Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VyL1rdeCR1yzUMNcX5f2D_SqgOw.roa
File:                     VyL1rdeCR1yzUMNcX5f2D_SqgOw.roa (raw, json)
Hash identifier:          M0BJE84/KznUzFS0Jt+PXpgW2MZnQ95x0nuqv85+SOI=
Subject key identifier:   57:22:F5:AD:D7:82:47:5C:B3:50:C3:5C:5F:97:F6:0F:F4:AA:80:EC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VyL1rdeCR1yzUMNcX5f2D_SqgOw.roa
Signing time:             Thu 15 Sep 2022 02:46:01 +0000
ROA not before:           Thu 15 Sep 2022 02:46:01 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        211.76.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8096 (0x1fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:46:01 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5722F5ADD782475CB350C35C5F97F60FF4AA80EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:03:5a:05:5c:fb:2f:34:75:07:ed:75:a6:
                    24:10:ef:c3:83:34:5f:59:5a:06:29:6e:ec:5c:7d:
                    17:32:cc:b4:16:92:62:80:c0:bf:db:d2:52:1e:2f:
                    64:a5:8f:db:a2:e8:aa:87:20:74:71:30:ce:83:52:
                    51:3f:91:dd:12:22:ce:4d:b4:b9:d4:88:04:b9:d5:
                    20:8f:e0:a2:74:71:40:63:ae:3a:d2:2e:26:a9:4b:
                    4c:37:74:f3:dc:08:4f:96:be:3a:20:31:d5:f4:93:
                    aa:78:86:35:1e:eb:bc:64:65:4f:c5:68:b9:f1:f6:
                    ed:d9:af:64:73:bb:9a:0d:d3:c3:2b:1b:b5:27:d0:
                    a3:34:e8:8b:e2:a5:29:16:59:ef:4c:c8:26:cf:27:
                    d5:cc:78:ca:26:8b:9b:1b:f7:c3:7d:e4:37:49:67:
                    9c:59:02:8e:8d:70:a8:12:33:73:82:3e:de:57:91:
                    99:1e:7e:09:16:8b:b3:bb:16:35:13:64:42:2d:a4:
                    72:47:10:2b:88:ce:10:d8:5a:34:b2:e6:02:ff:21:
                    9d:5a:7e:db:eb:ec:89:bf:da:35:3e:e1:2d:66:c5:
                    41:be:2c:d0:15:91:f6:19:4c:58:0e:e9:0a:cd:c8:
                    15:7a:59:80:e7:79:e7:49:b8:8a:3c:6c:39:0a:47:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:22:F5:AD:D7:82:47:5C:B3:50:C3:5C:5F:97:F6:0F:F4:AA:80:EC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VyL1rdeCR1yzUMNcX5f2D_SqgOw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:97:03:d1:af:f9:ad:6c:bb:7b:f2:54:ed:b0:3c:4d:5a:e9:
         f7:19:44:0a:2e:c6:0b:11:53:d7:ad:0f:01:90:83:61:dd:4b:
         2e:1e:87:d7:4e:93:c9:eb:a4:90:1f:3b:6a:f1:58:32:93:d3:
         8b:53:9e:45:4a:00:95:71:3f:97:06:0b:02:c0:5d:f3:6c:eb:
         68:59:3a:bb:ee:b3:19:b5:33:89:65:8d:1f:e2:fa:c2:ec:15:
         b5:0d:da:63:24:11:33:97:ec:a6:73:dc:1c:5c:65:0a:00:4c:
         f4:7c:be:60:77:cc:52:d5:2b:10:2e:af:28:23:fc:fa:59:79:
         5e:a7:84:5d:c8:a4:cd:69:7a:b6:68:f9:5d:f3:f8:16:59:9e:
         0f:f6:75:02:b8:a3:32:ae:41:d1:ea:14:83:db:e7:a0:e2:53:
         1d:6d:90:01:e8:17:fd:c5:d1:8e:19:7c:57:ed:e8:af:c6:34:
         02:2c:01:f1:58:84:60:40:18:2d:2e:ce:7f:ad:68:c7:b8:57:
         48:0d:62:e0:31:99:19:3d:10:6d:6f:19:0c:75:b4:4a:af:10:
         2e:55:40:f5:55:4c:94:c9:41:da:c4:8d:bd:86:e2:14:2d:5d:
         4a:fa:bb:ec:d7:0f:7b:de:a5:22:81:22:91:9c:54:d8:4c:0d:
         cc:c3:e7:02
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU3MjJGNUFERDc4MjQ3
NUNCMzUwQzM1QzVGOTdGNjBGRjRBQTgwRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClqgNaBVz7LzR1B+11piQQ78ODNF9ZWgYpbuxcfRcyzLQWkmKA
wL/b0lIeL2Slj9ui6KqHIHRxMM6DUlE/kd0SIs5NtLnUiAS51SCP4KJ0cUBjrjrS
LiapS0w3dPPcCE+WvjogMdX0k6p4hjUe67xkZU/FaLnx9u3Zr2Rzu5oN08MrG7Un
0KM06IvipSkWWe9MyCbPJ9XMeMomi5sb98N95DdJZ5xZAo6NcKgSM3OCPt5XkZke
fgkWi7O7FjUTZEItpHJHECuIzhDYWjSy5gL/IZ1aftvr7Im/2jU+4S1mxUG+LNAV
kfYZTFgO6QrNyBV6WYDneedJuIo8bDkKR5pLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVyL1rdeCR1yzUMNcX5f2D/SqgOwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1Z5TDFyZGVDUjF5elVNTmNY
NWYyRF9TcWdPdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THAwDQYJKoZIhvcNAQELBQADggEBALaXA9Gv+a1su3vyVO2wPE1a6fcZRAouxgsR
U9etDwGQg2HdSy4eh9dOk8nrpJAfO2rxWDKT04tTnkVKAJVxP5cGCwLAXfNs62hZ
Orvusxm1M4lljR/i+sLsFbUN2mMkETOX7KZz3BxcZQoATPR8vmB3zFLVKxAurygj
/PpZeV6nhF3IpM1perZo+V3z+BZZng/2dQK4ozKuQdHqFIPb56DiUx1tkAHoF/3F
0Y4ZfFft6K/GNAIsAfFYhGBAGC0uzn+taMe4V0gNYuAxmRk9EG1vGQx1tEqvEC5V
QPVVTJTJQdrEjb2G4hQtXUr6u+zXD3vepSKBIpGcVNhMDczD5wI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org