Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/FeUBFIZ_tOCRczZKiGZh3zkS39k.roa
File:                     FeUBFIZ_tOCRczZKiGZh3zkS39k.roa (raw, json)
Hash identifier:          MWOBpjIJ7IPGlSBy9VmTg+LZj+s0nOUoqXa4lbXtb2Y=
Subject key identifier:   15:E5:01:14:86:7F:B4:E0:91:73:36:4A:88:66:61:DF:39:12:DF:D9
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0ADB
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/FeUBFIZ_tOCRczZKiGZh3zkS39k.roa
Signing time:             Wed 29 Sep 2021 02:41:10 +0000
ROA not before:           Wed 29 Sep 2021 02:41:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131150
IP address blocks:        163.32.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2779 (0xadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep 29 02:41:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=15E50114867FB4E09173364A886661DF3912DFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:96:75:94:d4:0c:d1:f5:0e:cd:62:8b:6a:
                    be:38:24:b6:d0:71:bc:c9:99:8b:27:9c:81:5d:da:
                    d8:f4:4a:8c:70:12:9f:5e:a1:30:6d:5e:df:06:d2:
                    6b:89:52:c1:89:79:8d:95:d6:68:80:6d:3c:d7:ec:
                    ca:da:29:25:2d:25:4e:80:d6:e0:9a:db:8f:8b:23:
                    26:61:1d:3a:97:ae:5c:fa:80:34:4b:af:a3:96:5e:
                    e8:ea:38:95:41:7a:4b:e0:be:ec:00:c4:8a:b2:f8:
                    e0:84:66:1d:48:ec:b4:5d:8b:4b:88:48:51:4a:70:
                    44:52:57:c9:ca:ec:bf:35:70:bb:f3:8c:e9:ac:e9:
                    4e:43:e7:9c:24:7e:c9:d0:df:f2:ce:07:4e:ef:05:
                    01:89:98:19:69:a0:45:6f:2d:be:a0:2e:f2:85:da:
                    6e:1f:f5:e4:d4:7b:46:62:c9:d1:52:a0:69:33:64:
                    2f:8a:b5:4e:52:8e:77:03:b1:a6:73:fe:a0:ec:d9:
                    b3:ed:f7:f1:88:a6:42:42:54:cd:6e:62:10:10:92:
                    3e:49:02:1d:e0:87:54:5a:26:dd:c7:b2:52:10:a7:
                    d6:c0:8e:ee:45:bd:2f:62:0e:78:d9:9d:e5:fb:98:
                    cb:dd:86:de:71:aa:f1:c9:8b:6f:32:a6:cd:49:0b:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:01:14:86:7F:B4:E0:91:73:36:4A:88:66:61:DF:39:12:DF:D9
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/FeUBFIZ_tOCRczZKiGZh3zkS39k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.32.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:d6:73:45:bc:5e:9d:91:9d:d0:6d:91:85:e9:48:fe:c6:03:
         e6:19:d0:de:d5:b7:82:0d:05:5a:8f:9d:91:de:e8:26:fe:5c:
         2c:43:b6:cf:99:97:32:ba:31:ac:d2:31:04:b4:95:c0:60:7d:
         de:2b:33:74:19:b1:e2:1c:6f:ca:05:12:a0:eb:ee:9b:89:4d:
         89:ca:09:27:c4:c6:cb:34:78:51:46:e5:e9:af:9c:df:9f:f0:
         08:d6:20:58:c4:8f:78:f9:f4:12:fc:de:3a:af:c2:4c:50:84:
         a6:8e:3d:50:f2:9f:8b:46:84:cb:1a:30:d1:fb:24:22:e1:bb:
         45:d4:6d:6c:5c:2b:35:bc:9a:b2:49:15:c9:a9:5b:cb:be:86:
         1a:76:67:0f:22:8c:50:0d:a9:5c:02:97:7d:61:f9:6e:a4:6b:
         aa:ea:ed:35:07:10:98:9c:bc:8a:08:a7:47:aa:22:f3:52:22:
         e8:4b:68:83:f0:26:2f:8a:3a:0b:fd:05:43:75:ea:81:5b:42:
         7f:6b:e6:d4:20:e5:7e:62:24:ad:56:28:1a:00:5f:3c:d7:9c:
         38:ee:5f:87:15:45:ff:cd:d6:ba:8f:36:64:17:53:d4:67:69:
         d1:4f:48:97:26:74:e0:a4:a4:bf:3d:fa:0c:f8:6f:ec:74:26:
         5e:a3:d5:3c
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yMTA5Mjkw
MjQxMTBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDE1RTUwMTE0ODY3RkI0
RTA5MTczMzY0QTg4NjY2MURGMzkxMkRGRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmh5Z1lNQM0fUOzWKLar44JLbQcbzJmYsnnIFd2tj0SoxwEp9e
oTBtXt8G0muJUsGJeY2V1miAbTzX7MraKSUtJU6A1uCa24+LIyZhHTqXrlz6gDRL
r6OWXujqOJVBekvgvuwAxIqy+OCEZh1I7LRdi0uISFFKcERSV8nK7L81cLvzjOms
6U5D55wkfsnQ3/LOB07vBQGJmBlpoEVvLb6gLvKF2m4f9eTUe0ZiydFSoGkzZC+K
tU5SjncDsaZz/qDs2bPt9/GIpkJCVM1uYhAQkj5JAh3gh1RaJt3HslIQp9bAju5F
vS9iDnjZneX7mMvdht5xqvHJi28yps1JC+9LAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUFeUBFIZ/tOCRczZKiGZh3zkS39kwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9GZVVCRklaX3RPQ1JjelpLaUda
aDN6a1MzOWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoyDw
MA0GCSqGSIb3DQEBCwUAA4IBAQAb1nNFvF6dkZ3QbZGF6Uj+xgPmGdDe1beCDQVa
j52R3ugm/lwsQ7bPmZcyujGs0jEEtJXAYH3eKzN0GbHiHG/KBRKg6+6biU2Jygkn
xMbLNHhRRuXpr5zfn/AI1iBYxI94+fQS/N46r8JMUISmjj1Q8p+LRoTLGjDR+yQi
4btF1G1sXCs1vJqySRXJqVvLvoYadmcPIoxQDalcApd9YflupGuq6u01BxCYnLyK
CKdHqiLzUiLoS2iD8CYvijoL/QVDdeqBW0J/a+bUIOV+YiStVigaAF8815w47l+H
FUX/zda6jzZkF1PUZ2nRT0iXJnTgpKS/PfoM+G/sdCZeo9U8
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:21 2024 by rpki-client on console-ams.rpki-client.org