkbjaswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVU
L2dGSHk3T19DUXVtdm54NUZTay0zbGxrYmphcy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvZ0ZIeTdPX0NRdW12bng1RlNrLTNsbGtiamFzLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTktCTkVULy15eGZtX1NoSFdhZV9NLXpq
SkNvWlk4d2xzdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn
gjAwDQYJKoZIhvcNAQELBQADggEBAGPv01+5E5Cn4NhKA48eQj7uc0VByqlM8naB
8awNAC+t2NncO+XXf9ursZAqlRHrAcURjeHCoevdUIf0PLK0O7pLDuDrKs5zxUqR
JP6DBzrOqDs85NSjXAkAJBXrpajtXlAL0NMegQ/a/DliIvPITxkwIbHveISMGiGG
GAXyz88b/kEaHqknLmt2P7uTGXL+BgLfcr85XDU1m9fPA/MsWa/GHg9hY5PXIZG2
MLj1KZv+iQQ9+87PevgnTrhjlmrBmiRMFpXl+PA2wWtgYu9mc0BgPJkGfNntKt/8
evTGJo9MDl3hPWo7A6fY1NOlmQ4v8/PVYo7CClv7ua/KK4Bh/7k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:16 2024 by rpki-client on console-ams.rpki-client.org