Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FV76_8aM8kc_4byvFIFssG250QE.roa
File:                     FV76_8aM8kc_4byvFIFssG250QE.roa (raw, json)
Hash identifier:          5oz73UDaMOLQDoBM7papTVwfq/HKV+HanYbCgWE+Kz0=
Subject key identifier:   15:5E:FA:FF:C6:8C:F2:47:3F:E1:BC:AF:14:81:6C:B0:6D:B9:D1:01
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1D1E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FV76_8aM8kc_4byvFIFssG250QE.roa
Signing time:             Wed 29 Sep 2021 02:48:38 +0000
ROA not before:           Wed 29 Sep 2021 02:48:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        118.232.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7454 (0x1d1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:48:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=155EFAFFC68CF2473FE1BCAF14816CB06DB9D101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cc:07:4e:1f:15:ee:04:2f:98:42:bf:d7:5c:
                    7e:af:2b:ab:26:b3:5a:4a:71:28:49:78:06:c4:23:
                    5f:d5:97:c1:7e:32:d3:c8:21:1a:18:cf:70:d9:b8:
                    73:bd:50:70:ec:83:6b:a5:4c:9f:5e:70:82:a4:de:
                    d9:1f:c7:c9:06:c8:6f:76:df:b4:52:33:3a:dc:ae:
                    f0:ec:ec:23:cb:a7:f6:e7:e8:60:58:4a:b0:c0:af:
                    cc:29:95:50:45:9e:28:fb:81:85:18:dd:8b:2f:f0:
                    23:67:fb:d3:bd:ee:d9:8e:41:f2:34:95:71:54:cb:
                    21:60:92:26:7d:3a:22:d8:c5:42:ee:dc:ca:43:9a:
                    fd:9a:f7:89:09:2c:b1:af:0c:89:f7:54:15:c0:51:
                    4a:4d:39:0e:4b:ee:36:8c:df:1b:8a:66:b9:d4:bd:
                    b1:48:79:6e:67:0a:38:3c:2a:2f:e1:75:96:6a:9d:
                    59:9c:9d:e3:e2:5b:4e:eb:11:ec:74:9b:4b:16:5b:
                    19:0b:72:98:2b:aa:f1:1e:2c:8c:0c:d4:c9:e0:d1:
                    0c:16:c2:0f:f9:44:de:15:8d:f5:d3:de:e6:48:c6:
                    1b:dd:c7:cb:75:8c:c9:8c:02:e9:75:88:c2:95:9b:
                    3e:5a:cb:bb:d3:e9:d6:1b:0a:73:f1:f8:41:d7:b5:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5E:FA:FF:C6:8C:F2:47:3F:E1:BC:AF:14:81:6C:B0:6D:B9:D1:01
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FV76_8aM8kc_4byvFIFssG250QE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:9f:03:94:05:ef:b8:b4:1a:6a:b8:3f:6d:d2:a4:95:32:ad:
         0e:5e:a6:50:24:ea:78:26:53:74:72:9c:54:d1:cd:d2:26:3e:
         9e:48:30:f4:c1:97:51:00:e3:80:c2:3a:0f:44:80:14:5f:5d:
         5e:0d:7f:c4:0d:53:cd:e7:18:2a:6a:89:85:cd:22:4a:67:46:
         2e:21:fe:2c:96:95:3d:47:91:05:1f:e6:90:a3:89:04:fa:bf:
         45:0c:33:cd:01:4a:cf:7a:3d:6e:30:1e:5b:ac:61:4e:7d:53:
         e1:b4:47:00:06:24:10:cd:dc:0e:8d:e3:ca:9a:f6:38:fb:aa:
         a7:08:30:b5:d7:2e:a0:39:3f:0a:b1:65:5f:7b:18:3a:2e:3c:
         0c:b6:1d:ae:79:98:1d:24:30:b5:e5:4b:f8:4e:00:0d:df:13:
         40:8e:fd:fb:f0:ac:a6:c4:fb:32:6e:b4:0a:ff:d7:b9:00:1a:
         8d:3e:a8:c8:2f:54:6b:73:3e:b8:97:b9:34:d0:56:eb:0e:dc:
         5a:07:c6:b0:b7:9d:48:ca:45:d9:ed:95:fe:1d:fa:f6:55:b0:
         24:2a:05:59:3d:be:61:10:32:84:db:4a:f8:c6:c5:b4:e8:f4:
         f1:39:dd:93:81:27:a6:cc:49:5b:b0:a6:e8:46:9b:e1:5a:0b:
         fa:6e:02:22
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ4MzhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDE1NUVGQUZGQzY4Q0Yy
NDczRkUxQkNBRjE0ODE2Q0IwNkRCOUQxMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgzAdOHxXuBC+YQr/XXH6vK6sms1pKcShJeAbEI1/Vl8F+MtPI
IRoYz3DZuHO9UHDsg2ulTJ9ecIKk3tkfx8kGyG9237RSMzrcrvDs7CPLp/bn6GBY
SrDAr8wplVBFnij7gYUY3Ysv8CNn+9O97tmOQfI0lXFUyyFgkiZ9OiLYxULu3MpD
mv2a94kJLLGvDIn3VBXAUUpNOQ5L7jaM3xuKZrnUvbFIeW5nCjg8Ki/hdZZqnVmc
nePiW07rEex0m0sWWxkLcpgrqvEeLIwM1Mng0QwWwg/5RN4VjfXT3uZIxhvdx8t1
jMmMAul1iMKVmz5ay7vT6dYbCnPx+EHXtbM3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFV76/8aM8kc/4byvFIFssG250QEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ZWNzZfOGFNOGtjXzRieXZG
SUZzc0cyNTBRRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6GAwDQYJKoZIhvcNAQELBQADggEBAHWfA5QF77i0Gmq4P23SpJUyrQ5eplAk6ngm
U3RynFTRzdImPp5IMPTBl1EA44DCOg9EgBRfXV4Nf8QNU83nGCpqiYXNIkpnRi4h
/iyWlT1HkQUf5pCjiQT6v0UMM80BSs96PW4wHlusYU59U+G0RwAGJBDN3A6N48qa
9jj7qqcIMLXXLqA5PwqxZV97GDouPAy2Ha55mB0kMLXlS/hOAA3fE0CO/fvwrKbE
+zJutAr/17kAGo0+qMgvVGtzPriXuTTQVusO3FoHxrC3nUjKRdntlf4d+vZVsCQq
BVk9vmEQMoTbSvjGxbTo9PE53ZOBJ6bMSVuwpuhGm+FaC/puAiI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org