Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/LFAoWKAE1N_ZyuvTlgeuPwESRWA.roa
File:                     LFAoWKAE1N_ZyuvTlgeuPwESRWA.roa (raw, json)
Hash identifier:          Z3Bs96oPcOD5sfkX1xQYgnYmeYo7MIaK3JBJl7+CV3E=
Subject key identifier:   2C:50:28:58:A0:04:D4:DF:D9:CA:EB:D3:96:07:AE:3F:01:12:45:60
Certificate issuer:       /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial:       0D56
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/LFAoWKAE1N_ZyuvTlgeuPwESRWA.roa
Signing time:             Thu 15 Sep 2022 02:38:05 +0000
ROA not before:           Thu 15 Sep 2022 02:38:05 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131642
IP address blocks:        103.137.62.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3414 (0xd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
        Validity
            Not Before: Sep 15 02:38:05 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2C502858A004D4DFD9CAEBD39607AE3F01124560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:a2:c1:7d:80:42:f1:4e:89:83:8d:45:d6:
                    ca:d4:8e:f2:97:9f:d3:08:c7:d1:af:42:c1:32:57:
                    b9:b0:35:3c:ac:57:c4:ed:5a:ca:de:5c:5d:0f:21:
                    e5:3a:e1:1e:69:30:4b:9b:8c:88:ff:81:c2:1a:30:
                    b4:b2:9c:fe:fa:dd:00:8d:23:3a:7c:25:18:65:60:
                    d5:3a:57:fa:4c:bb:e5:eb:41:9b:17:85:fd:8e:68:
                    e6:fe:b2:c1:2d:44:2d:1e:7b:2e:b0:b6:86:0b:20:
                    68:80:52:9b:d1:c5:b3:60:6c:20:86:a2:6a:c7:56:
                    f8:c3:92:38:b2:72:63:98:30:13:8a:23:e7:cb:98:
                    59:dc:f0:50:2c:da:92:ca:71:d0:02:8d:a4:c3:41:
                    4f:6c:01:f6:40:ec:65:2d:8a:d5:07:71:4f:56:4d:
                    37:67:7b:8b:49:6c:43:06:04:29:d2:df:78:c1:7f:
                    db:07:1c:4b:ca:0b:36:0b:47:74:4e:cb:ff:39:90:
                    1b:74:47:86:5c:02:5b:bc:db:8b:4f:60:21:a4:4a:
                    35:9c:45:45:9c:ad:18:c7:d8:f4:51:aa:03:13:94:
                    ae:bd:8d:01:e9:6d:fd:8c:c9:b5:b7:df:a6:c8:c7:
                    19:7b:b9:b8:1b:9e:2b:7f:7a:8d:91:e9:d4:14:0e:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:28:58:A0:04:D4:DF:D9:CA:EB:D3:96:07:AE:3F:01:12:45:60
            X509v3 Authority Key Identifier:
                keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/LFAoWKAE1N_ZyuvTlgeuPwESRWA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:41:8e:e9:dd:9c:45:46:63:63:d3:06:dd:2f:34:c7:78:ae:
         8c:4a:fc:e2:99:5c:83:8d:b0:10:1f:f1:53:99:c1:96:07:c2:
         d1:e1:96:b6:6a:f1:18:e8:41:f9:fd:b4:20:d7:dd:db:54:cf:
         c6:57:b7:0b:81:0f:ed:3b:dd:83:b1:da:fb:a6:6b:5b:6c:44:
         19:46:c8:ea:22:df:2c:57:12:40:39:15:b6:6a:28:e2:95:e1:
         2c:2a:23:e8:ef:97:4f:17:41:d4:69:86:03:3b:f2:51:ad:84:
         42:ac:a7:20:e4:25:00:9b:c4:fc:42:ff:6a:1a:1f:e3:39:fd:
         43:20:9c:d4:77:08:98:f3:2b:27:9e:6f:74:91:69:c5:d9:82:
         50:20:0c:7d:93:e2:78:fd:f8:d2:2b:f6:bf:8c:08:9e:b7:cd:
         9c:16:5f:e5:d8:a0:a1:c1:37:af:51:e2:cc:33:37:aa:59:f1:
         4c:04:e7:e5:2e:4a:10:53:99:62:76:05:e5:7d:f2:1f:49:b1:
         11:b6:03:d3:d9:92:91:9b:d7:51:65:81:f1:91:46:91:3e:7f:
         fa:1e:b0:0d:6c:f2:e5:96:d1:3b:f1:d5:23:a7:da:4a:09:97:
         0b:1b:6c:62:54:0e:ff:76:51:4c:0b:f1:76:62:04:19:9f:fb:
         31:52:c6:50
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzE0
RkFDRkQ0NUMyQzAyNzY4RTgyNzJGNEZCODNGQjJFREFGNzQzOTAeFw0yMjA5MTUw
MjM4MDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJDNTAyODU4QTAwNEQ0
REZEOUNBRUJEMzk2MDdBRTNGMDExMjQ1NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpQaLBfYBC8U6Jg41F1srUjvKXn9MIx9GvQsEyV7mwNTysV8Tt
WsreXF0PIeU64R5pMEubjIj/gcIaMLSynP763QCNIzp8JRhlYNU6V/pMu+XrQZsX
hf2OaOb+ssEtRC0eey6wtoYLIGiAUpvRxbNgbCCGomrHVvjDkjiycmOYMBOKI+fL
mFnc8FAs2pLKcdACjaTDQU9sAfZA7GUtitUHcU9WTTdne4tJbEMGBCnS33jBf9sH
HEvKCzYLR3ROy/85kBt0R4ZcAlu824tPYCGkSjWcRUWcrRjH2PRRqgMTlK69jQHp
bf2MybW336bIxxl7ubgbnit/eo2R6dQUDqXvAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQULFAoWKAE1N/ZyuvTlgeuPwESRWAwHwYDVR0jBBgwFoAUwU+s/UXCwCdo6Ccv
T7g/su2vdDkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL3dV
LXNfVVhDd0NkbzZDY3ZUN2dfc3UydmREay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
d1Utc19VWEN3Q2RvNkNjdlQ3Z19zdTJ2ZERrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvUFFTL0xGQW9XS0FFMU5fWnl1dlRsZ2V1UHdF
U1JXQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFniT4wDQYJ
KoZIhvcNAQELBQADggEBAGhBjundnEVGY2PTBt0vNMd4roxK/OKZXIONsBAf8VOZ
wZYHwtHhlrZq8RjoQfn9tCDX3dtUz8ZXtwuBD+073YOx2vuma1tsRBlGyOoi3yxX
EkA5FbZqKOKV4SwqI+jvl08XQdRphgM78lGthEKspyDkJQCbxPxC/2oaH+M5/UMg
nNR3CJjzKyeeb3SRacXZglAgDH2T4nj9+NIr9r+MCJ63zZwWX+XYoKHBN69R4swz
N6pZ8UwE5+UuShBTmWJ2BeV98h9JsRG2A9PZkpGb11FlgfGRRpE+f/oesA1s8uWW
0Tvx1SOn2koJlwsbbGJUDv92UUwL8XZiBBmf+zFSxlA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:42 2024 by rpki-client on console-fra.rpki-client.org