Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/-Ma4mEFB_FQMypNlVybj7JvndDU.roa
File:                     -Ma4mEFB_FQMypNlVybj7JvndDU.roa (raw, json)
Hash identifier:          MrjOxGYqFeF57Rgnte/403bdLJJ89uFzBPryEwKzmXw=
Subject key identifier:   F8:C6:B8:98:41:41:FC:54:0C:CA:93:65:57:26:E3:EC:9B:E7:74:35
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       08EB
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/-Ma4mEFB_FQMypNlVybj7JvndDU.roa
Signing time:             Sun 07 Feb 2021 12:47:54 +0000
ROA not before:           Sun 07 Feb 2021 12:47:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     138145
IP address blocks:        103.106.54.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Feb  7 12:47:54 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F8C6B8984141FC540CCA93655726E3EC9BE77435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:fe:14:df:5f:02:bf:ce:99:56:de:92:e9:
                    8b:17:4e:95:92:2f:bc:f9:73:32:66:72:8c:5d:46:
                    bf:09:4c:9f:8f:50:08:65:32:30:df:66:09:1b:ef:
                    44:2b:08:fa:65:1c:66:78:b4:63:2d:96:00:c7:7b:
                    04:fd:da:b4:e4:17:17:80:b9:be:fc:79:25:d6:5f:
                    f4:20:75:a1:fc:05:10:1c:0f:cc:33:4c:3d:e5:d2:
                    b4:fb:4e:15:4f:9e:00:bd:37:49:da:b4:1c:55:8f:
                    17:b3:06:30:52:dc:8f:80:ed:8f:d5:f3:7c:5a:d8:
                    c3:23:5b:8b:f5:d7:55:a5:2a:90:9f:14:58:2e:57:
                    63:6e:1b:23:ed:bd:a6:91:6d:86:d7:d3:fd:2d:4b:
                    ac:97:b2:59:b1:b2:b1:76:6b:06:38:44:2a:41:f2:
                    28:9e:15:6d:26:5c:5e:bb:9e:51:52:61:be:ee:de:
                    61:f7:79:ae:da:ed:2b:ae:5c:96:48:90:7c:13:a2:
                    47:00:51:44:14:b4:dc:70:bb:6c:68:5d:5b:c3:39:
                    f4:23:17:92:b8:9a:76:59:67:d6:2e:fd:b8:fd:b5:
                    86:5a:76:2c:6c:d5:eb:3d:f9:94:94:50:50:8f:05:
                    09:6f:08:f8:e6:77:4e:51:32:2d:76:a1:73:c1:93:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C6:B8:98:41:41:FC:54:0C:CA:93:65:57:26:E3:EC:9B:E7:74:35
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/-Ma4mEFB_FQMypNlVybj7JvndDU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:8d:e4:ad:18:c1:0d:75:7c:01:23:9f:19:12:15:13:e5:62:
         28:bf:1b:72:cb:88:ae:ba:14:b3:89:b5:53:51:1e:23:77:af:
         4c:32:b6:17:2e:8f:dc:bf:04:cd:cd:2a:64:12:8c:cf:9d:76:
         a8:c9:1b:4d:8f:75:b4:ea:65:22:f0:e2:85:3f:5f:38:e2:f0:
         86:5a:19:82:b7:f0:91:b0:86:8f:e6:47:93:74:1a:06:20:85:
         b4:07:51:10:8c:c3:49:e7:52:8e:02:aa:85:84:65:a5:e4:88:
         aa:5e:65:ee:c8:0a:fd:91:60:a0:73:4f:34:21:7a:1b:48:db:
         63:20:06:08:74:a5:da:2b:ce:a0:9e:11:ce:a2:4b:52:6d:e0:
         04:53:f1:15:42:47:c2:56:63:83:41:95:a6:a4:65:a9:b7:7c:
         91:f0:b4:cb:a3:23:93:20:23:b0:88:09:62:db:d1:e5:c5:72:
         04:23:45:ab:dd:82:7a:85:28:6f:c4:a4:be:24:6d:cc:a5:bc:
         47:18:17:8d:8b:71:7f:56:6d:24:ef:aa:17:72:c3:c8:85:40:
         0c:37:ff:70:bf:bb:1c:6a:01:31:61:46:0f:69:89:a9:06:5f:
         d6:40:fb:87:3d:73:86:93:ec:44:a7:12:de:ef:ae:b8:e0:a2:
         6a:ea:6c:fc
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1
NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMTAyMDcx
MjQ3NTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEY4QzZCODk4NDE0MUZD
NTQwQ0NBOTM2NTU3MjZFM0VDOUJFNzc0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCU0P4U318Cv86ZVt6S6YsXTpWSL7z5czJmcoxdRr8JTJ+PUAhl
MjDfZgkb70QrCPplHGZ4tGMtlgDHewT92rTkFxeAub78eSXWX/QgdaH8BRAcD8wz
TD3l0rT7ThVPngC9N0natBxVjxezBjBS3I+A7Y/V83xa2MMjW4v111WlKpCfFFgu
V2NuGyPtvaaRbYbX0/0tS6yXslmxsrF2awY4RCpB8iieFW0mXF67nlFSYb7u3mH3
ea7a7SuuXJZIkHwTokcAUUQUtNxwu2xoXVvDOfQjF5K4mnZZZ9Yu/bj9tYZadixs
1es9+ZSUUFCPBQlvCPjmd05RMi12oXPBk5ZhAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQU+Ma4mEFB/FQMypNlVybj7JvndDUwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB
76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI
RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HLy1NYTRtRUZCX0ZR
TXlwTmxWeWJqN0p2bmREVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnajYwDQYJKoZIhvcNAQELBQADggEBAAGN5K0YwQ11fAEjnxkSFRPlYii/
G3LLiK66FLOJtVNRHiN3r0wythcuj9y/BM3NKmQSjM+ddqjJG02PdbTqZSLw4oU/
Xzji8IZaGYK38JGwho/mR5N0GgYghbQHURCMw0nnUo4CqoWEZaXkiKpeZe7ICv2R
YKBzTzQhehtI22MgBgh0pdorzqCeEc6iS1Jt4ART8RVCR8JWY4NBlaakZam3fJHw
tMujI5MgI7CICWLb0eXFcgQjRavdgnqFKG/EpL4kbcylvEcYF42LcX9WbSTvqhdy
w8iFQAw3/3C/uxxqATFhRg9piakGX9ZA+4c9c4aT7ESnEt7vrrjgomrqbPw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org