Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/mmtEsPQXWX5CIsNSzSK8WAjPGbg.roa
File:                     mmtEsPQXWX5CIsNSzSK8WAjPGbg.roa (raw, json)
Hash identifier:          0qbs+31K3OcCVTmfvrPp9ylJfWcldmINA0LdXjY9GvQ=
Subject key identifier:   9A:6B:44:B0:F4:17:59:7E:42:22:C3:52:CD:22:BC:58:08:CF:19:B8
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0A09
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/mmtEsPQXWX5CIsNSzSK8WAjPGbg.roa
Signing time:             Wed 16 Feb 2022 08:12:58 +0000
ROA not before:           Wed 16 Feb 2022 08:12:58 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18049
IP address blocks:        103.180.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569 (0xa09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Feb 16 08:12:58 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9A6B44B0F417597E4222C352CD22BC5808CF19B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:f9:ae:3d:4e:2e:cc:9d:30:4f:27:57:f0:
                    67:04:1b:cc:98:da:e3:70:bd:7e:96:d1:d4:d3:4e:
                    b4:f1:a6:5b:18:78:bd:43:2c:3d:c1:55:44:1d:8f:
                    14:58:e3:bd:a2:13:35:e7:f8:0c:9e:a8:10:88:e0:
                    36:fb:31:65:10:27:ba:c3:4b:23:3a:2b:20:bf:70:
                    57:36:0d:25:a3:d2:15:69:80:69:d1:e9:c2:89:55:
                    28:ed:98:d0:34:75:0d:3e:c2:c4:6a:5d:a2:a3:47:
                    11:24:f1:ff:99:05:8a:a9:be:5f:ec:c6:66:c2:dd:
                    ae:3f:e7:80:e4:4f:1e:4d:5b:3f:58:10:90:80:bd:
                    e0:cc:94:23:60:a4:b9:61:74:91:c7:bc:0f:68:b2:
                    41:90:9f:33:22:a8:c9:77:4e:2a:66:4a:af:ee:ff:
                    7d:9d:9b:98:03:6b:56:e5:31:99:72:84:74:c9:7c:
                    43:7d:ae:d3:66:58:8e:02:81:29:85:17:f5:75:cf:
                    a3:9b:d4:0c:c6:ae:7c:9e:e6:5b:d7:be:4a:e9:38:
                    03:5c:8a:51:12:31:7f:70:50:7e:c6:d5:e0:0e:70:
                    c2:2f:17:ab:97:6c:be:59:c0:d2:40:c6:7a:9b:3a:
                    70:e3:b4:42:7f:8b:14:86:b7:d5:fb:06:60:90:05:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6B:44:B0:F4:17:59:7E:42:22:C3:52:CD:22:BC:58:08:CF:19:B8
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/mmtEsPQXWX5CIsNSzSK8WAjPGbg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:6c:fd:20:d1:fb:ea:15:b5:9d:53:21:7d:ff:54:5f:39:
         83:b1:a8:36:4c:ea:01:f5:03:cd:3f:2c:38:07:79:24:b1:9d:
         77:a1:02:82:13:7f:d0:0c:db:20:39:fc:9e:e5:23:df:5a:73:
         e7:66:7b:fe:34:c1:3b:32:2b:6a:c8:2f:57:5c:bd:ff:f7:03:
         92:92:fc:06:35:33:c7:8c:7b:91:bd:9d:4e:02:3d:3a:4a:79:
         d1:b9:86:54:7b:36:0e:09:de:7b:4b:f4:b0:2a:af:9f:43:4c:
         9b:de:ee:1d:7d:ef:e0:fb:f0:d8:31:10:e6:4a:5e:0f:aa:b3:
         3a:b6:55:c0:41:44:6e:ad:0e:92:74:1e:ce:f6:a2:ba:e6:50:
         70:3a:b9:70:51:97:a1:14:78:d6:27:2f:75:bc:45:28:66:88:
         db:5d:eb:60:29:42:5f:6f:85:60:57:67:af:8b:93:9b:95:78:
         1f:55:eb:62:33:70:bd:a3:13:55:41:d3:84:5b:90:f5:0b:87:
         a5:0c:d1:61:bf:3d:c9:57:4f:37:f5:cd:ac:47:d0:43:3d:8d:
         79:73:b9:c0:57:3c:af:45:b1:6b:9f:18:90:a5:6b:ed:9e:07:
         1c:85:64:65:68:5a:6f:56:e4:78:7d:1c:57:9f:2a:a0:b7:ef:
         8e:77:09:67
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy
NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMjAyMTYw
ODEyNThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDlBNkI0NEIwRjQxNzU5
N0U0MjIyQzM1MkNEMjJCQzU4MDhDRjE5QjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM5fmuPU4uzJ0wTydX8GcEG8yY2uNwvX6W0dTTTrTxplsYeL1D
LD3BVUQdjxRY472iEzXn+AyeqBCI4Db7MWUQJ7rDSyM6KyC/cFc2DSWj0hVpgGnR
6cKJVSjtmNA0dQ0+wsRqXaKjRxEk8f+ZBYqpvl/sxmbC3a4/54DkTx5NWz9YEJCA
veDMlCNgpLlhdJHHvA9oskGQnzMiqMl3TipmSq/u/32dm5gDa1blMZlyhHTJfEN9
rtNmWI4CgSmFF/V1z6Ob1AzGrnye5lvXvkrpOANcilESMX9wUH7G1eAOcMIvF6uX
bL5ZwNJAxnqbOnDjtEJ/ixSGt9X7BmCQBe/VAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUmmtEsPQXWX5CIsNSzSK8WAjPGbgwHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo
SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80
Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvbW10RXNQUVhXWDVDSXNOU3pTSzhX
QWpQR2JnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe0FjAN
BgkqhkiG9w0BAQsFAAOCAQEAng1s/SDR++oVtZ1TIX3/VF85g7GoNkzqAfUDzT8s
OAd5JLGdd6ECghN/0AzbIDn8nuUj31pz52Z7/jTBOzIrasgvV1y9//cDkpL8BjUz
x4x7kb2dTgI9Okp50bmGVHs2Dgnee0v0sCqvn0NMm97uHX3v4Pvw2DEQ5kpeD6qz
OrZVwEFEbq0OknQezvaiuuZQcDq5cFGXoRR41icvdbxFKGaI213rYClCX2+FYFdn
r4uTm5V4H1XrYjNwvaMTVUHThFuQ9QuHpQzRYb89yVdPN/XNrEfQQz2NeXO5wFc8
r0Wxa58YkKVr7Z4HHIVkZWhab1bkeH0cV58qoLfvjncJZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org