Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/6DRWW-HzEnpCvJSwWE_EzMolfaE.roa
File:                     6DRWW-HzEnpCvJSwWE_EzMolfaE.roa (raw, json)
Hash identifier:          alFmqO0JdxrOn9Sp2QzQmQszs4cGUT3RWR7yZ+JbS+Y=
Subject key identifier:   E8:34:56:5B:E1:F3:12:7A:42:BC:94:B0:58:4F:C4:CC:CA:25:7D:A1
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       07FB
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6DRWW-HzEnpCvJSwWE_EzMolfaE.roa
Signing time:             Tue 29 Sep 2020 10:06:42 +0000
ROA not before:           Tue 29 Sep 2020 10:06:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     1659
IP address blocks:        203.72.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep 29 10:06:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E834565BE1F3127A42BC94B0584FC4CCCA257DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:01:07:c2:ae:9d:31:9e:85:1a:92:5b:44:
                    fc:af:34:b3:31:fa:fb:2c:e2:69:d0:58:74:4d:60:
                    94:0d:cb:6d:c5:e2:df:99:23:9b:d7:67:17:51:09:
                    6e:20:31:3a:95:25:ac:0d:f8:2f:26:0a:cf:04:8e:
                    6e:36:87:2c:a9:5a:21:9d:6d:03:0c:3f:e5:cf:34:
                    9e:a5:90:f5:73:ee:83:8a:54:a1:65:84:12:0d:9d:
                    4f:6c:47:29:87:f7:91:46:41:e9:bd:39:c6:ac:4a:
                    9a:b3:59:68:0a:a9:df:b2:6f:03:98:b9:09:b8:70:
                    f9:5b:6a:fc:d9:35:d8:27:25:d9:74:e0:f0:95:36:
                    4e:08:aa:ad:94:6e:ec:4e:4f:e8:f1:d1:98:3d:60:
                    80:30:23:41:2d:db:32:ca:0b:ad:d7:06:17:b6:ae:
                    47:1a:9e:37:cc:f7:d9:7f:14:35:76:5c:bc:21:4f:
                    0a:ee:1e:81:0b:8e:07:ce:1c:2b:b1:cd:9f:1b:08:
                    18:db:37:03:cd:92:e7:da:70:f2:1c:e3:db:7e:4f:
                    77:37:65:8d:74:a1:67:3c:98:c1:2d:6e:a5:8f:52:
                    6a:ff:dd:e8:d8:24:45:cf:6f:1c:3e:86:59:a5:c0:
                    15:09:03:81:4b:0b:94:f2:2d:bd:c9:30:b7:09:92:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:34:56:5B:E1:F3:12:7A:42:BC:94:B0:58:4F:C4:CC:CA:25:7D:A1
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/6DRWW-HzEnpCvJSwWE_EzMolfaE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:dd:b5:71:58:bc:f7:f0:e8:07:72:df:b2:1e:56:29:3e:d2:
         04:25:18:d3:2b:2d:2b:c7:4e:88:d1:e3:e9:2a:66:9d:38:8f:
         a8:9d:9b:45:b3:7d:e3:66:16:81:1f:8d:1f:30:d6:37:1e:5e:
         40:0a:52:aa:b4:b0:b6:b2:38:6b:01:b9:ce:fb:a5:98:69:45:
         29:8b:e3:79:63:4a:cf:e6:f0:4f:b0:ed:a1:e8:dc:77:8a:a1:
         8a:a0:58:ab:be:e3:ef:b1:81:fd:6b:48:c9:96:5c:cb:f6:44:
         d7:e7:41:bd:b0:61:c6:52:7c:b8:b7:65:50:7f:9c:26:fd:ff:
         27:e5:96:91:9b:0c:69:08:14:57:d9:0f:ee:82:65:dd:1f:9f:
         eb:10:6c:d1:4d:f7:7d:c0:cf:6b:79:7b:03:c2:20:a7:d5:db:
         f1:9a:eb:bd:95:0b:3e:78:3c:4f:15:41:d2:16:c3:d4:74:f6:
         07:6e:dc:dc:44:c7:6c:cb:bd:5e:a1:80:52:98:b4:24:2c:5d:
         ed:b5:47:86:32:21:03:9d:e2:9b:91:c4:7b:37:54:a1:4b:1f:
         b8:46:9e:8e:10:d1:8d:30:69:70:e1:d5:a5:22:a5:ef:21:00:
         35:38:c5:83:41:a6:ac:83:9b:05:8e:17:e9:fa:f0:53:05:fe:
         96:2f:73:7d
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICB/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMDA5Mjkx
MDA2NDJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU4MzQ1NjVCRTFGMzEy
N0E0MkJDOTRCMDU4NEZDNENDQ0EyNTdEQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNZQEHwq6dMZ6FGpJbRPyvNLMx+vss4mnQWHRNYJQNy23F4t+Z
I5vXZxdRCW4gMTqVJawN+C8mCs8Ejm42hyypWiGdbQMMP+XPNJ6lkPVz7oOKVKFl
hBINnU9sRymH95FGQem9OcasSpqzWWgKqd+ybwOYuQm4cPlbavzZNdgnJdl04PCV
Nk4Iqq2UbuxOT+jx0Zg9YIAwI0Et2zLKC63XBhe2rkcanjfM99l/FDV2XLwhTwru
HoELjgfOHCuxzZ8bCBjbNwPNkufacPIc49t+T3c3ZY10oWc8mMEtbqWPUmr/3ejY
JEXPbxw+hlmlwBUJA4FLC5TyLb3JMLcJkm7lAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQU6DRWW+HzEnpCvJSwWE/EzMolfaEwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC82RFJXVy1IekVucEN2SlN3V0Vf
RXpNb2xmYUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAy0gw
DQYJKoZIhvcNAQELBQADggEBAJrdtXFYvPfw6Ady37IeVik+0gQlGNMrLSvHTojR
4+kqZp04j6idm0WzfeNmFoEfjR8w1jceXkAKUqq0sLayOGsBuc77pZhpRSmL43lj
Ss/m8E+w7aHo3HeKoYqgWKu+4++xgf1rSMmWXMv2RNfnQb2wYcZSfLi3ZVB/nCb9
/yfllpGbDGkIFFfZD+6CZd0fn+sQbNFN933Az2t5ewPCIKfV2/Ga672VCz54PE8V
QdIWw9R09gdu3NxEx2zLvV6hgFKYtCQsXe21R4YyIQOd4puRxHs3VKFLH7hGno4Q
0Y0waXDh1aUipe8hADU4xYNBpqyDmwWOF+n68FMF/pYvc30=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org