Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a6RA1zmwt5AajKUhujBL34kwPH4.roa
File:                     a6RA1zmwt5AajKUhujBL34kwPH4.roa (raw, json)
Hash identifier:          DgyE12WWdMC4lDeS7j+Tf0oqKjMYsOZQpsYeEL0zCeI=
Subject key identifier:   6B:A4:40:D7:39:B0:B7:90:1A:8C:A5:21:BA:30:4B:DF:89:30:3C:7E
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E2D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a6RA1zmwt5AajKUhujBL34kwPH4.roa
Signing time:             Tue 29 Sep 2020 09:55:26 +0000
ROA not before:           Tue 29 Sep 2020 09:55:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.56.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3629 (0xe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6BA440D739B0B7901A8CA521BA304BDF89303C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:96:0f:d0:16:bf:2a:ca:f3:66:b0:a9:98:
                    6c:fe:b4:f7:09:4e:82:bd:ae:3b:e2:21:78:1d:67:
                    96:8e:04:49:b6:c5:04:01:cd:28:05:01:71:c5:44:
                    f5:5d:f4:33:1d:46:6e:78:a8:d0:c5:9d:74:91:c4:
                    83:1c:66:30:06:7d:48:e2:bc:ca:70:ef:9e:85:55:
                    50:bd:4f:2b:8e:fb:1a:53:44:e8:1c:e9:16:00:4b:
                    69:e6:6b:c6:69:08:5a:58:cc:92:68:41:64:a9:11:
                    65:8c:20:e6:56:be:46:b4:dd:0f:c3:cf:ea:d5:92:
                    de:13:d9:3f:08:42:49:b7:3f:58:2f:89:40:03:a8:
                    61:b7:03:6e:fd:99:66:45:6a:e6:46:8c:4f:7c:e3:
                    63:46:a9:ba:6c:39:01:fc:30:09:f4:77:e0:a6:fc:
                    42:ac:8b:07:a8:cb:25:e8:90:ed:2c:1c:2a:d2:0e:
                    b3:03:bf:23:fb:af:dc:f1:90:64:cb:b3:21:cc:17:
                    95:01:65:e2:d3:be:5f:da:b1:33:32:79:8a:04:96:
                    28:57:02:a0:26:f5:8b:a2:d5:d7:d4:b8:85:60:a8:
                    39:c0:a2:ba:63:4c:6c:4d:af:22:f5:2f:5b:5d:48:
                    87:95:d9:2d:65:f2:ee:ff:12:4c:9f:53:f6:72:2c:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A4:40:D7:39:B0:B7:90:1A:8C:A5:21:BA:30:4B:DF:89:30:3C:7E
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a6RA1zmwt5AajKUhujBL34kwPH4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:6e:95:06:81:3f:1c:1a:70:89:e6:0f:14:57:6b:57:3f:
         d4:5a:d7:5d:cd:7c:ad:84:bc:03:d9:04:ab:6a:18:2b:73:ad:
         94:91:0e:ad:d1:55:8a:8f:c5:d7:bf:90:b4:56:02:b2:e4:ef:
         92:3e:bb:0f:06:07:c3:c9:16:f3:0a:02:15:2c:c3:29:61:9e:
         b4:1b:e0:75:46:ef:b2:22:57:2a:89:05:b5:45:5a:08:57:3e:
         3d:54:1a:c6:5e:f2:91:80:32:e6:5a:48:9b:fd:9f:58:43:a1:
         c3:20:c5:10:77:cd:5e:90:22:2f:1d:e1:63:3a:9d:65:7a:0c:
         0c:4b:13:53:27:6a:08:84:fc:ca:16:7c:91:3b:24:16:86:2e:
         b1:02:ae:42:25:c0:08:e1:79:00:9b:8f:7a:ac:2f:0f:87:90:
         99:78:48:b3:5a:63:68:39:68:70:16:3c:86:cf:33:a1:34:f5:
         52:cd:b7:64:4c:6e:36:08:d0:a5:ab:c6:3e:07:14:31:ae:5b:
         28:e3:55:9b:74:e5:ac:ab:a6:bf:a0:f2:9e:3f:9e:6b:bf:fa:
         3f:2c:fc:e7:64:ad:d5:ee:58:08:8c:8e:88:f4:a3:8e:e6:11:
         9d:dc:44:1e:43:be:6f:e2:57:b6:05:26:fd:1a:24:b9:42:c6:
         9e:66:70:d0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MjZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDZCQTQ0MEQ3MzlCMEI3
OTAxQThDQTUyMUJBMzA0QkRGODkzMDNDN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCthJYP0Ba/KsrzZrCpmGz+tPcJToK9rjviIXgdZ5aOBEm2xQQB
zSgFAXHFRPVd9DMdRm54qNDFnXSRxIMcZjAGfUjivMpw756FVVC9TyuO+xpTROgc
6RYAS2nma8ZpCFpYzJJoQWSpEWWMIOZWvka03Q/Dz+rVkt4T2T8IQkm3P1gviUAD
qGG3A279mWZFauZGjE9842NGqbpsOQH8MAn0d+Cm/EKsiweoyyXokO0sHCrSDrMD
vyP7r9zxkGTLsyHMF5UBZeLTvl/asTMyeYoElihXAqAm9Yui1dfUuIVgqDnAorpj
TGxNryL1L1tdSIeV2S1l8u7/EkyfU/ZyLBFTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUa6RA1zmwt5AajKUhujBL34kwPH4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2E2UkExem13dDVBYWpLVWh1
akJMMzRrd1BINC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
ATgwDQYJKoZIhvcNAQELBQADggEBABR9bpUGgT8cGnCJ5g8UV2tXP9Ra113NfK2E
vAPZBKtqGCtzrZSRDq3RVYqPxde/kLRWArLk75I+uw8GB8PJFvMKAhUswylhnrQb
4HVG77IiVyqJBbVFWghXPj1UGsZe8pGAMuZaSJv9n1hDocMgxRB3zV6QIi8d4WM6
nWV6DAxLE1MnagiE/MoWfJE7JBaGLrECrkIlwAjheQCbj3qsLw+HkJl4SLNaY2g5
aHAWPIbPM6E09VLNt2RMbjYI0KWrxj4HFDGuWyjjVZt05ayrpr+g8p4/nmu/+j8s
/OdkrdXuWAiMjoj0o47mEZ3cRB5Dvm/iV7YFJv0aJLlCxp5mcNA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:35 2023 by rpki-client on console-fra.rpki-client.org