Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/5tMoCPSnOu4Eg9D07ivfgSperKA.roa
File:                     5tMoCPSnOu4Eg9D07ivfgSperKA.roa (raw, json)
Hash identifier:          SHIx3o8jfsLUFz2X7ZOa5JgAasaqO5v4BNVzoFPFPm8=
Subject key identifier:   E6:D3:28:08:F4:A7:3A:EE:04:83:D0:F4:EE:2B:DF:81:2A:5E:AC:A0
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0780
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/5tMoCPSnOu4Eg9D07ivfgSperKA.roa
Signing time:             Tue 29 Sep 2020 09:59:21 +0000
ROA not before:           Tue 29 Sep 2020 09:59:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18182
IP address blocks:        27.105.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Sep 29 09:59:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E6D32808F4A73AEE0483D0F4EE2BDF812A5EACA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:84:6e:01:5a:28:52:2c:bd:61:39:22:8c:
                    69:7b:cd:5e:f3:a4:cb:29:74:c6:21:e5:8c:c0:91:
                    8f:17:e2:19:e3:b3:04:06:88:22:25:30:76:c4:d1:
                    6d:0a:b8:67:b1:f6:37:34:20:50:91:65:31:85:37:
                    a7:63:45:a2:4a:c8:01:0a:25:8e:68:72:49:ce:32:
                    a2:24:76:44:08:d8:8a:f4:c8:88:21:a9:b2:67:64:
                    ff:40:d2:f2:bd:e4:43:3b:85:2c:46:d1:b6:df:69:
                    21:4f:5f:9a:69:69:4a:5b:5c:f0:81:94:01:06:86:
                    fa:e4:87:19:71:88:ff:02:95:38:8e:f3:01:65:7a:
                    91:b5:af:a4:d0:44:92:e4:5c:09:c8:a9:8a:dd:ca:
                    f2:a7:e2:0b:1e:f5:20:32:b3:7a:83:97:08:41:a3:
                    11:59:7e:b8:d3:8f:ea:cf:3d:99:c4:d6:a3:9e:f4:
                    ce:9c:cb:e8:23:68:25:c9:c0:ca:57:bf:98:70:f1:
                    55:73:bd:49:53:3e:b0:b0:c2:af:80:e5:b9:ad:4c:
                    c3:dc:08:c2:8c:05:4c:d7:10:2b:a9:85:12:ff:d6:
                    c9:df:2a:ea:fa:aa:a2:12:8f:ee:b8:9f:70:c4:d7:
                    32:d5:c7:6a:6b:7c:a9:f5:7e:5b:ff:e2:23:88:18:
                    2c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D3:28:08:F4:A7:3A:EE:04:83:D0:F4:EE:2B:DF:81:2A:5E:AC:A0
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/5tMoCPSnOu4Eg9D07ivfgSperKA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:cf:5c:80:f6:6b:70:0c:ba:8b:8f:66:96:48:32:f1:cc:6c:
         d4:01:1f:63:e3:8f:a3:0c:dc:82:ef:1d:1c:5e:7b:01:78:73:
         81:9e:48:e7:de:7f:b8:80:7e:ee:0d:c1:33:da:27:e2:36:39:
         ec:76:8c:dc:41:a8:0b:e8:97:55:e6:2c:4f:5b:66:9a:9a:fb:
         21:55:d2:52:ec:e3:ce:cf:e4:67:88:15:f3:ae:9e:ea:ac:91:
         fd:46:37:0c:7d:38:9b:8d:2f:c9:56:6f:0b:b2:c1:91:40:ac:
         a9:7b:5d:96:1d:a2:a1:19:86:29:0e:4c:57:6e:1c:7a:42:f7:
         c0:67:4e:d8:2e:1c:1b:7b:01:96:d0:18:a4:fe:50:ae:02:60:
         1d:89:31:b3:9d:66:8b:3c:56:9e:bc:90:cd:62:8a:dd:be:d7:
         e5:91:e5:65:76:97:59:c4:76:98:93:69:f4:f2:db:27:22:d6:
         31:1d:b7:3d:f7:f9:c0:8d:34:16:96:6e:49:b7:f1:2c:71:85:
         0b:b1:a6:1d:10:0e:d5:96:e2:36:da:f6:2a:15:e5:1e:eb:8a:
         f0:ad:2e:79:ad:77:6a:d6:c9:55:31:a2:71:e2:68:17:4a:fe:
         41:a2:2c:1f:e8:e8:4a:92:53:4c:0f:92:aa:50:05:7f:05:b0:
         ea:70:95:8c
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NC
NTQ1NDE1M0FDQ0VDRTg1MjBEMzM5MDdENTRFNTZDNUNBOUE0QjAeFw0yMDA5Mjkw
OTU5MjFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU2RDMyODA4RjRBNzNB
RUUwNDgzRDBGNEVFMkJERjgxMkE1RUFDQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg8oRuAVooUiy9YTkijGl7zV7zpMspdMYh5YzAkY8X4hnjswQG
iCIlMHbE0W0KuGex9jc0IFCRZTGFN6djRaJKyAEKJY5ocknOMqIkdkQI2Ir0yIgh
qbJnZP9A0vK95EM7hSxG0bbfaSFPX5ppaUpbXPCBlAEGhvrkhxlxiP8ClTiO8wFl
epG1r6TQRJLkXAnIqYrdyvKn4gse9SAys3qDlwhBoxFZfrjTj+rPPZnE1qOe9M6c
y+gjaCXJwMpXv5hw8VVzvUlTPrCwwq+A5bmtTMPcCMKMBUzXECuphRL/1snfKur6
qqISj+64n3DE1zLVx2prfKn1flv/4iOIGCwzAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU5tMoCPSnOu4Eg9D07ivfgSperKAwHwYDVR0jBBgwFoAUzLVFQVOszs6FINM5
B9VOVsXKmkswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU09ORVQv
ekxWRlFWT3N6czZGSU5NNUI5Vk9Wc1hLbWtzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS96TFZGUVZPc3pzNkZJTk01QjlWT1ZzWEtta3MuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TT05FVC81dE1vQ1BTbk91NEVnOUQwN2l2
ZmdTcGVyS0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAG2kw
DQYJKoZIhvcNAQELBQADggEBALnPXID2a3AMuouPZpZIMvHMbNQBH2Pjj6MM3ILv
HRxeewF4c4GeSOfef7iAfu4NwTPaJ+I2Oex2jNxBqAvol1XmLE9bZpqa+yFV0lLs
487P5GeIFfOunuqskf1GNwx9OJuNL8lWbwuywZFArKl7XZYdoqEZhikOTFduHHpC
98BnTtguHBt7AZbQGKT+UK4CYB2JMbOdZos8Vp68kM1iit2+1+WR5WV2l1nEdpiT
afTy2yci1jEdtz33+cCNNBaWbkm38SxxhQuxph0QDtWW4jba9ioV5R7rivCtLnmt
d2rWyVUxonHiaBdK/kGiLB/o6EqSU0wPkqpQBX8FsOpwlYw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org