Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VCKzaKMLqtA7N-BCFveawkbaq4E.roa
File:                     VCKzaKMLqtA7N-BCFveawkbaq4E.roa (raw, json)
Hash identifier:          RSTSh7tpKqhp8fNV54yHDxe3rDxqspLw8b4PXZBOUug=
Subject key identifier:   54:22:B3:68:A3:0B:AA:D0:3B:37:E0:42:16:F7:9A:C2:46:DA:AB:81
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1797
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VCKzaKMLqtA7N-BCFveawkbaq4E.roa
Signing time:             Sun 07 Feb 2021 12:20:31 +0000
ROA not before:           Sun 07 Feb 2021 12:20:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        180.176.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6039 (0x1797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 12:20:31 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5422B368A30BAAD03B37E04216F79AC246DAAB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:db:5d:0a:2d:07:d9:0a:cb:6f:70:ff:39:12:
                    0e:2c:34:90:11:a7:cf:ea:00:95:97:c9:20:c9:ea:
                    ae:24:5a:31:25:17:4e:41:76:78:89:2c:06:8b:16:
                    d1:dc:6c:63:b3:34:41:b5:11:9b:91:6d:e7:df:76:
                    3d:f6:b5:cb:bf:76:5e:08:d2:88:d8:e5:e9:fd:19:
                    c4:24:5f:7f:33:8d:97:1b:20:76:40:a2:a2:25:bc:
                    e8:68:b3:97:3d:68:5a:5d:e1:7a:ed:fd:3b:e1:7f:
                    5f:19:b9:a8:d2:42:3c:f3:e0:f3:c6:72:aa:71:27:
                    e2:be:d2:4c:4c:13:40:a9:4f:d0:da:12:3f:4c:70:
                    1a:76:4c:d4:be:b0:0d:30:b9:65:7b:eb:5b:86:d9:
                    b3:55:d6:bf:72:8f:86:dc:c0:9e:66:cb:4c:3d:b8:
                    19:4d:7d:3d:57:5f:60:53:37:db:f5:4c:62:df:77:
                    08:f8:df:bf:05:e9:8c:e6:e7:e5:2f:3f:5c:cc:3b:
                    8b:2d:a8:86:6b:06:a9:fe:2e:ba:39:35:b7:d4:22:
                    31:00:67:e3:66:9e:3f:69:fe:3b:e3:6b:87:8f:43:
                    ce:36:8b:e1:2c:3e:28:4d:d5:57:2a:78:66:cc:75:
                    a2:d8:a1:3d:27:fd:ad:ad:fd:a9:d8:c5:c4:16:e1:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:22:B3:68:A3:0B:AA:D0:3B:37:E0:42:16:F7:9A:C2:46:DA:AB:81
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VCKzaKMLqtA7N-BCFveawkbaq4E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.176.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:91:46:97:f6:e8:be:d5:23:d0:9c:7d:90:96:c3:20:e6:3b:
         71:f5:01:f9:d9:ab:c2:39:34:14:65:6e:bc:a4:4a:cf:18:96:
         85:39:5f:5b:2a:90:3b:7e:bb:a3:f8:e5:5b:58:43:63:02:42:
         ec:2b:69:5c:9e:e7:1c:16:e6:7e:76:5e:c3:d1:c6:55:87:80:
         ff:a4:0a:80:eb:cc:2b:a3:f0:bf:eb:b1:07:47:ef:4a:14:26:
         fe:c8:c2:7c:d2:e6:30:42:06:03:60:4e:9e:72:32:c3:e5:4d:
         84:c2:f2:77:e5:43:b7:53:31:7a:e2:20:8a:4f:99:c6:6a:00:
         53:85:7f:7c:01:ec:97:89:80:dc:b2:69:3c:37:f1:43:86:ea:
         72:1a:6b:99:f7:48:75:ad:9f:d5:43:a8:9a:04:34:66:ba:3d:
         1c:4a:ac:cd:8a:38:f1:f5:17:5f:48:29:a2:5c:ad:ec:a1:75:
         23:6e:44:df:d6:55:c0:6c:5e:81:e0:f1:0d:e1:99:ec:d2:58:
         95:0d:b8:0a:80:bf:8e:e1:88:bd:7d:4c:33:dc:02:67:f3:97:
         27:69:f3:f2:f1:e1:c2:c9:13:a3:86:10:d2:29:e3:b6:a3:a1:
         d5:be:21:71:bb:44:4b:9f:ed:45:ca:73:a6:a3:1c:e0:a8:4d:
         d1:36:37:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICF5cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MjIwMzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU0MjJCMzY4QTMwQkFB
RDAzQjM3RTA0MjE2Rjc5QUMyNDZEQUFCODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm210KLQfZCstvcP85Eg4sNJARp8/qAJWXySDJ6q4kWjElF05B
dniJLAaLFtHcbGOzNEG1EZuRbeffdj32tcu/dl4I0ojY5en9GcQkX38zjZcbIHZA
oqIlvOhos5c9aFpd4Xrt/Tvhf18ZuajSQjzz4PPGcqpxJ+K+0kxME0CpT9DaEj9M
cBp2TNS+sA0wuWV761uG2bNV1r9yj4bcwJ5my0w9uBlNfT1XX2BTN9v1TGLfdwj4
378F6Yzm5+UvP1zMO4stqIZrBqn+Lro5NbfUIjEAZ+Nmnj9p/jvja4ePQ842i+Es
PihN1VcqeGbMdaLYoT0n/a2t/anYxcQW4eixAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVCKzaKMLqtA7N+BCFveawkbaq4EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZDS3phS01McXRBN04tQkNG
dmVhd2tiYXE0RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sPgwDQYJKoZIhvcNAQELBQADggEBADaRRpf26L7VI9CcfZCWwyDmO3H1AfnZq8I5
NBRlbrykSs8YloU5X1sqkDt+u6P45VtYQ2MCQuwraVye5xwW5n52XsPRxlWHgP+k
CoDrzCuj8L/rsQdH70oUJv7IwnzS5jBCBgNgTp5yMsPlTYTC8nflQ7dTMXriIIpP
mcZqAFOFf3wB7JeJgNyyaTw38UOG6nIaa5n3SHWtn9VDqJoENGa6PRxKrM2KOPH1
F19IKaJcreyhdSNuRN/WVcBsXoHg8Q3hmezSWJUNuAqAv47hiL19TDPcAmfzlydp
8/Lx4cLJE6OGENIp47ajodW+IXG7REuf7UXKc6ajHOCoTdE2N7E=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:30 2023 by rpki-client on console-fra.rpki-client.org