Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AWRF5htKvmLfDy7j02avVwsBCrA.roa
File:                     AWRF5htKvmLfDy7j02avVwsBCrA.roa (raw, json)
Hash identifier:          HMKsA+nkZSVANf7GJbqlT/vPVlbdztD+eOqnwyKTd1Y=
Subject key identifier:   01:64:45:E6:1B:4A:BE:62:DF:0F:2E:E3:D3:66:AF:57:0B:01:0A:B0
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E7C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AWRF5htKvmLfDy7j02avVwsBCrA.roa
Signing time:             Tue 29 Sep 2020 09:55:47 +0000
ROA not before:           Tue 29 Sep 2020 09:55:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.54.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3708 (0xe7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=016445E61B4ABE62DF0F2EE3D366AF570B010AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:89:d0:12:62:40:17:ff:10:66:72:ba:d7:
                    22:e1:67:03:ac:5d:72:22:62:ea:9e:1d:42:2c:41:
                    f7:80:69:8c:ff:b3:43:cd:10:e4:4c:e3:8a:6f:62:
                    a1:3f:eb:d7:4c:16:a1:db:b0:82:d8:b5:e8:96:00:
                    74:52:64:f9:f7:90:88:41:c1:39:c1:d6:1e:a6:c5:
                    23:ef:6d:41:10:d9:41:9c:30:1e:b3:4e:43:85:ea:
                    23:d6:66:d7:0e:1c:4f:89:a1:ed:bc:17:db:08:43:
                    af:b9:2f:94:81:d3:a4:e0:a2:e0:30:fd:ee:4f:35:
                    ca:f6:5e:c3:b1:a0:d1:03:f3:15:06:47:c8:b9:77:
                    14:c4:bd:54:5b:6d:7d:49:70:4e:72:11:9e:db:1f:
                    c7:b4:31:22:3f:98:a9:bb:7d:ee:bd:8d:52:82:dc:
                    38:a3:2c:4f:93:39:93:63:f2:42:f0:38:c3:ec:4c:
                    97:48:86:08:8f:9b:17:d5:56:b4:99:3e:86:97:06:
                    02:58:20:00:d4:46:e4:2c:7c:5e:f9:d7:bc:52:50:
                    18:18:c3:aa:56:5b:bd:fa:bd:14:8f:8f:59:da:8c:
                    fd:72:66:b9:1d:19:3e:c0:68:82:50:d7:4e:d1:e6:
                    9f:ff:f0:11:19:b7:83:2c:db:2d:61:64:1b:5c:2e:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:45:E6:1B:4A:BE:62:DF:0F:2E:E3:D3:66:AF:57:0B:01:0A:B0
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AWRF5htKvmLfDy7j02avVwsBCrA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:44:2f:c5:b1:32:0d:b8:98:dc:ef:06:85:23:82:c1:d3:
         36:7c:46:fe:0c:82:e1:90:21:b8:89:20:76:36:a3:49:63:26:
         39:c7:da:ce:73:ff:f6:d9:75:2e:5a:45:7f:17:71:f8:8d:a0:
         c6:de:e3:d8:0f:3b:6b:9a:22:34:85:30:f9:cf:3e:ab:89:32:
         35:71:e6:35:67:d6:93:2a:bc:53:0c:c1:f6:a1:2d:af:cd:c1:
         40:5e:f8:f0:04:85:66:56:83:16:0f:a6:62:bb:71:4e:61:7d:
         5f:bc:2a:5a:7a:89:69:f9:81:fd:bc:15:1d:68:50:69:9a:3f:
         b6:3a:d4:48:a7:38:f3:28:1c:8f:8e:f9:a4:7f:e4:4e:92:2d:
         92:59:13:a0:e2:9f:ad:b4:32:a0:87:32:42:5b:7f:58:93:e9:
         02:2e:5c:24:33:4e:92:3f:65:89:4b:4a:38:a1:f6:4f:45:fc:
         7b:9f:93:ea:bf:1f:a9:fc:83:fb:df:e3:a1:09:65:ed:4a:84:
         c6:84:71:20:d5:aa:8f:eb:4f:a9:7c:50:61:d5:13:e4:6f:01:
         81:11:55:86:a7:bc:e3:4a:26:70:90:ee:74:e5:0b:5b:a7:3f:
         0f:ae:66:1d:0d:32:3b:bd:3c:06:2a:c5:22:4e:82:04:0b:64:
         36:ce:ca:cc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDnwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDAxNjQ0NUU2MUI0QUJF
NjJERjBGMkVFM0QzNjZBRjU3MEIwMTBBQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkponQEmJAF/8QZnK61yLhZwOsXXIiYuqeHUIsQfeAaYz/s0PN
EORM44pvYqE/69dMFqHbsILYteiWAHRSZPn3kIhBwTnB1h6mxSPvbUEQ2UGcMB6z
TkOF6iPWZtcOHE+Joe28F9sIQ6+5L5SB06TgouAw/e5PNcr2XsOxoNED8xUGR8i5
dxTEvVRbbX1JcE5yEZ7bH8e0MSI/mKm7fe69jVKC3DijLE+TOZNj8kLwOMPsTJdI
hgiPmxfVVrSZPoaXBgJYIADURuQsfF7517xSUBgYw6pWW736vRSPj1najP1yZrkd
GT7AaIJQ107R5p//8BEZt4Ms2y1hZBtcLhATAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAWRF5htKvmLfDy7j02avVwsBCrAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FXUkY1aHRLdm1MZkR5N2ow
MmF2VndzQkNyQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
ATYwDQYJKoZIhvcNAQELBQADggEBACz3RC/FsTINuJjc7waFI4LB0zZ8Rv4MguGQ
IbiJIHY2o0ljJjnH2s5z//bZdS5aRX8XcfiNoMbe49gPO2uaIjSFMPnPPquJMjVx
5jVn1pMqvFMMwfahLa/NwUBe+PAEhWZWgxYPpmK7cU5hfV+8Klp6iWn5gf28FR1o
UGmaP7Y61EinOPMoHI+O+aR/5E6SLZJZE6Din620MqCHMkJbf1iT6QIuXCQzTpI/
ZYlLSjih9k9F/Hufk+q/H6n8g/vf46EJZe1KhMaEcSDVqo/rT6l8UGHVE+RvAYER
VYanvONKJnCQ7nTlC1unPw+uZh0NMju9PAYqxSJOggQLZDbOysw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org