Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/m7R4LABdxEQcqJFEjLnz0j8W9Ro.roa
File:                     m7R4LABdxEQcqJFEjLnz0j8W9Ro.roa (raw, json)
Hash identifier:          zCEpUFulP2Xq1wVi9Hrpy/FlTNNlwn25ClylamS/I8k=
Subject key identifier:   9B:B4:78:2C:00:5D:C4:44:1C:A8:91:44:8C:B9:F3:D2:3F:16:F5:1A
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0789
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/m7R4LABdxEQcqJFEjLnz0j8W9Ro.roa
Signing time:             Tue 29 Sep 2020 09:59:59 +0000
ROA not before:           Tue 29 Sep 2020 09:59:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131596
IP address blocks:        116.241.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep 29 09:59:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9BB4782C005DC4441CA891448CB9F3D23F16F51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:92:86:ad:f2:45:fe:1d:a4:71:92:dd:62:
                    2e:ae:ab:40:fd:35:4b:29:65:8b:0b:d3:77:8b:55:
                    29:8b:d4:2c:67:b5:c5:8d:87:cb:cd:34:08:ca:88:
                    8f:a9:b5:76:20:17:b5:12:ce:91:eb:8b:05:df:a8:
                    bd:23:e2:cd:80:c2:61:15:57:8e:c9:2a:04:a2:43:
                    8e:cf:59:52:3d:9e:6c:cb:bc:9b:ce:9a:25:c4:70:
                    e5:89:33:92:7a:d6:95:6f:73:38:57:83:3d:08:71:
                    13:fb:e2:f5:ec:b3:04:9c:8a:02:47:97:3f:34:14:
                    a4:61:2e:82:1b:0b:3a:19:13:7b:26:1d:2e:53:e0:
                    2c:c7:ad:7e:12:01:ad:0e:b5:b2:c3:15:51:53:c6:
                    8d:4b:f7:db:54:05:34:28:bb:8c:34:bd:20:f2:e4:
                    7a:cd:6f:fe:6e:32:c6:0e:29:38:35:0d:22:ef:60:
                    47:1d:df:78:a8:20:c9:68:80:6d:52:82:2f:b7:a9:
                    06:c1:ce:68:1c:85:da:46:00:c7:b0:43:29:7a:e4:
                    b0:65:df:4b:e5:8a:df:f4:b0:0b:b8:d7:a1:3f:28:
                    2f:05:1f:ab:a2:6f:45:4c:87:08:1c:2d:3d:a6:af:
                    4b:68:f2:c3:39:6d:e0:20:94:71:04:96:ec:cd:49:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B4:78:2C:00:5D:C4:44:1C:A8:91:44:8C:B9:F3:D2:3F:16:F5:1A
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/m7R4LABdxEQcqJFEjLnz0j8W9Ro.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:54:9a:60:9d:56:e8:69:59:a2:b7:e7:c9:45:1c:58:e9:4a:
         92:23:4b:aa:e7:37:bd:9a:18:96:52:fd:a0:30:f5:03:1c:5a:
         1d:53:91:e2:d0:b3:20:02:12:d4:b0:25:91:67:5a:90:1a:9b:
         ff:ae:7d:5b:a7:f0:65:29:c3:78:42:5b:8f:7e:1c:7f:60:70:
         60:53:5c:e8:ad:62:09:a4:f5:05:ec:8f:ac:ca:91:6c:e7:75:
         7d:6a:90:73:05:53:b1:53:9f:3a:78:b2:ef:23:c8:e5:a2:0c:
         76:2c:4e:6d:9c:f8:c2:e6:27:f8:7c:47:81:98:56:e7:f2:71:
         df:74:cd:15:98:46:be:d2:18:6f:c6:b2:20:06:1b:52:3e:81:
         fb:ed:f2:cb:0a:88:dd:38:41:da:c0:7c:e0:fb:14:ea:3e:05:
         ce:5b:6f:3a:24:e2:b2:c5:05:43:e7:76:ea:92:31:96:51:1f:
         e6:ec:a5:bd:17:1f:60:12:de:cf:96:ac:f8:b2:93:db:7d:72:
         89:12:78:1f:34:ed:bf:63:82:90:23:70:5c:a3:1a:82:3d:cb:
         05:dd:cc:84:1d:25:51:db:11:9e:03:ea:33:16:e5:38:19:2a:
         2e:73:18:e1:46:23:89:3e:be:88:03:16:ed:e3:3f:2b:d1:b9:
         7b:b5:13:8a
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yMDA5Mjkw
OTU5NTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDlCQjQ3ODJDMDA1REM0
NDQxQ0E4OTE0NDhDQjlGM0QyM0YxNkY1MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwDpKGrfJF/h2kcZLdYi6uq0D9NUspZYsL03eLVSmL1CxntcWN
h8vNNAjKiI+ptXYgF7USzpHriwXfqL0j4s2AwmEVV47JKgSiQ47PWVI9nmzLvJvO
miXEcOWJM5J61pVvczhXgz0IcRP74vXsswScigJHlz80FKRhLoIbCzoZE3smHS5T
4CzHrX4SAa0OtbLDFVFTxo1L99tUBTQou4w0vSDy5HrNb/5uMsYOKTg1DSLvYEcd
33ioIMlogG1Sgi+3qQbBzmgchdpGAMewQyl65LBl30vlit/0sAu416E/KC8FH6ui
b0VMhwgcLT2mr0to8sM5beAglHEEluzNSWmJAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUm7R4LABdxEQcqJFEjLnz0j8W9RowHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9tN1I0TEFCZHhFUWNxSkZFakxu
ejBqOFc5Um8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAdPEw
DQYJKoZIhvcNAQELBQADggEBACBUmmCdVuhpWaK358lFHFjpSpIjS6rnN72aGJZS
/aAw9QMcWh1TkeLQsyACEtSwJZFnWpAam/+ufVun8GUpw3hCW49+HH9gcGBTXOit
Ygmk9QXsj6zKkWzndX1qkHMFU7FTnzp4su8jyOWiDHYsTm2c+MLmJ/h8R4GYVufy
cd90zRWYRr7SGG/GsiAGG1I+gfvt8ssKiN04QdrAfOD7FOo+Bc5bbzok4rLFBUPn
duqSMZZRH+bspb0XH2AS3s+WrPiyk9t9cokSeB807b9jgpAjcFyjGoI9ywXdzIQd
JVHbEZ4D6jMW5TgZKi5zGOFGI4k+vogDFu3jPyvRuXu1E4o=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:18 2023 by rpki-client on console-fra.rpki-client.org